last executing test programs: 1m41.167458302s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 1m35.109506203s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 1m15.911855565s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 1m7.875449833s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 56.09267031s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 53.361078718s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 40.26631168s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21acbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8daef3927ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a97d4d46b8b406091be9433f950613083805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a83262981638ae365b2611d2b50c5f000000d620e2a52db428", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 37.991681193s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 26.940836137s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21acbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8daef3927ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a97d4d46b8b406091be9433f950613083805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a83262981638ae365b2611d2b50c5f000000d620e2a52db428", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 26.235601995s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 11.761899716s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x5fe1d000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x215}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x30, r3, 0xb97534d5fe9700cf, 0x70bd2a, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 11.039277113s ago: executing program 4 (id=480): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xae, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0x0, @remote, @local, {[@fragment={0x2b, 0x0, 0x3, 0x0, 0x0, 0x1, 0x67}, @hopopts={0x2c}, @hopopts={0x3a, 0x2, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0xfff}, @jumbo]}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0x4, 0x9, 0x2, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x20, '\x00', r5, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r3, 0x0, &(0x7f0000000540)=[r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, r2], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 1.885770556s ago: executing program 0 (id=1278): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c}}) sendto$inet(r1, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000640)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000034"], 0x18}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002020752500001600002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000"], &(0x7f0000000080)='syzkaller\x00', 0x260, 0x0, 0x0, 0x41100, 0x20, '\x00', r11, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x3, 0x1, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000140)=[{0x2, 0x3, 0xb, 0x6}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x0, @void, @value}, 0x90) 1.571693119s ago: executing program 0 (id=1281): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) 1.568149161s ago: executing program 1 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@local, r2}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0x24, &(0x7f0000000540), 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000019010000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a640000001100010000000000000000000000000a"], 0x64}}, 0x0) 1.496799911s ago: executing program 3 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x6000000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.435657779s ago: executing program 0 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300)='@', 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.390449875s ago: executing program 1 (id=1285): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001800000225bd7000fedbdf2580100001fc00c8080005000008000400", @ANYRES32=r1, @ANYBLOB="080007007f00000108000500ac14142b06001500020000000c000900ff030804", @ANYRES32=r1, @ANYBLOB='\b\x00K\x00\x00\x00\x00\x00'], 0x60}}, 0x0) 1.357174224s ago: executing program 0 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x8000, 0x0, 0x7a00ef98, 0x1, {{0x14, 0x4, 0x2, 0x2a, 0x50, 0x68, 0x0, 0xc0, 0x29, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x13, 0x4e, [@empty, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @multicast2]}, @cipso={0x86, 0x17, 0x1, [{0x0, 0x11, "d0d83e46c82854dd199c7afe2cef51"}]}, @generic={0x7, 0x10, "4338511efb43ee0d0f4fcb3b35e5"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x30, 0x1a, 0x20, 0x70bd27, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x2, 0xfc, 0x0, 0x0, 0xb, 0x1000}, [@RTA_MARK={0x8, 0x10, 0x9}, @RTA_MULTIPATH={0xc, 0x9, {0x30, 0x4, 0x7f, r1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="4a90bc8af2b569cbb15c1367a9e88b5f42bfcc107760044d8286c6a0da637d3e79e13acc7fa2a7a259129c4d2a0a96fce3245afd697e8f0e1eb98747f4e3ad1d240306255f3034fdd836db1b1c8f99c02b9f075712348a25b943f6c8725b4dc62fda8d7c1ada9649f689be5ac1e04656f25b4207ed6735a0ddbec8cbee554d7307d0dc43bce0b06cbe24c614e363be1b352c5eab558fc62236dea0da8fbc4d4b77667c6d839f29c6d972f7ff5c", 0xad}, {&(0x7f00000002c0)="bbb83c34f45d9a82e1851514fba9d3278bd4f5406f38052e56523b3bd2e72f7d41fae18063c478527f3a7044509849ba1f191524c8f7dde5537a6cd3f797fa0a39d0a86a6f", 0x45}, {&(0x7f0000000340)="15e51b5b461163c7eae31b9e5ab0a0c981bb52723517ab2b2cccca2827fdfc6ce2f4a1e31e1a89814a6b2153ed2051a73ffd89b2013d6fbe802c9cba42acb507823fb08ca8e3c57663844e1e98e3e2926ebfc149a0e760fd7ff72fa6c9968a550b6d6c1a92006c8d0f2b3e224fe5ca2c7909f0a3917dc0824150085550441c0d98d8e959e4ed", 0x86}, {&(0x7f0000000400)="8a8f8aaece31ccb511489c9aa2e160c24110625fe80e4d6d43817c25f7731e65e819a22ba29ee5a3446c766f7fb29cb8a6b62035d1ae8ef0a1d78a9be067b5cb21ce3c368d71e003ee3a9c17de892a6be29a331603fbefd88d980c13112df7a696d8fa1dddc3a441d1d138592308fea7a75d4e75e7f220d3618abb9f32cce0a4e019bc5ece3a6bb3dac39ae6e09dde83bcbebbf76780f811baabe4d56d4f9f1a8adacd", 0xa3}, {&(0x7f00000004c0)="0d5799232cd25d5effa06da5a7bce5fc52e08db90eee86e347851ef37b455b5847133d161f0a33ccff5741eae8c7958b47acbdd9c87ded94aa8d3c82215b33613cb21ed415031e60ae4ddc3cb58253334cb240a9ca070ebc3a647b1d88f8f7e7751f342514637be989cdfd87f9083ddc4f863c593c7f48c00564c8666f9293e6e784495f9d0cbfb79ebd6c402bd6b6c857299a0ddfd2bc46e2774523d0facc1aa418affb996ae1375a100d28bba46b2e4f9eccb929f1655290fb47265614c66fb9139fa17c6fd12c622304422e8ae300f983e2ab60f5a76e80652415e0ee9faecb93cb60", 0xe4}, {&(0x7f00000005c0)="788899e1150d1af9501bf0c8eebf43ba0728b379fd2df4fc96d64b4df57dcb05ea9199fb0a3d92d5616447c8de74c41c177d18b5916d9e99ca50cd4c61b0a5e9901d182d8963c7dde26e2c2f985d316dfbb6e372df4598685f0d02fe300ee02818c0775765a91e589f43", 0x6a}, {&(0x7f0000000640)="f32f", 0x2}, {&(0x7f0000000680)="1a6e2f2ad6d4fa72493cf3ab0876cc3d6600365f34adfe69b4cfc0cef729f14c0e1b1b20ddebd04a0f4886fa23e0453ffd936e30061de9f154f064f19e784cc7c9fb8f8f10a0e34260193e9e5c923f8732809b731517d9b37c0108e086108bdbe4a098d789d537e461e66854cbd2c614d20ba9853e2314ddfc951bc773e3f0914b3da76dd028c8a43eef591be0a84426271b444bb29c2d9e6d6a55fcc7a51f43a9671d4b9b8cd9540a2b64", 0xab}], 0x8, &(0x7f00000007c0)=[{0xf8, 0x1, 0x24000, "5a088ff9fc912872f6281b557aa33519013897cd1abf257503075590ba9eb1580800e372c935fd32eae83201499548f0c97e3ece4b7f73a12ed7ac186170c7ade3067c2fc7334b5125c2b80366f7dd537fd4508d8b4018bf16eb0fd326daff034ae231ecbe525b597c7bbb8df412a6cbefca01c428488ef803e3b568327d08e81003e7b88bd37c7fb5ca6367599b1029056710ff2699a306b112e243ec96830ae445ac19cca3024f09936afc8cf8e7a2166b5b709958d86c9aa0156525be20bb23e89d8bd82bdc397b3c19240a99275c3228862b81adfe8b687d24997ff13f4bce2bd8"}], 0xf8}}], 0x1, 0xc5) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000980)={&(0x7f0000000900)=""/86, 0x56}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r4, &(0x7f00000009c0)=""/32, 0x20, 0x1, &(0x7f0000000a00)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000a40)=0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000a80)={0x0, 0x6}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000b00)={r5, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x9}}, 0x7, 0xd4, 0x7, 0x87d7, 0x1, 0x10, 0x9}, 0x9c) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000bc0)={'security\x00', 0xb6, "36d276b5edbc795633a438af3d41696641c8a8700d954dbda873f48c778ce5b03406a6b547c8e3cbd5bf4b6a815902165f898b4dd1a0d2f24ba98e1b791d07dbe00b7dea2bbd17aebd3d07bd0256f080bd4856498ad068dae4d0e9a9ac96eead3d5f89191f29320330eb64b7e2e5ee7ea5942accd3adca4da75d3cd870a8d4c08decdefc5b9e232c749b2885078ed5a2c9b8bf0e07eb899fa4ca335dda91bbd72765c33d4cda1db9024ca6840011c0b1539018c5bba9"}, &(0x7f0000000cc0)=0xda) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@delrng={0x10, 0x14, 0x8ec0b7d5be57d8ab, 0x70bd2a, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x4800) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000e00)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000e40)=0x1c, 0x80400) setsockopt(r7, 0x2, 0x9, &(0x7f0000000e80)="1d17aa9dff53b748557416cde8b39e27888ff25dd1c76c96515ba0febd0a9e5eeaefc397448abbb10d469b28ffe3e9675f5ec2a5fb6ac1b3516a8abe12bcaccef98271b6ab015ee06967a1d007ef87a601c75253fe2f784c33c6bafc0a28c500d8bb0ad48229df98bf88689dd5cf1bef32bb7fec06ebbaf077edf413a46d33f8ecb919a93c37fe7434ef685ea1babfc059f0e39f7705298d5373a489c75c0f427e41b7d2645e8b0b6b6eeb5985a28ee2e88b75ccf35df70d", 0xb8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xa8, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x41}, 0x880) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000001100)='ns/user\x00') ioctl$NS_GET_PARENT(r11, 0xb702, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r8) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r12, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", ""]}, 0x24}}, 0x40000) r13 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000001280)={r8}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r14, 0x89fb, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x31}, 0x18, 0x8}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040884}, 0x40) 1.272482236s ago: executing program 1 (id=1287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000004800010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000000800020000000000080002000000000014000100fe800000000000000000000000000000080002000000000014000100ffe5"], 0xa0}}, 0x0) getpeername$netrom(r3, &(0x7f0000000000)={{}, [@rose, @null, @null, @null, @default, @netrom, @rose, @rose]}, &(0x7f0000000080)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008000f000500000008000e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r8, 0x701}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.271262074s ago: executing program 3 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x5, 0x6, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, {[@ssrr={0x89, 0x7, 0x4b, [@empty]}, @noop, @lsrr={0x83, 0x7, 0x71, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0x13, 0x3, 0xa, [{@rand_addr=0x64010101, 0x7f}, {@empty, 0x100}, {@multicast1, 0x6de}, {@rand_addr=0x64010101, 0x2}, {@empty, 0x1000}, {@multicast2, 0xa514}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xaa, 0x3, 0x8, [{@remote, 0x40}]}, @noop]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8001, 0x40, {{0x51, 0x4, 0x1, 0x33, 0x144, 0x64, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, {[@timestamp={0x44, 0xc, 0xdf, 0x0, 0x7, [0x9, 0x80]}, @ssrr={0x89, 0x1f, 0xf5, [@empty, @multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x2, [{@empty, 0xe0e}]}, @lsrr={0x83, 0x7, 0x19, [@broadcast]}, @noop, @timestamp={0x44, 0x10, 0xa5, 0x0, 0x8, [0x0, 0x10, 0x7]}, @cipso={0x86, 0x7a, 0x2, [{0x1, 0xa, "f05aa41f5623da96"}, {0x7, 0xd, "a0f72769395a5dd7921d78"}, {0x2, 0x11, "d393d5474c133c41b51247d860b419"}, {0x7, 0x11, "4281ab8c5b543b5e13d1a185f69167"}, {0x0, 0x11, "814b5a1d494888f9d43ed06d98390d"}, {0x1, 0xc, "badc5a35e90bdcd23bdb"}, {0x1, 0x5, "11c0f8"}, {0x7, 0x10, "eb1e58edd5ccce9543c409e6941f"}, {0x5, 0x9, "cf26c3a1f6976d"}]}, @timestamp_prespec={0x44, 0x3c, 0x1b, 0x3, 0x8, [{@multicast2, 0xffffffff}, {@remote, 0x8}, {@local, 0x2}, {@rand_addr=0x64010102, 0x4}, {@loopback}, {@private=0xa010101, 0x1}, {@loopback, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x71, 0x1, 0x9, [{@multicast1, 0x3ff}]}, @lsrr={0x83, 0x1f, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 1.067021719s ago: executing program 0 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000040), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000200010040ffbe8c5ee1768810002bdf0101000a000002a257fce42de04bd65ad902a42d6a880000d6c8db0000dba67e06020000e28900000206ed01800a000000fc0607bdff59100ac45761547ae81f009cee4a5acb3da40000048d9d764f00c88ebbf9315033bf79ac2dfc0601150039f2ff0000000000ea000000000000000062068f5ee50ce5af9b1c568311ffff02ff030000ba000840024f0298e9e9053d062a80e60500117a954f618b279116f6bf577f", 0xb8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e657665ff0f04000280"], 0x34}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="3ff192d2c08a02b712dabb913c6ee439", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="3ff192d2c08a02b712dabb913c6ee439", 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="ed46060e67ea6508b20149b372984f8bc064e2610eb46966ae026e415ad23c39d7b317d33e85d21767b7994fb8b4787bb811c83434a3ba6f3116bb630f699b41671d850fd1545a791751a6ed5f82a9dd9b72e068b79ad28b3bff0d3d16b4c1c4892366631dc9b2efb61c832ec0", 0x6d}, {&(0x7f0000000180)="20f7a03b9eb08a9ca8a35447173e33635db8da0bfb4a56470d35fffc15a8fc444980c84cab71f21c1533fcfe48aca0b86f1c4a6f83060ac4a023fc81713365db09351f0e9b60f453f52c20d5186370191d6a34cf80d5b8b1cc9f09f1274f718d9248de9f72bbd466f85eeedc389984e4a10b238afe6a2ea7c4e82b0bdd57c4de6dc016379fedaea4e222e1dc41f372a89b59d49e719bd0c7761c5703a7def7ec194ddb03b0205dad97b3ada09a6dbc8656bb9790d076a92f3f1c355b529e13c962cbd265e71734d904336eebad30b2d94be51236809bd74741ec19b11ac9f6f90f1017f51e741b24d16cc972", 0xec}], 0x2) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="ed46060e67ea6508b20149b372984f8bc064e2610eb46966ae026e415ad23c39d7b317d33e85d21767b7994fb8b4787bb811c83434a3ba6f3116bb630f699b41671d850fd1545a791751a6ed5f82a9dd9b72e068b79ad28b3bff0d3d16b4c1c4892366631dc9b2efb61c832ec0", 0x6d}, {&(0x7f0000000180)="20f7a03b9eb08a9ca8a35447173e33635db8da0bfb4a56470d35fffc15a8fc444980c84cab71f21c1533fcfe48aca0b86f1c4a6f83060ac4a023fc81713365db09351f0e9b60f453f52c20d5186370191d6a34cf80d5b8b1cc9f09f1274f718d9248de9f72bbd466f85eeedc389984e4a10b238afe6a2ea7c4e82b0bdd57c4de6dc016379fedaea4e222e1dc41f372a89b59d49e719bd0c7761c5703a7def7ec194ddb03b0205dad97b3ada09a6dbc8656bb9790d076a92f3f1c355b529e13c962cbd265e71734d904336eebad30b2d94be51236809bd74741ec19b11ac9f6f90f1017f51e741b24d16cc972", 0xec}], 0x2) 1.010208059s ago: executing program 3 (id=1290): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1e, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x194, r2, 0x906, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa84}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x1ff, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1}}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 903.429683ms ago: executing program 3 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 862.851852ms ago: executing program 1 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x70, r1, 0x101, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc5436e2eb"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "e3cdbfe839ee53d3"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80804}, 0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x9c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2d, 0x2, 0x4, 0xffffffdc, 0x66, @mcast1, @mcast1, 0x80, 0x7, 0xfffffffd, 0x8}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000", @ANYBLOB="88eda5ecfc0aafcf46fb9b0979f6d0d5cb0c6b95c8cf549be8ed1c9a3fff9684cb174051e8c6f2f7e4321aec0e2169b564e7847ae719d222360027f9226e18d2f2aaa5e4d751b0b88708774e0d926c2786a482b5ce4246d3fcfe5fcf617a034d83a059fa0a5d8429974afe9149bb91", @ANYRES16, @ANYRES32=r6, @ANYBLOB="080001", @ANYRES32=r5, @ANYBLOB, @ANYBLOB="08000300", @ANYRES32], 0xb8}}, 0x5) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0xa, &(0x7f0000000440)=[{0x6, 0x97, 0xf, 0x32}, {0x8, 0xff, 0x4, 0x7ff}, {0x7, 0xf, 0x2b, 0x3ca}, {0x8, 0x0, 0xfc, 0x5}, {0x1, 0x86, 0x7, 0x1194c734}, {0x9, 0x3, 0x0, 0x2}, {0x6, 0x2, 0x2, 0x9}, {0x3, 0x3, 0x7, 0x7}, {0x2, 0x6, 0xd, 0x4}, {0x7, 0x0, 0x4, 0x9}]}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_1\x00', 0x8000}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 745.810755ms ago: executing program 0 (id=1293): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000003b63d33000000f3fffffffffff7ca44b8874fdf8a"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x200, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x20, 0xf, 0xff, 0x4, 0xfd, 0xb, 0xc00}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000080)=0x39) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1f04000000000000007900b9aab6cdb889b915500e007963d1e53e0668365e870ad1aa3c9d4f7f2232840055e66669e8d48a75af7e0a2eee6f16bb86bf5c9a11a8f40464db7c77b4448301bb26ecbffa5d37f206f19debb622fe8feb420a669ff8fec00660b1e1abbf6d53a929f93b901d0c960a32e959b63468e5ee576543215bb8d10d6d38bf402c5bcb63e5df3f5e5e2e02b3fe04f757ef4d09162fe90d6663772ee000e8cc8c6598aefbb54069e37b90b6beac402e3a83693e91479f9aaf3e182d7eca219d115dcd1cc44fc028c89c0beb6d52c299fc440afeee48b574a7bfb319c8319c83661dfd"], 0x0) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={0x0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x25, 0x2008, 0x0, @value}, 0x20) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a32000000000500784e25de24238c93e18cc6be804616d904000000000005000100060000001400078008000640000000000800134000000000000000000a00000012000300686173683a6e65742c706f7274000000f0df9b30cd7ae7a9bfa383c4a4a0ca452c0f7496adb2dec86e31d136e1617176b84a5239d18fdc8cf0f4bc369561f5aa83b3689ce40e13db43eca4d505ac70c591c7700a3221186e1bb897abe7c7104416543dc37c774e0ac814606746aec7c3d443c260b9adb19547decfacb43bd198ebd6330eb238954e8042ee6a07d2e6bca3a32225afee41cf497bf858fcdac1ff31beba58aa94cc215aca94bc05f4e8ce884369ee79d0b57fb0930b9250359ca9fad2d383"], 0x60}}, 0x0) r10 = socket$kcm(0x10, 0x0, 0x10) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 744.606278ms ago: executing program 3 (id=1294): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0xffea, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 469.431986ms ago: executing program 3 (id=1295): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0xcc, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x40000080806, 0x0) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bcbcac968686d21c87d2600a29dd6000000000140601fe8000000000000000000000000000bbfe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d0000090780000"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {}, {0x1}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 83.786085ms ago: executing program 1 (id=1296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xe, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300)='@', 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf100, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) kernel console output (not intermixed with test programs): [ 210.903463][ T35] bridge0: port 3(batadv0) entered disabled state [ 210.911315][ T35] bridge_slave_1: left allmulticast mode [ 210.917181][ T35] bridge_slave_1: left promiscuous mode [ 210.923044][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.932300][ T35] bridge_slave_0: left allmulticast mode [ 210.938016][ T35] bridge_slave_0: left promiscuous mode [ 210.944196][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.340660][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.349777][ T35] bond_slave_0: left promiscuous mode [ 211.360661][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.372654][ T35] bond_slave_1: left promiscuous mode [ 211.379673][ T35] bond0 (unregistering): Released all slaves [ 211.638134][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.645569][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.655227][ T8545] bridge_slave_0: entered allmulticast mode [ 211.662582][ T8545] bridge_slave_0: entered promiscuous mode [ 211.669676][ T8549] chnl_net:caif_netlink_parms(): no params data found [ 211.679779][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.687405][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.695639][ T8545] bridge_slave_1: entered allmulticast mode [ 211.702980][ T8545] bridge_slave_1: entered promiscuous mode [ 211.726572][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.735028][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.744569][ T8547] bridge_slave_0: entered allmulticast mode [ 211.751183][ T8547] bridge_slave_0: entered promiscuous mode [ 211.760129][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.767428][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.774712][ T8547] bridge_slave_1: entered allmulticast mode [ 211.781333][ T8547] bridge_slave_1: entered promiscuous mode [ 211.900076][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.912782][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.913161][ T5244] Bluetooth: hci4: command tx timeout [ 211.922019][ T5238] Bluetooth: hci3: command tx timeout [ 211.937102][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.954575][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.991834][ T5238] Bluetooth: hci1: command tx timeout [ 211.998894][ T35] hsr_slave_0: left promiscuous mode [ 212.016368][ T35] hsr_slave_1: left promiscuous mode [ 212.023837][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.031359][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.039946][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.047639][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.066672][ T35] veth1_macvtap: left promiscuous mode [ 212.073358][ T35] veth0_macvtap: left promiscuous mode [ 212.078977][ T35] veth1_vlan: left promiscuous mode [ 212.084547][ T35] veth0_vlan: left promiscuous mode [ 212.573465][ T35] team0 (unregistering): Port device team_slave_1 removed [ 212.615300][ T35] team0 (unregistering): Port device team_slave_0 removed [ 212.807750][ T5238] Bluetooth: hci2: command tx timeout [ 213.196180][ T8545] team0: Port device team_slave_0 added [ 213.205759][ T8545] team0: Port device team_slave_1 added [ 213.313056][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.320269][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.328288][ T8549] bridge_slave_0: entered allmulticast mode [ 213.335402][ T8549] bridge_slave_0: entered promiscuous mode [ 213.366871][ T8547] team0: Port device team_slave_0 added [ 213.385032][ T8547] team0: Port device team_slave_1 added [ 213.419795][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.427145][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.435114][ T8549] bridge_slave_1: entered allmulticast mode [ 213.442034][ T8549] bridge_slave_1: entered promiscuous mode [ 213.510584][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.518879][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.545823][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.558504][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.567589][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.593842][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.615328][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.625454][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.658068][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.677190][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.685300][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.692524][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.718808][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.736000][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.752803][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.771200][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 213.886956][ T8549] team0: Port device team_slave_0 added [ 213.896575][ T8549] team0: Port device team_slave_1 added [ 213.918635][ T8545] hsr_slave_0: entered promiscuous mode [ 213.933592][ T8545] hsr_slave_1: entered promiscuous mode [ 213.970293][ T8547] hsr_slave_0: entered promiscuous mode [ 213.978141][ T8547] hsr_slave_1: entered promiscuous mode [ 213.988429][ T8547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.996503][ T5238] Bluetooth: hci3: command tx timeout [ 214.001710][ T5244] Bluetooth: hci4: command tx timeout [ 214.004953][ T8547] Cannot create hsr debugfs directory [ 214.062774][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.069858][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.087570][ T5244] Bluetooth: hci1: command tx timeout [ 214.096495][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.113894][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.120875][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.148063][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.303264][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.310450][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.318112][ T8557] bridge_slave_0: entered allmulticast mode [ 214.325451][ T8557] bridge_slave_0: entered promiscuous mode [ 214.362123][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.395641][ T8549] hsr_slave_0: entered promiscuous mode [ 214.402170][ T8549] hsr_slave_1: entered promiscuous mode [ 214.409021][ T8549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.421712][ T8549] Cannot create hsr debugfs directory [ 214.436993][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.445078][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.452749][ T8557] bridge_slave_1: entered allmulticast mode [ 214.459772][ T8557] bridge_slave_1: entered promiscuous mode [ 214.507627][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.573592][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.609898][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.644581][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.696199][ T8545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.727738][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.763687][ T8557] team0: Port device team_slave_0 added [ 214.796162][ T8545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.813382][ T8557] team0: Port device team_slave_1 added [ 214.849250][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.857380][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.884087][ T5244] Bluetooth: hci2: command tx timeout [ 214.884702][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.906927][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.914933][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.943549][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.972841][ T8545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.051084][ T8420] veth0_vlan: entered promiscuous mode [ 215.080171][ T8545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.150943][ T8557] hsr_slave_0: entered promiscuous mode [ 215.157935][ T8557] hsr_slave_1: entered promiscuous mode [ 215.164390][ T8557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.174029][ T8557] Cannot create hsr debugfs directory [ 215.200053][ T8420] veth1_vlan: entered promiscuous mode [ 215.294096][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.396617][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.470309][ T8545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.498357][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.515221][ T8545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.527060][ T8420] veth0_macvtap: entered promiscuous mode [ 215.542252][ T8545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.557077][ T8420] veth1_macvtap: entered promiscuous mode [ 215.565656][ T8545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.591630][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.628604][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.639265][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.653771][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.664691][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.675313][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.686272][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.696582][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.707056][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.718397][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.735290][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.749140][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.759094][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.769615][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.780256][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.791169][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.803469][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.838078][ T8420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.852733][ T8420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.861629][ T8420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.870380][ T8420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.042969][ T35] bridge_slave_1: left allmulticast mode [ 216.051205][ T35] bridge_slave_1: left promiscuous mode [ 216.062467][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.072801][ T5238] Bluetooth: hci3: command tx timeout [ 216.078401][ T5244] Bluetooth: hci4: command tx timeout [ 216.084459][ T35] bridge_slave_0: left allmulticast mode [ 216.090105][ T35] bridge_slave_0: left promiscuous mode [ 216.097067][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.108875][ T35] bridge_slave_1: left allmulticast mode [ 216.117310][ T35] bridge_slave_1: left promiscuous mode [ 216.123635][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.136903][ T35] bridge_slave_0: left allmulticast mode [ 216.142794][ T35] bridge_slave_0: left promiscuous mode [ 216.148470][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.155880][ T5244] Bluetooth: hci1: command tx timeout [ 216.166104][ T35] bridge_slave_1: left allmulticast mode [ 216.172432][ T35] bridge_slave_1: left promiscuous mode [ 216.178193][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.186747][ T35] bridge_slave_0: left allmulticast mode [ 216.192870][ T35] bridge_slave_0: left promiscuous mode [ 216.198942][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.951887][ T5244] Bluetooth: hci2: command tx timeout [ 217.073712][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.084749][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.096412][ T35] bond0 (unregistering): Released all slaves [ 217.226382][ T35] bond0 (unregistering): left promiscuous mode [ 217.233498][ T35] bond_slave_0: left promiscuous mode [ 217.239061][ T35] bond_slave_1: left promiscuous mode [ 217.258775][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.270500][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.282689][ T35] bond0 (unregistering): Released all slaves [ 217.424454][ T35] bond0 (unregistering): left allmulticast mode [ 217.431169][ T35] bond_slave_0: left allmulticast mode [ 217.437186][ T35] bond_slave_1: left allmulticast mode [ 217.443090][ T35] bond0 (unregistering): left promiscuous mode [ 217.449249][ T35] bond_slave_0: left promiscuous mode [ 217.455039][ T35] bond_slave_1: left promiscuous mode [ 217.480083][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.491774][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.503529][ T35] bond0 (unregistering): Released all slaves [ 217.624070][ T35] tipc: Disabling bearer [ 217.631879][ T35] tipc: Left network mode [ 217.696877][ T8547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.717245][ T8547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.785699][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.801762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.813414][ T8547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.825377][ T8547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.868571][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.922690][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.941399][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.038097][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.071248][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.078508][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.151849][ T5244] Bluetooth: hci4: command tx timeout [ 218.151926][ T5238] Bluetooth: hci3: command tx timeout [ 218.157539][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.169759][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.231907][ T5238] Bluetooth: hci1: command tx timeout [ 218.310768][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.400254][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.439286][ T8545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.458350][ T8545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.592863][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.600021][ T5777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.667653][ T35] hsr_slave_0: left promiscuous mode [ 218.684185][ T35] hsr_slave_1: left promiscuous mode [ 218.690129][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.698830][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.706871][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.715350][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.727526][ T35] hsr_slave_0: left promiscuous mode [ 218.735712][ T35] hsr_slave_1: left promiscuous mode [ 218.744346][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.752004][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.765326][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.773389][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.783728][ T35] hsr_slave_0: left promiscuous mode [ 218.789717][ T35] hsr_slave_1: left promiscuous mode [ 218.802177][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.809667][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.817963][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.825509][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.867330][ T35] veth1_macvtap: left promiscuous mode [ 218.873266][ T35] veth0_macvtap: left promiscuous mode [ 218.878881][ T35] veth1_vlan: left promiscuous mode [ 218.884344][ T35] veth0_vlan: left promiscuous mode [ 218.890537][ T35] veth1_macvtap: left promiscuous mode [ 218.896135][ T35] veth0_macvtap: left promiscuous mode [ 218.903051][ T35] veth1_vlan: left promiscuous mode [ 218.908333][ T35] veth0_vlan: left promiscuous mode [ 218.917470][ T35] veth1_macvtap: left promiscuous mode [ 218.923401][ T35] veth0_macvtap: left promiscuous mode [ 218.928977][ T35] veth1_vlan: left promiscuous mode [ 218.934434][ T35] veth0_vlan: left promiscuous mode [ 219.041789][ T5238] Bluetooth: hci2: command tx timeout [ 219.363687][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.374047][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.388654][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.401723][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.409472][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.417721][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.736434][ T35] team0 (unregistering): Port device team_slave_1 removed [ 219.784756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 220.640849][ T35] team0 (unregistering): Port device team_slave_1 removed [ 220.685868][ T35] team0 (unregistering): Port device team_slave_0 removed [ 221.517219][ T5244] Bluetooth: hci0: command tx timeout [ 221.549662][ T35] team0 (unregistering): Port device team_slave_1 removed [ 221.598853][ T35] team0 (unregistering): Port device team_slave_0 removed [ 222.139008][ T8549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.155756][ T8549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.170820][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.178042][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.238932][ T8549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.252302][ T8549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.290019][ T8547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.302154][ T8547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.401148][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.569421][ T8545] veth0_vlan: entered promiscuous mode [ 222.598298][ T8545] veth1_vlan: entered promiscuous mode [ 222.760683][ T8545] veth0_macvtap: entered promiscuous mode [ 222.787173][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.805787][ T8557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.821364][ T8557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.836825][ T8557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.850896][ T8545] veth1_macvtap: entered promiscuous mode [ 222.895085][ T8557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.940553][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.972961][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.004034][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 223.018874][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.026236][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.099511][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.121887][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.132622][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.143207][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.162828][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.184562][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.191785][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.230242][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.241183][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.254805][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.297955][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.305961][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.314181][ T8593] bridge_slave_0: entered allmulticast mode [ 223.320807][ T8593] bridge_slave_0: entered promiscuous mode [ 223.330172][ T8545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.345872][ T8545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.355032][ T8545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.363838][ T8545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.386612][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.394594][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.402088][ T8593] bridge_slave_1: entered allmulticast mode [ 223.408689][ T8593] bridge_slave_1: entered promiscuous mode [ 223.468332][ T8547] veth0_vlan: entered promiscuous mode [ 223.480792][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.524089][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.549933][ T8547] veth1_vlan: entered promiscuous mode [ 223.591716][ T5244] Bluetooth: hci0: command tx timeout [ 223.622546][ T8593] team0: Port device team_slave_0 added [ 223.648234][ T8593] team0: Port device team_slave_1 added [ 223.701409][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.733302][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.744415][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.751394][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.780053][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.812727][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.819708][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.846736][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.905648][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.948919][ T8547] veth0_macvtap: entered promiscuous mode [ 223.980959][ T8593] hsr_slave_0: entered promiscuous mode [ 223.990449][ T8593] hsr_slave_1: entered promiscuous mode [ 224.000870][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.010304][ T8593] Cannot create hsr debugfs directory [ 224.020013][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.028147][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.037133][ T8547] veth1_macvtap: entered promiscuous mode [ 224.062358][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.097220][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.149878][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.186741][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.193931][ T5777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.208255][ T5777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.212244][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.222246][ T5777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.223298][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.248681][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.306712][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.318622][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.328636][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.339405][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.350120][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.360590][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.373070][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.386447][ T8557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.493508][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.508994][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.524370][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.535033][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.546480][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.636746][ T8547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.647649][ T8547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.668366][ T8547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.681649][ T8547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.705536][ T8619] tc_dump_action: action bad kind [ 224.738636][ T35] bridge_slave_1: left allmulticast mode [ 224.745834][ T35] bridge_slave_1: left promiscuous mode [ 224.751617][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.759926][ T35] bridge_slave_0: left allmulticast mode [ 224.765818][ T35] bridge_slave_0: left promiscuous mode [ 224.773859][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.160020][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.172717][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.183463][ T35] bond0 (unregistering): Released all slaves [ 225.198984][ T8549] veth0_vlan: entered promiscuous mode [ 225.222972][ T8619] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 225.236227][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 225.398082][ T8549] veth1_vlan: entered promiscuous mode [ 225.470400][ T8628] can: request_module (can-proto-4) failed. [ 225.546994][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.573088][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.598393][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.628415][ T35] hsr_slave_0: left promiscuous mode [ 225.642555][ T35] hsr_slave_1: left promiscuous mode [ 225.652288][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.659741][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.669792][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.671607][ T5244] Bluetooth: hci0: command tx timeout [ 225.688198][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.727076][ T35] veth1_macvtap: left promiscuous mode [ 225.740943][ T35] veth0_macvtap: left promiscuous mode [ 225.754459][ T35] veth1_vlan: left promiscuous mode [ 225.769474][ T35] veth0_vlan: left promiscuous mode [ 226.273554][ T35] team0 (unregistering): Port device team_slave_1 removed [ 226.325355][ T35] team0 (unregistering): Port device team_slave_0 removed [ 226.877687][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.896366][ T8549] veth0_macvtap: entered promiscuous mode [ 226.902928][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.905789][ T8593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.936155][ T8593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.959141][ T8593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.971274][ T8593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.987684][ T8549] veth1_macvtap: entered promiscuous mode [ 227.006642][ T8646] bridge_slave_0: left allmulticast mode [ 227.013872][ T8646] bridge_slave_0: left promiscuous mode [ 227.020045][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.034633][ T8646] bridge_slave_1: left allmulticast mode [ 227.040471][ T8646] bridge_slave_1: left promiscuous mode [ 227.051335][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.067542][ T8646] bond0: (slave bond_slave_0): Releasing backup interface [ 227.082030][ T8646] bond0: (slave bond_slave_1): Releasing backup interface [ 227.110645][ T8646] team0: Port device team_slave_0 removed [ 227.133997][ T8646] team0: Port device team_slave_1 removed [ 227.140547][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.149783][ T8646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.160779][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.169043][ T8646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.269248][ T8647] team0: Port device wg2 added [ 227.289725][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 227.347300][ T8653] netlink: 'syz.1.891': attribute type 21 has an invalid length. [ 227.362086][ T8653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.891'. [ 227.461074][ T8557] veth0_vlan: entered promiscuous mode [ 227.494286][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.517786][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.540530][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.563643][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.601007][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.640039][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.663514][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.688632][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.752600][ T5244] Bluetooth: hci0: command tx timeout [ 227.774034][ T8658] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 227.799186][ T8549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.818590][ T8549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.831600][ T8549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.845903][ T8549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.929368][ T8557] veth1_vlan: entered promiscuous mode [ 228.205161][ T8670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.246923][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.254631][ T8557] veth0_macvtap: entered promiscuous mode [ 228.278937][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.303410][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.329879][ T8557] veth1_macvtap: entered promiscuous mode [ 228.362604][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.375431][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.382658][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.426012][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.440610][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.447840][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.461298][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.546844][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.581785][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.592002][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.602736][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.614206][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.626153][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.639107][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.650514][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.661177][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.672463][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.683051][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.694861][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.720214][ T8557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.746672][ T8557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.763652][ T8557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.782359][ T8557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.792897][ T8684] nbd: must specify an index to disconnect [ 228.835027][ T8680] netlink: 'syz.3.892': attribute type 6 has an invalid length. [ 229.128273][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.144384][ T8690] dccp_close: ABORT with 138 bytes unread [ 229.151220][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.211012][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.226585][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.310249][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.610514][ T8593] veth0_vlan: entered promiscuous mode [ 229.646367][ T8593] veth1_vlan: entered promiscuous mode [ 229.726417][ T8711] netlink: 248 bytes leftover after parsing attributes in process `syz.1.913'. [ 229.776834][ T8593] veth0_macvtap: entered promiscuous mode [ 229.804495][ T8593] veth1_macvtap: entered promiscuous mode [ 229.848557][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.881685][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.893404][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.904195][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.915390][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.927305][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.937892][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.948598][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.961236][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.979601][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.990524][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.002676][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.013444][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.046091][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.068879][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.083730][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.192937][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.272316][ T8593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.298348][ T8593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.333392][ T8593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.361776][ T8593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.499634][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.691387][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.845021][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.856435][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.866422][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.884900][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.894354][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.902265][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.999387][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.071914][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 231.360491][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.379948][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.436999][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.499171][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.608489][ T1110] bridge_slave_1: left allmulticast mode [ 231.620755][ T1110] bridge_slave_1: left promiscuous mode [ 231.629787][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.673543][ T1110] bridge_slave_0: left allmulticast mode [ 231.679359][ T1110] bridge_slave_0: left promiscuous mode [ 231.685556][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.559980][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.571193][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.587123][ T1110] bond0 (unregistering): Released all slaves [ 232.854810][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 232.954432][ T5238] Bluetooth: hci2: command tx timeout [ 233.147452][ T1110] hsr_slave_0: left promiscuous mode [ 233.158218][ T1110] hsr_slave_1: left promiscuous mode [ 233.165131][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.172772][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.180942][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.188517][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.208027][ T1110] veth1_macvtap: left promiscuous mode [ 233.213678][ T1110] veth0_macvtap: left promiscuous mode [ 233.219220][ T1110] veth1_vlan: left promiscuous mode [ 233.224866][ T1110] veth0_vlan: left promiscuous mode [ 233.665825][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 233.716839][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 234.220879][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.231155][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.240414][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.260852][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.279910][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.299186][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.454790][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.928'. [ 234.541888][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.549032][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.576902][ T8721] bridge_slave_0: entered allmulticast mode [ 234.590071][ T8721] bridge_slave_0: entered promiscuous mode [ 234.678962][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.692959][ T8782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.929'. [ 234.694322][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.702339][ T8782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.929'. [ 234.716378][ T8721] bridge_slave_1: entered allmulticast mode [ 234.728486][ T8721] bridge_slave_1: entered promiscuous mode [ 234.888183][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.900433][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.998508][ T8721] team0: Port device team_slave_0 added [ 235.008012][ T8721] team0: Port device team_slave_1 added [ 235.030673][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.038580][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.067377][ T5239] Bluetooth: hci2: command 0x041b tx timeout [ 235.075575][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.092880][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.107553][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.143937][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.167986][ T8783] dccp_close: ABORT with 32 bytes unread [ 235.448928][ T5777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.528639][ T8721] hsr_slave_0: entered promiscuous mode [ 235.550302][ T8721] hsr_slave_1: entered promiscuous mode [ 235.574667][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.599068][ T8721] Cannot create hsr debugfs directory [ 235.767565][ T5777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.773327][ T8810] dccp_close: ABORT with 139 bytes unread [ 235.814610][ T8814] tipc: Started in network mode [ 235.819649][ T8814] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 235.826722][ T8815] dccp_close: ABORT with 139 bytes unread [ 235.851873][ T8814] tipc: Enabled bearer , priority 0 [ 235.874998][ T8777] chnl_net:caif_netlink_parms(): no params data found [ 235.920243][ T5777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.054204][ T5777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.331407][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 236.357699][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 236.399892][ T5244] Bluetooth: hci0: command tx timeout [ 236.508701][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.531672][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.539229][ T8777] bridge_slave_0: entered allmulticast mode [ 236.550274][ T8777] bridge_slave_0: entered promiscuous mode [ 236.603351][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.610767][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.623437][ T8777] bridge_slave_1: entered allmulticast mode [ 236.638651][ T8777] bridge_slave_1: entered promiscuous mode [ 236.876742][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.916421][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.937177][ T5777] bridge_slave_1: left allmulticast mode [ 236.951987][ T5777] bridge_slave_1: left promiscuous mode [ 236.972161][ T5233] tipc: Node number set to 11578026 [ 236.982734][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.030714][ T5777] bridge_slave_0: left allmulticast mode [ 237.037229][ T5777] bridge_slave_0: left promiscuous mode [ 237.043681][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.112552][ T5244] Bluetooth: hci2: command 0x041b tx timeout [ 237.340160][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 237.827283][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.839820][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.851269][ T5777] bond0 (unregistering): Released all slaves [ 237.945779][ T8860] vlan2: entered promiscuous mode [ 237.950872][ T8860] veth0: entered promiscuous mode [ 238.042439][ T8777] team0: Port device team_slave_0 added [ 238.057006][ T5283] IPVS: starting estimator thread 0... [ 238.128408][ T8777] team0: Port device team_slave_1 added [ 238.153016][ T8863] IPVS: using max 28 ests per chain, 67200 per kthread [ 238.264554][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.285095][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.337517][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.434302][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 238.472016][ T5244] Bluetooth: hci0: command tx timeout [ 238.472326][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.516360][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.548689][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.644674][ T8721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.667867][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.3.961'. [ 238.693350][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.961'. [ 238.714536][ T8888] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 238.715893][ T8888] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 238.740413][ T8888] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.961'. [ 238.753713][ T8777] hsr_slave_0: entered promiscuous mode [ 238.767880][ T8777] hsr_slave_1: entered promiscuous mode [ 238.779069][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.787994][ T8777] Cannot create hsr debugfs directory [ 238.798383][ T8721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.814238][ T8721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.828849][ T5777] hsr_slave_0: left promiscuous mode [ 238.835977][ T5777] hsr_slave_1: left promiscuous mode [ 238.846654][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.855261][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.864654][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.872540][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.894352][ T5777] veth1_macvtap: left promiscuous mode [ 238.899943][ T5777] veth0_macvtap: left promiscuous mode [ 238.905904][ T5777] veth1_vlan: left promiscuous mode [ 238.911294][ T5777] veth0_vlan: left promiscuous mode [ 239.192527][ T5244] Bluetooth: hci2: command 0x041b tx timeout [ 239.416252][ T5777] team0 (unregistering): Port device team_slave_1 removed [ 239.463477][ T5777] team0 (unregistering): Port device team_slave_0 removed [ 239.893831][ T8894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.964'. [ 239.952960][ T8721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.969441][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 240.055831][ T8904] tap0: tun_chr_ioctl cmd 1074025678 [ 240.061319][ T8904] tap0: group set to 0 [ 240.178456][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 240.198337][ T8915] bridge_slave_1: left allmulticast mode [ 240.212877][ T8915] bridge_slave_1: left promiscuous mode [ 240.218687][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.229340][ T8915] bridge_slave_0: left allmulticast mode [ 240.235895][ T8915] bridge_slave_0: left promiscuous mode [ 240.241758][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.551906][ T5244] Bluetooth: hci0: command tx timeout [ 240.559720][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.642792][ T8924] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 240.686252][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.758597][ T8932] sctp: [Deprecated]: syz.3.978 (pid 8932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.758597][ T8932] Use struct sctp_sack_info instead [ 241.274344][ T5244] Bluetooth: hci2: command 0x041b tx timeout [ 241.430922][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.475839][ T8962] __nla_validate_parse: 1 callbacks suppressed [ 241.475860][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 241.500631][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 242.632278][ T5244] Bluetooth: hci0: command tx timeout [ 243.088695][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.095880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.148883][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.156087][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.507723][ T8777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.540530][ T8777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.605993][ T8777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.658012][ T8986] team0: Device wg2 is of different type [ 243.684233][ T8777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.776945][ T8992] netlink: 'syz.1.995': attribute type 4 has an invalid length. [ 243.907330][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.949520][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'. [ 243.973247][ T9000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.997'. [ 243.983969][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.999'. [ 244.191024][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.277135][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 244.314766][ T8721] veth0_vlan: entered promiscuous mode [ 244.373953][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.404160][ T8721] veth1_vlan: entered promiscuous mode [ 244.426454][ T8721] veth0_macvtap: entered promiscuous mode [ 244.435616][ T8721] veth1_macvtap: entered promiscuous mode [ 244.450716][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.462694][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.472920][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.483719][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.493839][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.504610][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.515956][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.572292][ T9031] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1006'. [ 244.613678][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.620802][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.652988][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.679560][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.719274][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.720567][ T9039] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 244.740027][ T9039] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 244.749036][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.749268][ T9039] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1008'. [ 244.760172][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.818635][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.825827][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.845176][ T8721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.870820][ T8721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.894408][ T8721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.903861][ T8721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.053356][ T9046] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1011'. [ 245.081695][ T9046] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 245.085690][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.101860][ T9046] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 245.110590][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.171378][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.188149][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.476350][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.516423][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 245.585374][ T9060] bond1: entered promiscuous mode [ 245.941336][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.997254][ T8777] veth0_vlan: entered promiscuous mode [ 246.008789][ T8777] veth1_vlan: entered promiscuous mode [ 246.098947][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.178532][ T8777] veth0_macvtap: entered promiscuous mode [ 246.188564][ T8777] veth1_macvtap: entered promiscuous mode [ 246.208707][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.219801][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.229656][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.240809][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.253160][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.263960][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.273806][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.284522][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.295584][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.317283][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.333590][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.346471][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.358516][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.370006][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.380577][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.392614][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.417870][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.436288][ T8777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.445380][ T8777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.454619][ T8777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.464616][ T8777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.595945][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.851041][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.881667][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.941896][ T9126] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.963696][ T9124] netlink: 'syz.1.1028': attribute type 11 has an invalid length. [ 246.983857][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.987492][ T9124] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.1028'. [ 247.011700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.021348][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.038546][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.057390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.066527][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.066571][ T1110] bridge_slave_1: left allmulticast mode [ 247.081391][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.090431][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.100044][ T1110] bridge_slave_1: left promiscuous mode [ 247.109892][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.125844][ T1110] bridge_slave_0: left allmulticast mode [ 247.161058][ T1110] bridge_slave_0: left promiscuous mode [ 247.167476][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.528048][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.541155][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.553227][ T1110] bond0 (unregistering): Released all slaves [ 247.576109][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 247.594193][ T9134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.622296][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 247.948309][ T9149] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 247.982797][ T9140] netlink: zone id is out of range [ 248.004120][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 248.096271][ T9143] xt_l2tp: unknown flags: 10 [ 248.119278][ T9152] IPv6: Can't replace route, no match found [ 248.317082][ T9144] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 248.402698][ T1110] hsr_slave_0: left promiscuous mode [ 248.416901][ T1110] hsr_slave_1: left promiscuous mode [ 248.427066][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.440045][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.452259][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.460808][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.496117][ T1110] veth1_macvtap: left promiscuous mode [ 248.509002][ T1110] veth0_macvtap: left promiscuous mode [ 248.519427][ T1110] veth1_vlan: left promiscuous mode [ 248.525046][ T1110] veth0_vlan: left promiscuous mode [ 249.007480][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 249.056023][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 249.191894][ T5239] Bluetooth: hci2: command tx timeout [ 249.241495][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 249.256213][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 249.474778][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.487607][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.504391][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.529963][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.539747][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.558017][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.779565][ T9166] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.790694][ T9166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.830904][ T9176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'. [ 249.923268][ T9189] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 249.944432][ T9189] syz_tun: entered promiscuous mode [ 249.988264][ T9189] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 250.033940][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 250.271175][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.286200][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.298455][ T9127] bridge_slave_0: entered allmulticast mode [ 250.305852][ T9127] bridge_slave_0: entered promiscuous mode [ 250.328848][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.336696][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.344205][ T9127] bridge_slave_1: entered allmulticast mode [ 250.352693][ T9127] bridge_slave_1: entered promiscuous mode [ 250.460098][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.534291][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.636013][ T9127] team0: Port device team_slave_0 added [ 250.698970][ T9127] team0: Port device team_slave_1 added [ 250.709992][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 250.765590][ T1110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.793539][ T9178] chnl_net:caif_netlink_parms(): no params data found [ 250.815334][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 250.908764][ T1110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.990018][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.997739][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.024921][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.112263][ T1110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.143158][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.167288][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.196451][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.269783][ T1110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.280172][ T5244] Bluetooth: hci2: command tx timeout [ 251.329163][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 251.341523][ T9225] netlink: 'syz.3.1054': attribute type 13 has an invalid length. [ 251.592947][ T5244] Bluetooth: hci0: command tx timeout [ 251.633566][ T9127] hsr_slave_0: entered promiscuous mode [ 251.654737][ T9127] hsr_slave_1: entered promiscuous mode [ 251.690643][ T9127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.701902][ T9127] Cannot create hsr debugfs directory [ 251.748397][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.757362][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.771761][ T9178] bridge_slave_0: entered allmulticast mode [ 251.778858][ T9178] bridge_slave_0: entered promiscuous mode [ 251.796926][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.809415][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.827563][ T9178] bridge_slave_1: entered allmulticast mode [ 251.853536][ T9178] bridge_slave_1: entered promiscuous mode [ 252.016595][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.150807][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.311401][ T9266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.347290][ T9178] team0: Port device team_slave_0 added [ 252.387019][ T9178] team0: Port device team_slave_1 added [ 252.452205][ T1110] bridge_slave_1: left allmulticast mode [ 252.457921][ T1110] bridge_slave_1: left promiscuous mode [ 252.482262][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.503233][ T1110] bridge_slave_0: left allmulticast mode [ 252.509121][ T1110] bridge_slave_0: left promiscuous mode [ 252.530366][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.058527][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.070776][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.084428][ T1110] bond0 (unregistering): Released all slaves [ 253.120867][ T9286] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 253.268679][ T9293] xt_limit: Overflow, try lower: 65536/2147483648 [ 253.351774][ T5244] Bluetooth: hci2: command tx timeout [ 253.377074][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.388662][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.418233][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.454566][ T9290] netlink: 'syz.3.1072': attribute type 2 has an invalid length. [ 253.462883][ T9297] IPv6: Can't replace route, no match found [ 253.474449][ T9300] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 253.482991][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.497726][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.528655][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.649354][ T9305] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 253.668001][ T9305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.672581][ T5244] Bluetooth: hci0: command tx timeout [ 253.748187][ T9306] macvlan0: entered allmulticast mode [ 253.757202][ T9306] veth1_vlan: entered allmulticast mode [ 253.800296][ T9178] hsr_slave_0: entered promiscuous mode [ 253.813289][ T9178] hsr_slave_1: entered promiscuous mode [ 253.831317][ T9178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.851238][ T9178] Cannot create hsr debugfs directory [ 253.920887][ T1110] hsr_slave_0: left promiscuous mode [ 253.932700][ T1110] hsr_slave_1: left promiscuous mode [ 253.961863][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.971711][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.992092][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.016188][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.040883][ T1110] veth1_macvtap: left promiscuous mode [ 254.047530][ T1110] veth0_macvtap: left promiscuous mode [ 254.053754][ T1110] veth1_vlan: left promiscuous mode [ 254.059149][ T1110] veth0_vlan: left promiscuous mode [ 254.631374][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 254.678962][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 255.164952][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 255.180463][ T9310] vlan2: entered allmulticast mode [ 255.203537][ T9328] tipc: Started in network mode [ 255.208449][ T9328] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 255.216276][ T9328] tipc: Enabled bearer , priority 0 [ 255.437658][ T5239] Bluetooth: hci2: command tx timeout [ 255.491839][ T9127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.523821][ T9343] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 255.581773][ T9344] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 255.604704][ T9127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.619422][ T9347] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 255.687481][ T9127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.741701][ T9352] netlink: 'syz.0.1090': attribute type 9 has an invalid length. [ 255.752080][ T5239] Bluetooth: hci0: command tx timeout [ 255.762457][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 255.797872][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'. [ 255.812273][ T9127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.870112][ T9356] ip6tnl1: entered promiscuous mode [ 255.878213][ T9356] ip6tnl1: entered allmulticast mode [ 256.053333][ T9369] tipc: Enabling of bearer rejected, already enabled [ 256.095515][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102269][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.155299][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.178950][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.198249][ T9373] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 256.225388][ T9178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.260428][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.267640][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.304522][ T9373] netlink: 'syz.1.1097': attribute type 8 has an invalid length. [ 256.332666][ T1169] tipc: Node number set to 11578026 [ 256.360287][ T9178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.391000][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.398192][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.437056][ T9178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.484395][ T9178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.589986][ T9381] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 256.635028][ T9386] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 256.642897][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'. [ 256.662790][ T9381] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.786759][ T9178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.800296][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.843713][ T9381] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.856553][ T9178] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.864134][ T9381] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 256.890219][ T9381] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.911955][ T9381] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 256.919752][ T9381] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.934377][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.941583][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.961996][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1101'. [ 256.994554][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.001755][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.062177][ T9381] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 257.081679][ T9381] netlink: 'syz.3.1101': attribute type 7 has an invalid length. [ 257.084388][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.154926][ T9401] tipc: Started in network mode [ 257.180297][ T9401] tipc: Node identity , cluster identity 4711 [ 257.188388][ T9401] tipc: Failed to obtain node identity [ 257.203622][ T9401] tipc: Enabling of bearer rejected, failed to enable media [ 257.286916][ T9127] veth0_vlan: entered promiscuous mode [ 257.375020][ T9127] veth1_vlan: entered promiscuous mode [ 257.450269][ T9127] veth0_macvtap: entered promiscuous mode [ 257.495979][ T9127] veth1_macvtap: entered promiscuous mode [ 257.545892][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.578848][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.608638][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.624186][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.638565][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.654444][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.684003][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.751287][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.762245][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.772256][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.782775][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.793941][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.804028][ T9127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.812855][ T9127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.821637][ T9127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.830364][ T9127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.842582][ T5239] Bluetooth: hci0: command 0x0419 tx timeout [ 257.858076][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.019411][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.062513][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.112912][ T9447] tipc: Started in network mode [ 258.121766][ T9447] tipc: Node identity , cluster identity 4711 [ 258.127898][ T9447] tipc: Failed to obtain node identity [ 258.146574][ T9447] tipc: Enabling of bearer rejected, failed to enable media [ 258.163289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.171191][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.173876][ T9452] vlan2: entered allmulticast mode [ 258.404445][ T9178] veth0_vlan: entered promiscuous mode [ 258.430164][ T9178] veth1_vlan: entered promiscuous mode [ 258.476594][ T9178] veth0_macvtap: entered promiscuous mode [ 258.492379][ T9178] veth1_macvtap: entered promiscuous mode [ 258.534248][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.548143][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.599462][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.609966][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.620123][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.630793][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.644640][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.655799][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.677680][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.699991][ T9475] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.708946][ T9475] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.718060][ T9475] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.727255][ T9475] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.747518][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.760009][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.769929][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.780658][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.790582][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.802928][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.820668][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.834072][ T9178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.849682][ T9178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.858815][ T9178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.869744][ T9178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.014447][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.030797][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.063879][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.073361][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.420078][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.943510][ T9500] tipc: Enabling of bearer rejected, already enabled [ 260.206125][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.221287][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.237135][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.248571][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.258191][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.268131][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.275630][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.304071][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.403650][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.542890][ T1110] bridge_slave_1: left allmulticast mode [ 260.548600][ T1110] bridge_slave_1: left promiscuous mode [ 260.555156][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.572542][ T1110] bridge_slave_0: left allmulticast mode [ 260.578274][ T1110] bridge_slave_0: left promiscuous mode [ 260.584355][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.958135][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.969617][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.980669][ T1110] bond0 (unregistering): Released all slaves [ 260.989862][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 261.114588][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.123251][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.130629][ T9503] bridge_slave_0: entered allmulticast mode [ 261.138460][ T9503] bridge_slave_0: entered promiscuous mode [ 261.159995][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.167791][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.180142][ T9503] bridge_slave_1: entered allmulticast mode [ 261.188506][ T9503] bridge_slave_1: entered promiscuous mode [ 261.287822][ T9513] validate_nla: 63 callbacks suppressed [ 261.287841][ T9513] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 261.340762][ T9513] __nla_validate_parse: 128 callbacks suppressed [ 261.340783][ T9513] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1137'. [ 261.405313][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.434517][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1137'. [ 261.444659][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.454669][ T9513] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 261.480617][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.490898][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.494172][ T9513] netlink: 'syz.1.1137': attribute type 2 has an invalid length. [ 261.515279][ T9513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'. [ 261.532549][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.549950][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.560280][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.573082][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.581250][ T1110] hsr_slave_0: left promiscuous mode [ 261.589276][ T1110] hsr_slave_1: left promiscuous mode [ 261.596394][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.604532][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.622314][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.629885][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.650488][ T1110] veth1_macvtap: left promiscuous mode [ 261.656401][ T1110] veth0_macvtap: left promiscuous mode [ 261.662432][ T1110] veth1_vlan: left promiscuous mode [ 261.668184][ T1110] veth0_vlan: left promiscuous mode [ 262.234177][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 262.327750][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 262.401291][ T5244] Bluetooth: hci0: command tx timeout [ 263.113891][ T9518] @ÿ: renamed from veth0_vlan (while UP) [ 263.176264][ T9503] team0: Port device team_slave_0 added [ 263.207380][ T9503] team0: Port device team_slave_1 added [ 263.322202][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.329207][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.382730][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.413501][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.420551][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.453021][ T9538] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 263.496542][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.671714][ T5244] Bluetooth: hci2: command tx timeout [ 264.008379][ T9503] hsr_slave_0: entered promiscuous mode [ 264.032627][ T9503] hsr_slave_1: entered promiscuous mode [ 264.050624][ T9503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.076476][ T9503] Cannot create hsr debugfs directory [ 264.087678][ T9547] Bluetooth: MGMT ver 1.23 [ 264.097811][ T9547] sctp: [Deprecated]: syz.1.1147 (pid 9547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.097811][ T9547] Use struct sctp_sack_info instead [ 264.195167][ T9553] tipc: Enabling of bearer rejected, already enabled [ 264.477400][ T5244] Bluetooth: hci0: command tx timeout [ 265.751859][ T5244] Bluetooth: hci2: command tx timeout [ 266.496455][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 266.559959][ T5244] Bluetooth: hci0: command tx timeout [ 266.568276][ T9578] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1154'. [ 266.581294][ T9581] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1154'. [ 266.586178][ T1110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.625959][ T9520] chnl_net:caif_netlink_parms(): no params data found [ 266.700393][ T1110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.848237][ T1110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.128153][ T1110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.189329][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.207810][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.224924][ T9520] bridge_slave_0: entered allmulticast mode [ 267.242029][ T9520] bridge_slave_0: entered promiscuous mode [ 267.268455][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.280045][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.289575][ T9520] bridge_slave_1: entered allmulticast mode [ 267.300152][ T9520] bridge_slave_1: entered promiscuous mode [ 267.366205][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.409085][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.496363][ T9520] team0: Port device team_slave_0 added [ 267.542727][ T9520] team0: Port device team_slave_1 added [ 267.612758][ T1110] bridge_slave_1: left allmulticast mode [ 267.618632][ T1110] bridge_slave_1: left promiscuous mode [ 267.635464][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.675429][ T1110] bridge_slave_0: left allmulticast mode [ 267.681140][ T1110] bridge_slave_0: left promiscuous mode [ 267.702933][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.837696][ T5244] Bluetooth: hci2: command tx timeout [ 268.175581][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.192798][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.208516][ T1110] bond0 (unregistering): Released all slaves [ 268.230960][ T9608] tipc: Started in network mode [ 268.251618][ T9608] tipc: Node identity , cluster identity 4711 [ 268.257756][ T9608] tipc: Failed to obtain node identity [ 268.289331][ T9608] tipc: Enabling of bearer rejected, failed to enable media [ 268.360423][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.369641][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.397185][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.503372][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.510374][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.540006][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.566612][ T9503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.622588][ T9503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.633190][ T9503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.634726][ T5244] Bluetooth: hci0: command tx timeout [ 268.654059][ T9503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.668080][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 268.692161][ T9620] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1164'. [ 268.795565][ T9520] hsr_slave_0: entered promiscuous mode [ 268.809328][ T9520] hsr_slave_1: entered promiscuous mode [ 268.816444][ T9520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.829378][ T9520] Cannot create hsr debugfs directory [ 268.840978][ T1110] hsr_slave_0: left promiscuous mode [ 268.847226][ T1110] hsr_slave_1: left promiscuous mode [ 268.864111][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.872419][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.881925][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.890345][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.919872][ T1110] veth1_macvtap: left promiscuous mode [ 268.936846][ T1110] veth0_macvtap: left promiscuous mode [ 268.943822][ T1110] veth1_vlan: left promiscuous mode [ 268.949199][ T1110] veth0_vlan: left promiscuous mode [ 269.458655][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 269.505300][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 269.921711][ T5244] Bluetooth: hci2: command tx timeout [ 270.191236][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 270.528685][ T9660] batadv_slave_1: entered promiscuous mode [ 270.645184][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.828657][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.980863][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.988059][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.081090][ T9674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1180'. [ 271.091841][ T9657] batadv_slave_1: left promiscuous mode [ 271.098821][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.106010][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.390886][ T9520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.431992][ T9520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.458463][ T9688] FAULT_INJECTION: forcing a failure. [ 271.458463][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.475458][ T9520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.486092][ T9688] CPU: 1 UID: 0 PID: 9688 Comm: syz.1.1186 Not tainted 6.12.0-rc1-syzkaller-00237-gcf9545686230 #0 [ 271.496815][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.506971][ T9688] Call Trace: [ 271.510273][ T9688] [ 271.513220][ T9688] dump_stack_lvl+0x241/0x360 [ 271.517920][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.523203][ T9688] ? __pfx__printk+0x10/0x10 [ 271.527793][ T9688] ? __pfx_lock_release+0x10/0x10 [ 271.532933][ T9688] should_fail_ex+0x3b0/0x4e0 [ 271.537717][ T9688] _copy_from_user+0x2f/0xe0 [ 271.542311][ T9688] copy_msghdr_from_user+0xae/0x680 [ 271.547599][ T9688] ? __lock_acquire+0x1384/0x2050 [ 271.552625][ T9688] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.558445][ T9688] do_recvmmsg+0x3f9/0xad0 [ 271.563212][ T9688] ? __pfx_do_recvmmsg+0x10/0x10 [ 271.568183][ T9688] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 271.574075][ T9688] ? ksys_write+0x229/0x2b0 [ 271.578664][ T9688] ? __pfx_lock_release+0x10/0x10 [ 271.583693][ T9688] ? vfs_write+0x7bf/0xc90 [ 271.588103][ T9688] ? kmem_cache_free+0x1a2/0x420 [ 271.593047][ T9688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.599041][ T9688] __x64_sys_recvmmsg+0x199/0x250 [ 271.604072][ T9688] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 271.609620][ T9688] ? do_syscall_64+0x100/0x230 [ 271.614384][ T9688] ? do_syscall_64+0xb6/0x230 [ 271.619061][ T9688] do_syscall_64+0xf3/0x230 [ 271.623564][ T9688] ? clear_bhb_loop+0x35/0x90 [ 271.628242][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.634152][ T9688] RIP: 0033:0x7fa10f77dff9 [ 271.638566][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.658176][ T9688] RSP: 002b:00007fa110582038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 271.666604][ T9688] RAX: ffffffffffffffda RBX: 00007fa10f935f80 RCX: 00007fa10f77dff9 [ 271.674575][ T9688] RDX: 0000000000000001 RSI: 0000000020002780 RDI: 0000000000000003 [ 271.682542][ T9688] RBP: 00007fa110582090 R08: 0000000000000000 R09: 0000000000000000 [ 271.690508][ T9688] R10: 0000000000002140 R11: 0000000000000246 R12: 0000000000000001 [ 271.698566][ T9688] R13: 0000000000000000 R14: 00007fa10f935f80 R15: 00007ffc275389a8 [ 271.706547][ T9688] [ 271.779703][ T9520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.975102][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.028861][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.062395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.069604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.098579][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.105783][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.149492][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.182133][ T9503] veth0_vlan: entered promiscuous mode [ 272.194246][ T9503] veth1_vlan: entered promiscuous mode [ 272.220637][ T9503] veth0_macvtap: entered promiscuous mode [ 272.230453][ T9503] veth1_macvtap: entered promiscuous mode [ 272.246390][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.257318][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.267542][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.278379][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.288461][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.299144][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.310371][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.320535][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.331333][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.341544][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.352262][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.363869][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.423526][ T9503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.432924][ T9503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.446517][ T9503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.455533][ T9503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.567887][ T9713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1194'. [ 272.586543][ T9713] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 272.666147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.684980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.785222][ T5777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.812356][ T5777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.869849][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.041402][ T9734] FAULT_INJECTION: forcing a failure. [ 273.041402][ T9734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.064608][ T9731] netlink: 'syz.3.1198': attribute type 29 has an invalid length. [ 273.073380][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 273.082824][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.0.1199 Not tainted 6.12.0-rc1-syzkaller-00237-gcf9545686230 #0 [ 273.093537][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.103627][ T9734] Call Trace: [ 273.106921][ T9734] [ 273.109906][ T9734] dump_stack_lvl+0x241/0x360 [ 273.114711][ T9734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.120294][ T9734] ? __pfx__printk+0x10/0x10 [ 273.121040][ T9736] netlink: 'syz.3.1198': attribute type 29 has an invalid length. [ 273.124911][ T9734] ? snprintf+0xda/0x120 [ 273.124944][ T9734] should_fail_ex+0x3b0/0x4e0 [ 273.124973][ T9734] _copy_to_user+0x2f/0xb0 [ 273.124996][ T9734] simple_read_from_buffer+0xca/0x150 [ 273.125024][ T9734] proc_fail_nth_read+0x1e9/0x250 [ 273.125052][ T9734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.125083][ T9734] ? rw_verify_area+0x55e/0x6f0 [ 273.125109][ T9734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.125137][ T9734] vfs_read+0x201/0xbc0 [ 273.125162][ T9734] ? __pfx_lock_release+0x10/0x10 [ 273.125191][ T9734] ? __pfx_vfs_read+0x10/0x10 [ 273.125221][ T9734] ? __fget_files+0x3f3/0x470 [ 273.125247][ T9734] ? fdget_pos+0x24e/0x320 [ 273.140485][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 273.141964][ T9734] ksys_read+0x183/0x2b0 [ 273.141993][ T9734] ? __pfx_ksys_read+0x10/0x10 [ 273.142010][ T9734] ? do_syscall_64+0x100/0x230 [ 273.142032][ T9734] ? do_syscall_64+0xb6/0x230 [ 273.142050][ T9734] do_syscall_64+0xf3/0x230 [ 273.142066][ T9734] ? clear_bhb_loop+0x35/0x90 [ 273.142088][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.142115][ T9734] RIP: 0033:0x7f515397ca3c [ 273.142133][ T9734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 273.142150][ T9734] RSP: 002b:00007f51547cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.142173][ T9734] RAX: ffffffffffffffda RBX: 00007f5153b35f80 RCX: 00007f515397ca3c [ 273.278766][ T9734] RDX: 000000000000000f RSI: 00007f51547cf0a0 RDI: 0000000000000004 [ 273.286741][ T9734] RBP: 00007f51547cf090 R08: 0000000000000000 R09: 0000000000000000 [ 273.294723][ T9734] R10: 0000000000002140 R11: 0000000000000246 R12: 0000000000000001 [ 273.302719][ T9734] R13: 0000000000000000 R14: 00007f5153b35f80 R15: 00007ffde792fde8 [ 273.310802][ T9734] [ 273.478301][ T9520] veth0_vlan: entered promiscuous mode [ 273.504407][ T9520] veth1_vlan: entered promiscuous mode [ 273.574391][ T9520] veth0_macvtap: entered promiscuous mode [ 273.599634][ T9748] netlink: 209676 bytes leftover after parsing attributes in process `syz.0.1203'. [ 273.604470][ T9520] veth1_macvtap: entered promiscuous mode [ 273.621003][ T9748] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.631336][ T9748] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 273.654414][ T9748] dummy0: entered promiscuous mode [ 273.670534][ T9748] dummy0: left promiscuous mode [ 273.730450][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.755113][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.773529][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.790385][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.800597][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.811297][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.821245][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.832779][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.844121][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.859824][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.872768][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.890443][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.936039][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.951640][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.970214][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.993430][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.036787][ T9520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.055349][ T9520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.064337][ T9520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.073642][ T9520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.181948][ T5777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.199576][ T5777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.249828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.292407][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.526339][ T5777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.090509][ T5777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.202307][ T9777] tipc: Failed to remove unknown binding: 66,1,1/11578026:629712706/629712708 [ 275.223771][ T9777] tipc: Failed to remove unknown binding: 66,1,1/11578026:629712706/629712708 [ 275.355660][ T5777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.442321][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.463998][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.474766][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.475395][ T5777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.488417][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.508531][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.517351][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.633432][ T5777] bridge_slave_1: left allmulticast mode [ 275.639215][ T5777] bridge_slave_1: left promiscuous mode [ 275.645245][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.654786][ T5777] bridge_slave_0: left allmulticast mode [ 275.660483][ T5777] bridge_slave_0: left promiscuous mode [ 275.667741][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.024828][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.036882][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.048058][ T5777] bond0 (unregistering): Released all slaves [ 276.145778][ T9783] chnl_net:caif_netlink_parms(): no params data found [ 276.418428][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.443196][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.473695][ T9783] bridge_slave_0: entered allmulticast mode [ 276.494878][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.504920][ T9783] bridge_slave_0: entered promiscuous mode [ 276.522094][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.530582][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.551313][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.562594][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.571073][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.604296][ T9783] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.617814][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.625161][ T9783] bridge_slave_1: entered allmulticast mode [ 276.633862][ T9783] bridge_slave_1: entered promiscuous mode [ 276.730636][ T9783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.758445][ T9783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.781226][ T5777] hsr_slave_0: left promiscuous mode [ 276.802305][ T5777] hsr_slave_1: left promiscuous mode [ 276.809255][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.819504][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.830639][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.838518][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.860029][ T5777] veth1_macvtap: left promiscuous mode [ 276.865776][ T5777] veth0_macvtap: left promiscuous mode [ 276.871398][ T5777] veth1_vlan: left promiscuous mode [ 276.877168][ T5777] veth0_vlan: left promiscuous mode [ 277.591862][ T5244] Bluetooth: hci0: command tx timeout [ 277.827693][ T5777] team0 (unregistering): Port device team_slave_1 removed [ 277.895810][ T5777] team0 (unregistering): Port device team_slave_0 removed [ 278.519122][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 278.537466][ T9841] tipc: Enabling of bearer rejected, already enabled [ 278.625239][ T9783] team0: Port device team_slave_0 added [ 278.634030][ T5244] Bluetooth: hci2: command tx timeout [ 278.656833][ T9783] team0: Port device team_slave_1 added [ 278.737738][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.759441][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.817238][ T9783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.890764][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.908579][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.981584][ T9783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.145978][ T9783] hsr_slave_0: entered promiscuous mode [ 279.169665][ T9783] hsr_slave_1: entered promiscuous mode [ 279.196316][ T9783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.207946][ T9783] Cannot create hsr debugfs directory [ 279.253056][ T9803] chnl_net:caif_netlink_parms(): no params data found [ 279.447509][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 279.506480][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 279.551594][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 279.675898][ T5244] Bluetooth: hci0: command tx timeout [ 279.760033][ T5777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.801661][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.808925][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.816935][ T9803] bridge_slave_0: entered allmulticast mode [ 279.824403][ T9803] bridge_slave_0: entered promiscuous mode [ 279.959126][ T5777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.987709][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.009364][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.022750][ T9803] bridge_slave_1: entered allmulticast mode [ 280.030406][ T9803] bridge_slave_1: entered promiscuous mode [ 280.114388][ T5777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.200631][ T9803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.252031][ T5777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.277335][ T9803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.373978][ T9803] team0: Port device team_slave_0 added [ 280.390348][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 280.400962][ T9924] tipc: Resetting bearer [ 280.448076][ T9803] team0: Port device team_slave_1 added [ 280.485016][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.495098][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.523845][ T9803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.536811][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.544036][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.571993][ T9803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.639469][ T5777] bridge_slave_1: left allmulticast mode [ 280.651767][ T5777] bridge_slave_1: left promiscuous mode [ 280.664743][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.684504][ T5777] bridge_slave_0: left allmulticast mode [ 280.690355][ T5777] bridge_slave_0: left promiscuous mode [ 280.700912][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.711784][ T5244] Bluetooth: hci2: command tx timeout [ 281.295822][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.324557][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.344668][ T5777] bond0 (unregistering): Released all slaves [ 281.435309][ T9803] hsr_slave_0: entered promiscuous mode [ 281.468405][ T9803] hsr_slave_1: entered promiscuous mode [ 281.481060][ T9803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.493646][ T9803] Cannot create hsr debugfs directory [ 281.761919][ T5244] Bluetooth: hci0: command tx timeout [ 281.789889][ T9783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.818753][ T9783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.911737][ T5777] hsr_slave_0: left promiscuous mode [ 281.928625][ T5777] hsr_slave_1: left promiscuous mode [ 281.944709][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.962415][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.980018][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.991607][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.020689][ T5777] veth1_macvtap: left promiscuous mode [ 282.030616][ T5777] veth0_macvtap: left promiscuous mode [ 282.046816][ T5777] veth1_vlan: left promiscuous mode [ 282.052743][ T5777] veth0_vlan: left promiscuous mode [ 282.577206][ T5777] team0 (unregistering): Port device team_slave_1 removed [ 282.633509][ T5777] team0 (unregistering): Port device team_slave_0 removed [ 282.801707][ T5244] Bluetooth: hci2: command tx timeout [ 283.126840][ T9783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.170553][ T9783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.222701][ T9966] sctp: [Deprecated]: syz.3.1267 (pid 9966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.222701][ T9966] Use struct sctp_sack_info instead [ 283.494605][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1269'. [ 283.858416][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.876712][ T5244] Bluetooth: hci0: command tx timeout [ 283.876824][ T9783] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.893987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.901103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.989133][ T9989] ip6gretap1: entered promiscuous mode [ 283.995842][ T9989] ip6gretap1: entered allmulticast mode [ 284.023554][ T9783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.034336][ T9783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.106330][ T9999] Bluetooth: MGMT ver 1.23 [ 284.158759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.166055][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.303711][ T9803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.326228][ T9803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.376680][ T9783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.402471][ T9803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.453588][ T9803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.622660][ T9803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.635360][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 284.654355][ T9783] veth0_vlan: entered promiscuous mode [ 284.691929][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.720386][ T9783] veth1_vlan: entered promiscuous mode [ 284.735048][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.742246][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.790788][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.797981][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.912409][ T5239] Bluetooth: hci2: command tx timeout [ 284.931910][ T9783] veth0_macvtap: entered promiscuous mode [ 284.942398][ T9783] veth1_macvtap: entered promiscuous mode [ 284.965531][T10028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1287'. [ 285.093743][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.121621][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.133396][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.144652][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.154874][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.168155][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.189592][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.226749][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.251386][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.291664][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.320088][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.332366][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.376032][T10045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.388655][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.407329][ T9783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.447120][ T9783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.465518][ T9783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.468140][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.475386][ T9783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.547651][T10052] tipc: Enabling of bearer rejected, already enabled [ 285.641298][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.665040][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.680433][T10054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1293'. [ 285.712497][T10054] netlink: 'syz.0.1293': attribute type 9 has an invalid length. [ 285.726059][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.733076][T10054] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1293'. [ 285.752652][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.846903][ T9803] veth0_vlan: entered promiscuous mode [ 285.858595][ T9803] veth1_vlan: entered promiscuous mode [ 285.884907][ T9803] veth0_macvtap: entered promiscuous mode [ 285.898267][ T9803] veth1_macvtap: entered promiscuous mode [ 285.918571][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.931689][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.942160][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.953814][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.963807][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.974417][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.984297][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.995880][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.007342][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.027624][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.039607][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.060801][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.073363][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.083331][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.094135][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.106106][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.136499][ T9803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.148639][ T9803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.153686][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 286.159879][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.181918][ T9803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.191136][ T9803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.208495][T10048] ================================================================== [ 286.216618][T10048] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 286.224893][T10048] Read of size 8 at addr ffff88807d0bf858 by task syz.0.1293/10048 [ 286.232795][T10048] [ 286.235116][T10048] CPU: 1 UID: 0 PID: 10048 Comm: syz.0.1293 Not tainted 6.12.0-rc1-syzkaller-00237-gcf9545686230 #0 [ 286.245966][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.256158][T10048] Call Trace: [ 286.259436][T10048] [ 286.262363][T10048] dump_stack_lvl+0x241/0x360 [ 286.267046][T10048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.272241][T10048] ? __pfx__printk+0x10/0x10 [ 286.276834][T10048] ? _printk+0xd5/0x120 [ 286.281001][T10048] ? __virt_addr_valid+0x183/0x530 [ 286.286246][T10048] ? __virt_addr_valid+0x183/0x530 [ 286.291354][T10048] print_report+0x169/0x550 [ 286.295859][T10048] ? __virt_addr_valid+0x183/0x530 [ 286.301055][T10048] ? __virt_addr_valid+0x183/0x530 [ 286.306181][T10048] ? __virt_addr_valid+0x45f/0x530 [ 286.311412][T10048] ? __phys_addr+0xba/0x170 [ 286.315917][T10048] ? skb_queue_purge_reason+0xb9/0x500 [ 286.321413][T10048] kasan_report+0x143/0x180 [ 286.325917][T10048] ? skb_queue_purge_reason+0xb9/0x500 [ 286.331483][T10048] skb_queue_purge_reason+0xb9/0x500 [ 286.336891][T10048] ? trace_contention_end+0x3c/0x120 [ 286.342361][T10048] ? __mutex_lock+0x2ef/0xd70 [ 286.347126][T10048] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 286.353030][T10048] ? drain_workqueue+0x2d3/0x3a0 [ 286.357965][T10048] ? hci_conn_hash_flush+0x1da/0x240 [ 286.363250][T10048] vhci_flush+0x44/0x50 [ 286.367412][T10048] ? __pfx_vhci_flush+0x10/0x10 [ 286.372262][T10048] hci_dev_reset+0x42a/0x5d0 [ 286.376858][T10048] sock_do_ioctl+0x158/0x460 [ 286.381452][T10048] ? __pfx_sock_do_ioctl+0x10/0x10 [ 286.386673][T10048] sock_ioctl+0x626/0x8e0 [ 286.391011][T10048] ? __pfx_sock_ioctl+0x10/0x10 [ 286.395871][T10048] ? __fget_files+0x29/0x470 [ 286.400476][T10048] ? __fget_files+0x3f3/0x470 [ 286.405177][T10048] ? __pfx_sock_ioctl+0x10/0x10 [ 286.410037][T10048] __se_sys_ioctl+0xf9/0x170 [ 286.414812][T10048] do_syscall_64+0xf3/0x230 [ 286.419311][T10048] ? clear_bhb_loop+0x35/0x90 [ 286.424090][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.429989][T10048] RIP: 0033:0x7f515397dff9 [ 286.434430][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.454135][T10048] RSP: 002b:00007f51547cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.462570][T10048] RAX: ffffffffffffffda RBX: 00007f5153b35f80 RCX: 00007f515397dff9 [ 286.470705][T10048] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 286.478783][T10048] RBP: 00007f51539f0296 R08: 0000000000000000 R09: 0000000000000000 [ 286.486758][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.494729][T10048] R13: 0000000000000000 R14: 00007f5153b35f80 R15: 00007ffde792fde8 [ 286.502745][T10048] [ 286.505760][T10048] [ 286.508201][T10048] Allocated by task 9783: [ 286.512521][T10048] kasan_save_track+0x3f/0x80 [ 286.517246][T10048] __kasan_kmalloc+0x98/0xb0 [ 286.521932][T10048] __kmalloc_cache_noprof+0x19c/0x2c0 [ 286.527397][T10048] vhci_open+0x57/0x360 [ 286.531608][T10048] misc_open+0x2cc/0x340 [ 286.535952][T10048] chrdev_open+0x521/0x600 [ 286.540459][T10048] do_dentry_open+0x978/0x1460 [ 286.545227][T10048] vfs_open+0x3e/0x330 [ 286.549299][T10048] path_openat+0x2c84/0x3590 [ 286.553894][T10048] do_filp_open+0x235/0x490 [ 286.558399][T10048] do_sys_openat2+0x13e/0x1d0 [ 286.563074][T10048] __x64_sys_openat+0x247/0x2a0 [ 286.567920][T10048] do_syscall_64+0xf3/0x230 [ 286.572434][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.578343][T10048] [ 286.580658][T10048] Freed by task 9783: [ 286.584625][T10048] kasan_save_track+0x3f/0x80 [ 286.589390][T10048] kasan_save_free_info+0x40/0x50 [ 286.594415][T10048] __kasan_slab_free+0x59/0x70 [ 286.599170][T10048] kfree+0x1a0/0x440 [ 286.603066][T10048] vhci_release+0xbc/0xd0 [ 286.607390][T10048] __fput+0x23f/0x880 [ 286.611398][T10048] task_work_run+0x24f/0x310 [ 286.616009][T10048] do_exit+0xa2f/0x28e0 [ 286.620261][T10048] do_group_exit+0x207/0x2c0 [ 286.624857][T10048] __x64_sys_exit_group+0x3f/0x40 [ 286.629899][T10048] x64_sys_call+0x2634/0x2640 [ 286.634596][T10048] do_syscall_64+0xf3/0x230 [ 286.639101][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.645086][T10048] [ 286.647400][T10048] The buggy address belongs to the object at ffff88807d0bf800 [ 286.647400][T10048] which belongs to the cache kmalloc-1k of size 1024 [ 286.661809][T10048] The buggy address is located 88 bytes inside of [ 286.661809][T10048] freed 1024-byte region [ffff88807d0bf800, ffff88807d0bfc00) [ 286.675622][T10048] [ 286.677945][T10048] The buggy address belongs to the physical page: [ 286.684357][T10048] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d0b8 [ 286.693251][T10048] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 286.701916][T10048] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 286.709982][T10048] page_type: f5(slab) [ 286.714071][T10048] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 286.722653][T10048] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 286.731326][T10048] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 286.739994][T10048] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 286.748663][T10048] head: 00fff00000000003 ffffea0001f42e01 ffffffffffffffff 0000000000000000 [ 286.757348][T10048] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 286.766011][T10048] page dumped because: kasan: bad access detected [ 286.772424][T10048] page_owner tracks the page as allocated [ 286.778123][T10048] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5240, tgid 5240 (syz-executor), ts 59037978749, free_ts 59037115997 [ 286.799492][T10048] post_alloc_hook+0x1f3/0x230 [ 286.804280][T10048] get_page_from_freelist+0x3045/0x3190 [ 286.809825][T10048] __alloc_pages_noprof+0x256/0x6c0 [ 286.815170][T10048] alloc_pages_mpol_noprof+0x3e8/0x680 [ 286.820626][T10048] alloc_slab_page+0x6a/0x120 [ 286.825297][T10048] allocate_slab+0x5a/0x2f0 [ 286.829802][T10048] ___slab_alloc+0xcd1/0x14b0 [ 286.834569][T10048] __slab_alloc+0x58/0xa0 [ 286.839072][T10048] __kmalloc_node_noprof+0x286/0x440 [ 286.844363][T10048] qdisc_alloc+0x9a/0xa80 [ 286.848690][T10048] qdisc_create_dflt+0x62/0x4b0 [ 286.853537][T10048] dev_activate+0x3c0/0x1240 [ 286.858122][T10048] __dev_open+0x352/0x450 [ 286.862452][T10048] __dev_change_flags+0x1e2/0x6f0 [ 286.867501][T10048] dev_change_flags+0x8b/0x1a0 [ 286.872279][T10048] do_setlink+0xcd0/0x41f0 [ 286.876704][T10048] page last free pid 5242 tgid 5242 stack trace: [ 286.883022][T10048] free_unref_page+0xcfb/0xf20 [ 286.887814][T10048] __put_partials+0xeb/0x130 [ 286.892395][T10048] put_cpu_partial+0x17c/0x250 [ 286.897258][T10048] __slab_free+0x2ea/0x3d0 [ 286.901692][T10048] qlist_free_all+0x9a/0x140 [ 286.906285][T10048] kasan_quarantine_reduce+0x14f/0x170 [ 286.911740][T10048] __kasan_slab_alloc+0x23/0x80 [ 286.916607][T10048] __kmalloc_cache_noprof+0x132/0x2c0 [ 286.921996][T10048] ipv6_add_addr+0x580/0x1090 [ 286.926677][T10048] inet6_addr_add+0x563/0xb00 [ 286.931500][T10048] inet6_rtm_newaddr+0x8a3/0xc90 [ 286.936853][T10048] rtnetlink_rcv_msg+0x73f/0xcf0 [ 286.941888][T10048] netlink_rcv_skb+0x1e3/0x430 [ 286.946654][T10048] netlink_unicast+0x7f6/0x990 [ 286.951414][T10048] netlink_sendmsg+0x8e4/0xcb0 [ 286.956185][T10048] __sock_sendmsg+0x221/0x270 [ 286.960866][T10048] [ 286.963185][T10048] Memory state around the buggy address: [ 286.968805][T10048] ffff88807d0bf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.976948][T10048] ffff88807d0bf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.985179][T10048] >ffff88807d0bf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.993236][T10048] ^ [ 287.000250][T10048] ffff88807d0bf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.008309][T10048] ffff88807d0bf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.016366][T10048] ================================================================== [ 287.042629][T10048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.049968][T10048] CPU: 0 UID: 0 PID: 10048 Comm: syz.0.1293 Not tainted 6.12.0-rc1-syzkaller-00237-gcf9545686230 #0 [ 287.060943][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.071107][T10048] Call Trace: [ 287.074386][T10048] [ 287.077313][T10048] dump_stack_lvl+0x241/0x360 [ 287.081992][T10048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.087181][T10048] ? __pfx__printk+0x10/0x10 [ 287.091774][T10048] ? preempt_schedule+0xe1/0xf0 [ 287.096736][T10048] ? vscnprintf+0x5d/0x90 [ 287.101065][T10048] panic+0x349/0x880 [ 287.104975][T10048] ? check_panic_on_warn+0x21/0xb0 [ 287.110110][T10048] ? __pfx_panic+0x10/0x10 [ 287.114548][T10048] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 287.120534][T10048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.126859][T10048] ? print_report+0x502/0x550 [ 287.131535][T10048] check_panic_on_warn+0x86/0xb0 [ 287.136557][T10048] ? skb_queue_purge_reason+0xb9/0x500 [ 287.142191][T10048] end_report+0x77/0x160 [ 287.146477][T10048] kasan_report+0x154/0x180 [ 287.150977][T10048] ? skb_queue_purge_reason+0xb9/0x500 [ 287.156528][T10048] skb_queue_purge_reason+0xb9/0x500 [ 287.161816][T10048] ? trace_contention_end+0x3c/0x120 [ 287.167140][T10048] ? __mutex_lock+0x2ef/0xd70 [ 287.171820][T10048] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 287.177756][T10048] ? drain_workqueue+0x2d3/0x3a0 [ 287.182690][T10048] ? hci_conn_hash_flush+0x1da/0x240 [ 287.187971][T10048] vhci_flush+0x44/0x50 [ 287.192142][T10048] ? __pfx_vhci_flush+0x10/0x10 [ 287.196990][T10048] hci_dev_reset+0x42a/0x5d0 [ 287.201588][T10048] sock_do_ioctl+0x158/0x460 [ 287.206182][T10048] ? __pfx_sock_do_ioctl+0x10/0x10 [ 287.211298][T10048] sock_ioctl+0x626/0x8e0 [ 287.215887][T10048] ? __pfx_sock_ioctl+0x10/0x10 [ 287.220824][T10048] ? __fget_files+0x29/0x470 [ 287.225420][T10048] ? __fget_files+0x3f3/0x470 [ 287.230100][T10048] ? __pfx_sock_ioctl+0x10/0x10 [ 287.234967][T10048] __se_sys_ioctl+0xf9/0x170 [ 287.239586][T10048] do_syscall_64+0xf3/0x230 [ 287.244103][T10048] ? clear_bhb_loop+0x35/0x90 [ 287.248776][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.254673][T10048] RIP: 0033:0x7f515397dff9 [ 287.259086][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.278783][T10048] RSP: 002b:00007f51547cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.287470][T10048] RAX: ffffffffffffffda RBX: 00007f5153b35f80 RCX: 00007f515397dff9 [ 287.295479][T10048] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 287.303448][T10048] RBP: 00007f51539f0296 R08: 0000000000000000 R09: 0000000000000000 [ 287.311418][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.319404][T10048] R13: 0000000000000000 R14: 00007f5153b35f80 R15: 00007ffde792fde8 [ 287.327555][T10048] [ 287.330704][T10048] Kernel Offset: disabled [ 287.335033][T10048] Rebooting in 86400 seconds..