last executing test programs: 1m12.671147167s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 1m1.474809884s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 48.182217114s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 36.456800225s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 22.679491374s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 11.089388223s ago: executing program 3 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 3.532603483s ago: executing program 4 (id=1069): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x10}, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff000000ff90ab0000000000000000b3f5318f7be6fee2000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc0200000000000000000000000000000300"/204], 0x174}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x90) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000560001060000000000000000b197ee88538ce2711d0700000000000000f400c6905e2cafdaef9b465e5a95170000000000"], 0x1c}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010c00000000000000000c0000000c00038004000380040004000c00018008000100", @ANYRES32=r11], 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @union={0x8, 0x5, 0x0, 0x5, 0x1, 0x1f, [{0xa, 0x4, 0x1}, {0xd, 0x1, 0x20}, {0x4, 0x1, 0x5}, {0xa, 0x1, 0x5}, {0x9, 0x4, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x40, 0x1}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f0000000280)=""/45, 0x99, 0x2d, 0x0, 0x20}, 0x20) 3.224756805s ago: executing program 4 (id=1073): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001000)=[{{0x0, 0xc000000, 0x0, 0x0, 0x0, 0x20000}}], 0x1, 0x0) 3.162418844s ago: executing program 4 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x9e8, 0x0, 0x0, 0x148, 0x8c0, 0x148, 0x950, 0x240, 0x240, 0x950, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {[], [], 0x20}], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000100)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 2.929793511s ago: executing program 4 (id=1075): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ace7d1e173e684b4a24e3eaa9b21d646f982cfbe4148ae40bc336eac7b1d334683d8cfd33736a08410e7de02d83c687fb9705acd4788d02cad2ae5aa326a88d2388bd911b43176ceec07ca6ba09aaa626bacf34715c759f245530a93a1550d31", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r5}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRESHEX=r1, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000740)=""/138, 0x8a, 0x0, &(0x7f0000000800)=""/142, 0x8e}}, 0x10) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000640)="3e00194b1b7003d6016e33a2b56f9e1821157b17e2ca90f69326e97dc76ad3f4164431dca04f304be0174ed3e3296bd7b173c107064f3dc01677fd37b84fe123df81542f0fc5ae9888b805fda911e37fd0bab6814996952323764c646ad38f7fe9ed83a2e6bf8fb0d4b58a1a9fa972c6ba7bff0c91192566892d81857e9894ed169b5b7207ed6029ba932443284a7ff805893be2ea9f9b99963944a14295881f897e87b579d61e2427538d172c", 0xad}, {&(0x7f0000000a00)="e173ffa5611dedc32d702ae0976cbb50e54030807f101ff9c9c0b0729cb2488cd22932338ab5337d80c1108d4cc7073ed98b5fc4473b927cc029d722f7020aa4591a742c2a20572255f504e9cd7a60e4841a83c138858ed2c62ec9302c62ddfcf4ab6c0a9f7ab95adfd82ded7424a5c43283380287a0f9ca22b8811647130b98675c8ba5850ebf4b06982c606e073f21f98f073e02ef01f222c0225a02942c037a3900dfaa8023e2e6c3ffd2d8bb237284a45690e7ae0bcb173b0f47d20665dbc9b54e1ff77493b3d205105ffae379e49463274036dcb8187a7fd1ba529178e9da", 0xe1}, {&(0x7f0000000b00)="056713b15f7a0d4f5dba546a3e2714e0e6795ca1bb6ffdc84e2967699370023c58c714c9c04829d410af96c0232a223f62948b9a3e4aa370636f3b8f871ce1b49166ef22d20628302c0c0c15d35bfa5fe0b49ade1e1a6b73f9f9ba4f54a0e5510a9b46261d16370983a1d2fad6c3a24664b5fa68d6876cd3d6d544cb1ccebf6b95e2070c7094a6284e7d38098c1c0dc103cbd458815bcea9c6820a3f30dce6fbe72de8dab996406b3c7737b7463fdb32e2cd519d4e33629416", 0xb9}, {&(0x7f0000000700)="d7f7900d9fa6092570010c0dde13", 0xe}], 0x4}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000080000008000000", @ANYRES32=r8, @ANYBLOB="0600000021a500000c0001000300000000000000"], 0x2c}], 0x1}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8002a00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d00020004000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.386761042s ago: executing program 0 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 1.305741033s ago: executing program 4 (id=1080): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'hugetlb'}]}, 0x9) ioctl$sock_inet_SIOCADDRT(r0, 0x8915, &(0x7f0000000000)={0x0, {0x2, 0x4620, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}) 995.355913ms ago: executing program 0 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000a80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xdc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe8000000000000086"], 0x30}, 0x1, 0x0, 0x0, 0x637d02aa9d69e2f8}, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r11, 0x8008f512, &(0x7f0000000040)) 953.107763ms ago: executing program 2 (id=1083): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d00030009000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x0, 0x8, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x1b, 0x3, 0xe, [{@remote, 0x3}, {@loopback, 0x20}, {@rand_addr=0x64010102, 0xffff}, {@broadcast, 0x2}, {@private=0xa010100, 0xfffffffe}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0xb5a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) 851.01206ms ago: executing program 1 (id=1085): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x17, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x2, &(0x7f00000014c0)=""/4101}, 0x90) 779.119043ms ago: executing program 4 (id=1086): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x20000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local, 0x0}, &(0x7f0000001400)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x10, &(0x7f0000001600)=ANY=[@ANYBLOB="08690000090000000000000000000000dd584000000021008510000002000000183a00000300000000000000000000000000010000000000000000000000183500000400000000000000000000001800000007800000e2000000f694b51e95000000006e4becd90cf4f70b0c000000184b0000ffffffff00"/137], &(0x7f0000000080)='syzkaller\x00', 0x9a, 0x1000, &(0x7f0000000400)=""/4096, 0x40f00, 0x28, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000001440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0xd, 0x800, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[r5, r4], &(0x7f0000001500)=[{0x2, 0x3, 0x8, 0xb}, {0x1, 0x3, 0x3}], 0x10, 0x1}, 0x90) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x8000000000000000, 0x1998, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 757.874272ms ago: executing program 1 (id=1087): r0 = socket$kcm(0x10, 0xa, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 646.578873ms ago: executing program 2 (id=1088): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x1000, 0x73, 0x0, 0x0, 0xbab599a53ab6823}) 586.160048ms ago: executing program 1 (id=1089): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, r4, 0x2f, 0x8, 0xffffffffffffffff, @link_id}, 0x20) 584.514984ms ago: executing program 0 (id=1090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000140)="1e151984d1250aff3f290e31e5048b30", 0x10}, {&(0x7f0000000900)="dd52", 0x2}, {&(0x7f00000002c0)='f', 0x1}], 0x3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x0) 509.781478ms ago: executing program 2 (id=1091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x0, 0x0}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000640), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a00", @ANYRES32=0x0, @ANYBLOB="76acd5ecb35457d8d51b6362421e569b703febf7b18f0c604a75174dfd67761d613911e12a117007e0a2cf131a05a46828b3c84fc2eeb85ad8ad42c6402f7ff9a327ef9d75aeee4ace893d799b669a3c3d77d4dccce2bd37bc01c4a598aaca279cd19cf7ac46eb7015024dd6425c4e10d17610c9406ce4250bbdffdb518acfb9126f87677c3893baf3d72f0472007876b40e17ff659631c7230a224697a82940a11bae37cee59ff8dcfd7d09048c38f1b7cb6992dfd57a054640697dd1c8f6d8783f95e838022439b01cd1fa27b82fc2c23d59ed35e5f104d99b23ef421f70d45f46"], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x29, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000621000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f7274"], 0x58}}, 0x0) epoll_create(0xffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) 421.755225ms ago: executing program 1 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 329.848598ms ago: executing program 1 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 225.516521ms ago: executing program 0 (id=1094): syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void, {0x8035, 0x5}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @private1, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0) 187.154984ms ago: executing program 2 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f0000000280000012", 0x2d}], 0x1}, 0x0) 143.850344ms ago: executing program 0 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000740)) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000380)="b0cd90c759dc0aa5e71f164f6138d7d6a41b1e95d9012cebc4b6ee5f9b1e75ced44647b536a1b1d9d69c064fbdadf526d78f7e5e245a35b89a885d4425a0dd2a494027ac261e13bd5c4a8f5da084c595be4838a941733bee3024c1bba4690c89a4199abab4bd3f5e4052714bff549111445dbb280701931ab4d224bf634dfbf49d9f948fb4322efca8cf1b647c9a4fa1ed9d830f895a0702315333a21a9b673ac3eb2caaa515e80364fab2306b3f4cd7", 0xb0}, {&(0x7f0000000100)="acfd43310ade1ca3af1e5b66e3cb9562e8301083797ed11c4a3820f3910bc13e6b5d345924b5111b6d890cebae5d3b61d11649ec5d7970275cc60581d161fdf8b369486f836b0616a0d8cdfa8d97dfbbb7f12c52c1b7eac84a3ef1602d14b22aac6b04c0f4a4f16dabf859f5a43b5dce190ea33b12d27afcbae4d305d1f416428b03b951773e13f3d1e15aef3100660ddc5c932047fde05b4152132ca68d5606000000ebae94a336f66d6383486ace4ae1bc26f9bcad81b2182db5c4d2d61a1ae5eb46bd", 0xc4}, {&(0x7f0000000200)="e5974f3c00b2c515931fb6d33f46d4e47db5612a6282df6791c7c81d92c14d1230e9540a519908e846828b219e024e4c5839f8084b406f5e0178adaad72eda578cb113d7e43456d551f202d267e5cac2459ffc00f0bead53fe59227703fda17a451a852e950c4842c2372e07be57bcb0d167ab712bcd0d9b520cdf814f86bf322422f359b0ad50818ba99997c6fbe035f2cae8370f055d8386cf089ccf8125aa93b05b6a2c3b8283b5e62b90f374f6c45e60b00ce86894ea7a2b158f9a3b31e388125d6980208bc0b71f535f92f561db7867a2e4253d750a65667ff1d4", 0xdd}, {&(0x7f0000000a00)="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", 0x139}, {&(0x7f0000000340)="a562884875403bb2212468a257560b5b6892957d8c88380d073d2f8bab8bf365f3f3acc58a", 0x25}, {&(0x7f0000000b40)="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", 0x1f2}], 0x6, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @end, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@empty}]}]}}}], 0x58}, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/209, 0xd1}], 0x2) 122.32075ms ago: executing program 1 (id=1097): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x33) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x1, &(0x7f0000001880)=@raw=[@exit], &(0x7f0000001900)='GPL\x00', 0x2, 0xf, &(0x7f0000001940)=""/15}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x12, &(0x7f0000000380)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x3f, 0x0, 0x6, 0x9, 0x182b, 0x3, 0x101, 0x6, 0x2, 0x1, 0x41d5, 0x6, 0x7, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 100.310045ms ago: executing program 2 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r3, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @void}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c850}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 38.731306ms ago: executing program 0 (id=1099): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d00030009000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x0, 0x8, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x1b, 0x3, 0xe, [{@remote, 0x3}, {@loopback, 0x20}, {@rand_addr=0x64010102, 0xffff}, {@broadcast, 0x2}, {@private=0xa010100, 0xfffffffe}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0xb5a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xd21, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x8) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439) close(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) write$cgroup_type(r4, &(0x7f0000000140), 0x9) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x8, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) kernel console output (not intermixed with test programs): etdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.157747][ T5659] chnl_net:caif_netlink_parms(): no params data found [ 75.177383][ T5420] veth0_macvtap: entered promiscuous mode [ 75.226503][ T2483] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.258462][ T5420] veth1_macvtap: entered promiscuous mode [ 75.431767][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.443347][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.454839][ T5655] bridge_slave_0: entered allmulticast mode [ 75.462426][ T5655] bridge_slave_0: entered promiscuous mode [ 75.482051][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.503260][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.511166][ T5655] bridge_slave_1: entered allmulticast mode [ 75.526035][ T5655] bridge_slave_1: entered promiscuous mode [ 75.646210][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.653451][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.661303][ T5659] bridge_slave_0: entered allmulticast mode [ 75.669540][ T5659] bridge_slave_0: entered promiscuous mode [ 75.678794][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.686484][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.693720][ T5659] bridge_slave_1: entered allmulticast mode [ 75.712394][ T5659] bridge_slave_1: entered promiscuous mode [ 75.791817][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.894652][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.922687][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.935888][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.962619][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.983322][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.995367][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.015477][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.034483][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.047466][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.057710][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.068688][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.081001][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.134576][ T5655] team0: Port device team_slave_0 added [ 76.257092][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.281827][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.303509][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.319001][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.334534][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.354437][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.364281][ T5420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.376080][ T5420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.389949][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.447624][ T2483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.469820][ T5655] team0: Port device team_slave_1 added [ 76.480071][ T5659] team0: Port device team_slave_0 added [ 76.490790][ T5659] team0: Port device team_slave_1 added [ 76.528002][ T5420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.549743][ T5420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.564078][ T5420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.573592][ T5420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.684097][ T2483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.772185][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.790685][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.794998][ T5697] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 76.825556][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.843237][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.851143][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.877340][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.903428][ T2483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.923965][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.934626][ T5103] Bluetooth: hci1: command tx timeout [ 76.938898][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.955483][ T785] cfg80211: failed to load regulatory.db [ 76.975188][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.999000][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.007740][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.046822][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.064991][ T5699] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 77.073024][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 77.085250][ T5101] Bluetooth: hci3: command tx timeout [ 77.085298][ T5103] Bluetooth: hci4: command tx timeout [ 77.116705][ T2483] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.326191][ T5659] hsr_slave_0: entered promiscuous mode [ 77.333074][ T5659] hsr_slave_1: entered promiscuous mode [ 77.341297][ T5659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.349927][ T5659] Cannot create hsr debugfs directory [ 77.392577][ T5655] hsr_slave_0: entered promiscuous mode [ 77.406063][ T5655] hsr_slave_1: entered promiscuous mode [ 77.412642][ T5655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.421088][ T5655] Cannot create hsr debugfs directory [ 77.620348][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.677045][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.723332][ T2463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.732577][ T2463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.740311][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.763498][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.829841][ T2483] bridge_slave_1: left allmulticast mode [ 77.838323][ T2483] bridge_slave_1: left promiscuous mode [ 77.845023][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.871577][ T2483] bridge_slave_0: left allmulticast mode [ 77.883483][ T2483] bridge_slave_0: left promiscuous mode [ 77.901507][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.924146][ T2483] bridge_slave_1: left allmulticast mode [ 77.930006][ T2483] bridge_slave_1: left promiscuous mode [ 77.941227][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.951879][ T2483] bridge_slave_0: left allmulticast mode [ 77.958481][ T2483] bridge_slave_0: left promiscuous mode [ 77.964258][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.449480][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.460478][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.472454][ T2483] bond0 (unregistering): Released all slaves [ 78.553835][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.571501][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.582226][ T2483] bond0 (unregistering): Released all slaves [ 78.763037][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.795516][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.982219][ T5714] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 79.004662][ T5103] Bluetooth: hci1: command tx timeout [ 79.053454][ T5714] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 79.063244][ T5716] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 79.122683][ T5718] sctp: [Deprecated]: syz.1.196 (pid 5718) Use of int in maxseg socket option. [ 79.122683][ T5718] Use struct sctp_assoc_value instead [ 79.164614][ T5103] Bluetooth: hci3: command tx timeout [ 79.166163][ T5101] Bluetooth: hci4: command tx timeout [ 79.178956][ T2483] hsr_slave_0: left promiscuous mode [ 79.215401][ T2483] hsr_slave_1: left promiscuous mode [ 79.235651][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.243141][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.265438][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.272944][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.285570][ T2483] hsr_slave_0: left promiscuous mode [ 79.291567][ T2483] hsr_slave_1: left promiscuous mode [ 79.302911][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.321285][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.336226][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.344297][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.432356][ T2483] veth1_macvtap: left promiscuous mode [ 79.440857][ T2483] veth0_macvtap: left promiscuous mode [ 79.454870][ T2483] veth1_vlan: left promiscuous mode [ 79.464278][ T2483] veth0_vlan: left promiscuous mode [ 79.472361][ T2483] veth1_macvtap: left promiscuous mode [ 79.480229][ T2483] veth0_macvtap: left promiscuous mode [ 79.488372][ T2483] veth1_vlan: left promiscuous mode [ 79.494071][ T2483] veth0_vlan: left promiscuous mode [ 80.359996][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 80.419657][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 81.095068][ T5101] Bluetooth: hci1: command tx timeout [ 81.244932][ T5101] Bluetooth: hci3: command tx timeout [ 81.571934][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 81.642619][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 82.213098][ T5659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.257819][ T5659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.336768][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.363363][ T5659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.393375][ T5659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.488907][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 82.516077][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.591810][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.599813][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.668105][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.675289][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.782371][ T5762] sctp: [Deprecated]: syz.2.210 (pid 5762) Use of int in maxseg socket option. [ 82.782371][ T5762] Use struct sctp_assoc_value instead [ 82.799422][ T5624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.815772][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.932204][ T5769] netlink: 112 bytes leftover after parsing attributes in process `syz.1.213'. [ 83.086393][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.100475][ T5775] IPv6: Can't replace route, no match found [ 83.177260][ T5775] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 83.222762][ T5775] team0: Port device macvlan2 removed [ 83.240674][ T5775] team0: Port device macvlan3 removed [ 83.337180][ T5655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.370601][ T5655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.402387][ T5655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.457617][ T5655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.525737][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.568634][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.619747][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.627101][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.669082][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.676288][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.763268][ T5659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.787965][ T5659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.924211][ T5624] veth0_vlan: entered promiscuous mode [ 83.970461][ T5803] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 83.980012][ T5803] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 84.006372][ T5624] veth1_vlan: entered promiscuous mode [ 84.007299][ T5803] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 84.049162][ T5803] debugfs: Directory 'netdev:' with parent 'phy14' already present! [ 84.149606][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.183004][ T5624] veth0_macvtap: entered promiscuous mode [ 84.227010][ T5812] IPv6: Can't replace route, no match found [ 84.229728][ T5814] dccp_invalid_packet: P.Data Offset(0) too small [ 84.336983][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.349665][ T5624] veth1_macvtap: entered promiscuous mode [ 84.394154][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.401368][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.431404][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.438617][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.475936][ T5824] netlink: 52 bytes leftover after parsing attributes in process `syz.2.232'. [ 84.488278][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.520653][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 84.539472][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.563570][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.586487][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.598207][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.610128][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.621114][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.633141][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.680939][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.715393][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.744255][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.756120][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.761514][ T5835] Zero length message leads to an empty skb [ 84.779984][ T5624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.791787][ T5624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.811408][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.860801][ T5624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.893040][ T5624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.902804][ T5624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.911804][ T5624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062340][ T5847] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 85.070558][ T5847] netlink: 'syz.2.238': attribute type 11 has an invalid length. [ 85.201571][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.235063][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.263482][ T5659] veth0_vlan: entered promiscuous mode [ 85.320203][ T5854] netlink: 'syz.1.240': attribute type 4 has an invalid length. [ 85.364972][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.384266][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.387602][ T5659] veth1_vlan: entered promiscuous mode [ 85.473357][ T5659] veth0_macvtap: entered promiscuous mode [ 85.572899][ T5864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.244'. [ 85.587157][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.588314][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 85.616735][ T5659] veth1_macvtap: entered promiscuous mode [ 85.623775][ T5862] IPv6: Can't replace route, no match found [ 85.663372][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.679178][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.693510][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.734791][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.750048][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.762351][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.773141][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.784715][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.796969][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.813761][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.829281][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.840045][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.850920][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.861811][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.880681][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.904767][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.922520][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.945650][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.985374][ T5659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.994157][ T5659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.011594][ T5659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021248][ T5659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.123711][ T5881] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 86.238226][ T2396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.250162][ T5655] veth0_vlan: entered promiscuous mode [ 86.256170][ T2396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.440075][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.471819][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.480304][ T5655] veth1_vlan: entered promiscuous mode [ 86.497052][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.615243][ T5655] veth0_macvtap: entered promiscuous mode [ 86.653149][ T5655] veth1_macvtap: entered promiscuous mode [ 86.687297][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 86.714061][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.732532][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.744006][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.761729][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.781428][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.793035][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.797572][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.802043][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.819147][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.829615][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.839083][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.849389][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.860044][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.877495][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.888611][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.899119][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.910921][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.922155][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.934997][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.947492][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.957983][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.967895][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.978553][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.988437][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.999598][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.010078][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.020907][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.033528][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.050002][ T5890] netlink: 21 bytes leftover after parsing attributes in process `syz.4.183'. [ 87.139198][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.159667][ T5655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.173970][ T5655] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.184411][ T5655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.201675][ T5655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.325784][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.376375][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.258'. [ 87.458145][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.540991][ T5906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.569111][ T5906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.688271][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 87.760666][ T2463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.781119][ T2463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.873330][ T12] bridge_slave_1: left allmulticast mode [ 87.879777][ T12] bridge_slave_1: left promiscuous mode [ 87.886401][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.899701][ T12] bridge_slave_0: left allmulticast mode [ 87.914902][ T12] bridge_slave_0: left promiscuous mode [ 87.920703][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.527179][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.541178][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.553753][ T12] bond0 (unregistering): Released all slaves [ 88.606099][ T5925] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 88.619002][ T5926] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 88.704966][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.728268][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.891679][ T5935] netlink: 'syz.0.180': attribute type 3 has an invalid length. [ 88.909666][ T5935] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.180'. [ 88.925405][ T5103] Bluetooth: hci4: command tx timeout [ 88.928278][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 89.173473][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 89.177439][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 89.302357][ T12] hsr_slave_0: left promiscuous mode [ 89.315517][ T12] hsr_slave_1: left promiscuous mode [ 89.341408][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.381852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.408206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.423700][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.503655][ T12] veth1_macvtap: left promiscuous mode [ 89.518168][ T12] veth0_macvtap: left promiscuous mode [ 89.530658][ T12] veth1_vlan: left promiscuous mode [ 89.539807][ T12] veth0_vlan: left promiscuous mode [ 89.676690][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.269'. [ 90.525889][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.594294][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.711762][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 90.755554][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 90.953952][ T5952] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 90.995671][ T5958] IPv6: Can't replace route, no match found [ 91.006019][ T5103] Bluetooth: hci4: command tx timeout [ 91.036582][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 91.049029][ T5979] netlink: 80 bytes leftover after parsing attributes in process `syz.2.271'. [ 91.202372][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.211335][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.219125][ T5891] bridge_slave_0: entered allmulticast mode [ 91.229927][ T5891] bridge_slave_0: entered promiscuous mode [ 91.256490][ T5992] netlink: 1 bytes leftover after parsing attributes in process `syz.1.275'. [ 91.265902][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.273235][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.295752][ T5891] bridge_slave_1: entered allmulticast mode [ 91.324185][ T5891] bridge_slave_1: entered promiscuous mode [ 91.390706][ T5996] veth1_macvtap: left promiscuous mode [ 91.400752][ T6000] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 91.416479][ T6000] netlink: 'syz.1.278': attribute type 11 has an invalid length. [ 91.482756][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.540666][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.683108][ T5891] team0: Port device team_slave_0 added [ 91.696760][ T6010] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 91.727839][ T6013] IPv6: Can't replace route, no match found [ 91.749922][ T5891] team0: Port device team_slave_1 added [ 91.910767][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.938512][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.970569][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.986000][ T6008] netlink: 'syz.2.281': attribute type 21 has an invalid length. [ 92.005256][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.028161][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.058644][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.120813][ T6035] netlink: 'syz.4.289': attribute type 3 has an invalid length. [ 92.269987][ T5891] hsr_slave_0: entered promiscuous mode [ 92.304900][ T5891] hsr_slave_1: entered promiscuous mode [ 92.321945][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.342809][ T5891] Cannot create hsr debugfs directory [ 92.355079][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.364201][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.381136][ T6039] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 92.425565][ T6051] Êü: entered promiscuous mode [ 92.779659][ T6070] IPv6: Can't replace route, no match found [ 92.865399][ T6078] __nla_validate_parse: 4 callbacks suppressed [ 92.865416][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 92.926818][ T6085] tipc: Can't bind to reserved service type 0 [ 92.977735][ T6077] netlink: 'syz.4.303': attribute type 2 has an invalid length. [ 93.013109][ T6077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.084565][ T5103] Bluetooth: hci4: command tx timeout [ 93.218649][ T6101] vlan2: entered promiscuous mode [ 93.223726][ T6101] gretap0: entered promiscuous mode [ 93.276921][ T6101] gretap0: left promiscuous mode [ 93.371114][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 93.479958][ T5891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.494439][ T6114] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 93.510276][ T6114] netlink: 'syz.1.314': attribute type 11 has an invalid length. [ 93.511610][ T5891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.540097][ T5891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.563342][ T5891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.793667][ T6132] IPv6: Can't replace route, no match found [ 93.817307][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'. [ 93.830937][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.998693][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.046907][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.054085][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.099707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.106902][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.248949][ T6162] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.327'. [ 94.285656][ T6162] netlink: 'syz.4.327': attribute type 2 has an invalid length. [ 94.447591][ T6169] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 94.477379][ T6169] netlink: 'syz.2.331': attribute type 11 has an invalid length. [ 94.709111][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.765196][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 94.789489][ T6181] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 94.917739][ T5891] veth0_vlan: entered promiscuous mode [ 94.935459][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 94.950760][ T5891] veth1_vlan: entered promiscuous mode [ 95.010332][ T5891] veth0_macvtap: entered promiscuous mode [ 95.019610][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.019817][ T6198] netlink: 'syz.4.340': attribute type 29 has an invalid length. [ 95.053504][ T5891] veth1_macvtap: entered promiscuous mode [ 95.070624][ T6198] netlink: 'syz.4.340': attribute type 29 has an invalid length. [ 95.121447][ T6193] netlink: 80 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.166452][ T5103] Bluetooth: hci4: command tx timeout [ 95.188318][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.242541][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.271632][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.282766][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.299171][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.344058][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.384530][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.399963][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.420467][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.431887][ T6206] netlink: 'syz.4.340': attribute type 29 has an invalid length. [ 95.461991][ T6209] IPv6: Can't replace route, no match found [ 95.539965][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.583868][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.601952][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.613031][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.633170][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.673326][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.683419][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.702602][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.712635][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.734884][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.748973][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.788758][ T5891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818584][ T5891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.834758][ T5891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.846430][ T5891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.932713][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 96.053564][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.077028][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.122372][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.159882][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.377790][ T6266] IPv6: Can't replace route, no match found [ 96.577481][ T6278] netlink: 'syz.1.361': attribute type 3 has an invalid length. [ 96.585436][ T6278] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.361'. [ 96.850851][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.858731][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.869482][ T6289] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 97.112320][ T6306] IPv6: Can't replace route, no match found [ 97.233156][ T6312] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 97.261703][ T6309] IPv6: Can't replace route, no match found [ 97.689611][ T6337] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.709892][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.720261][ T6337] netlink: 'syz.2.380': attribute type 11 has an invalid length. [ 97.744772][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.760370][ T6340] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 97.775432][ T6345] netlink: 'syz.2.380': attribute type 11 has an invalid length. [ 97.798864][ T6345] debugfs: Directory 'netdev:' with parent 'phy14' already present! [ 97.914120][ T6352] IPv6: Can't replace route, no match found [ 98.100189][ T6363] netlink: 'syz.1.389': attribute type 3 has an invalid length. [ 98.114064][ T6363] __nla_validate_parse: 3 callbacks suppressed [ 98.114082][ T6363] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.389'. [ 98.247640][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 98.491828][ T6382] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 98.510565][ T6382] netlink: 'syz.1.396': attribute type 11 has an invalid length. [ 98.558187][ T6385] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 98.583315][ T6385] netlink: 'syz.2.398': attribute type 11 has an invalid length. [ 98.603553][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.634734][ T6390] netlink: 'syz.2.398': attribute type 11 has an invalid length. [ 98.650116][ T6390] debugfs: Directory 'netdev:' with parent 'phy14' already present! [ 98.698480][ T6386] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 98.896217][ T6396] IPv6: Can't replace route, no match found [ 98.902641][ T6398] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 98.926162][ T6398] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.402'. [ 98.996929][ T6402] netlink: 'syz.1.403': attribute type 3 has an invalid length. [ 99.034077][ T6402] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.403'. [ 99.180932][ T6411] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 99.202747][ T6411] pim6reg0: linktype set to 821 [ 99.234988][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 99.278933][ T6411] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (4) [ 99.353140][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.361367][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.370805][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.381604][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.390229][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.398441][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.483232][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.558836][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.592758][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 99.602923][ T6425] netlink: 'syz.4.410': attribute type 3 has an invalid length. [ 99.615797][ T6425] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.410'. [ 99.771188][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.858799][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 99.917900][ T6438] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 99.951920][ T6438] netlink: 'syz.4.411': attribute type 11 has an invalid length. [ 100.104135][ T6440] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 100.139160][ T6448] netlink: 7 bytes leftover after parsing attributes in process `syz.1.417'. [ 100.300711][ T6451] IPv6: Can't replace route, no match found [ 100.339307][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 100.437694][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.456913][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.465599][ T6421] bridge_slave_0: entered allmulticast mode [ 100.473275][ T6421] bridge_slave_0: entered promiscuous mode [ 100.541353][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.571850][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.601614][ T6421] bridge_slave_1: entered allmulticast mode [ 100.635465][ T6421] bridge_slave_1: entered promiscuous mode [ 100.656016][ T62] bridge_slave_1: left allmulticast mode [ 100.661715][ T62] bridge_slave_1: left promiscuous mode [ 100.673694][ T6472] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 100.681596][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.700891][ T6472] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.421'. [ 100.711185][ T62] bridge_slave_0: left allmulticast mode [ 100.719686][ T62] bridge_slave_0: left promiscuous mode [ 100.727302][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.814964][ T6481] nbd: device at index 64 is going down [ 101.071189][ T6492] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 101.079233][ T6492] netlink: 'syz.4.428': attribute type 11 has an invalid length. [ 101.227611][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.240225][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.253713][ T62] bond0 (unregistering): Released all slaves [ 101.412184][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.483205][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.504642][ T5103] Bluetooth: hci4: command tx timeout [ 101.665954][ T6421] team0: Port device team_slave_0 added [ 101.710793][ T6499] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 101.887964][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.935113][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.963368][ T6507] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 102.027836][ T6506] IPv6: Can't replace route, no match found [ 102.040202][ T6421] team0: Port device team_slave_1 added [ 102.184073][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.209946][ T6521] netlink: 'syz.0.435': attribute type 3 has an invalid length. [ 102.219719][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.265863][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.321561][ T62] hsr_slave_0: left promiscuous mode [ 102.329445][ T62] hsr_slave_1: left promiscuous mode [ 102.346799][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.359791][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.380091][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.391126][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.441233][ T62] veth1_macvtap: left promiscuous mode [ 102.454448][ T62] veth0_macvtap: left promiscuous mode [ 102.464667][ T62] veth1_vlan: left promiscuous mode [ 102.470021][ T62] veth0_vlan: left promiscuous mode [ 102.735814][ T6538] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 102.755588][ T6538] netlink: 'syz.4.441': attribute type 11 has an invalid length. [ 103.392434][ T62] team0 (unregistering): Port device team_slave_1 removed [ 103.437128][ T62] team0 (unregistering): Port device team_slave_0 removed [ 103.566568][ T5103] Bluetooth: hci4: command tx timeout [ 104.080705][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.094104][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.142487][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.375568][ T6421] hsr_slave_0: entered promiscuous mode [ 104.401239][ T6421] hsr_slave_1: entered promiscuous mode [ 104.458997][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.475368][ T6421] Cannot create hsr debugfs directory [ 104.783518][ T6568] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 104.800563][ T6568] __nla_validate_parse: 6 callbacks suppressed [ 104.800580][ T6568] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.449'. [ 104.944176][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.452'. [ 104.974682][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.452'. [ 105.274815][ T6591] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 105.303503][ T6597] netlink: 'syz.0.463': attribute type 3 has an invalid length. [ 105.313531][ T6591] netlink: 'syz.2.460': attribute type 11 has an invalid length. [ 105.317225][ T6597] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.463'. [ 105.357237][ T6591] netlink: 'syz.2.460': attribute type 11 has an invalid length. [ 105.381092][ T6591] debugfs: Directory 'netdev:' with parent 'phy14' already present! [ 105.403703][ T6421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.436775][ T6421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.469688][ T6421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.506066][ T6421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.550410][ T6603] IPv6: Can't replace route, no match found [ 105.644739][ T5103] Bluetooth: hci4: command tx timeout [ 105.764862][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.800519][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.830523][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.837742][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.885491][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.892682][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.045083][ T6621] raw_sendmsg: syz.0.469 forgot to set AF_INET. Fix it! [ 106.311566][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.361903][ T6631] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 106.482191][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.474'. [ 106.513210][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.524136][ T6631] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 106.583797][ T6421] veth0_vlan: entered promiscuous mode [ 106.638475][ T6421] veth1_vlan: entered promiscuous mode [ 106.722413][ T6421] veth0_macvtap: entered promiscuous mode [ 106.733406][ T6421] veth1_macvtap: entered promiscuous mode [ 106.779762][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.795470][ T6642] netlink: 'syz.2.475': attribute type 3 has an invalid length. [ 106.800395][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.817928][ T6642] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.475'. [ 106.819662][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.852876][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.864626][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.875822][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.886669][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.897418][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.908251][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.919144][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.931571][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.950526][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.973267][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.985317][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.023205][ T6421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.044417][ T6421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.053159][ T6421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.084941][ T6421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.283896][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.297930][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.417459][ T2407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.443366][ T2407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.630014][ T6655] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 107.970783][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 108.227613][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 108.293722][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 108.346110][ T6674] netlink: 80 bytes leftover after parsing attributes in process `syz.0.486'. [ 108.903671][ T6696] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 109.079813][ T6703] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.811073][ T2483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.820956][ T6745] __nla_validate_parse: 3 callbacks suppressed [ 109.820973][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 109.922974][ T6732] netlink: 80 bytes leftover after parsing attributes in process `syz.4.506'. [ 110.746444][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.515'. [ 110.833176][ T6765] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.870305][ T6766] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 111.083555][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.093330][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.107905][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.136121][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.143875][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.151333][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.187412][ T6774] IPv6: Can't replace route, no match found [ 111.495035][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 111.778699][ T2483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.792531][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 111.911838][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 111.979637][ T2483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.037517][ T6770] chnl_net:caif_netlink_parms(): no params data found [ 112.059233][ T6810] netlink: 80 bytes leftover after parsing attributes in process `syz.2.523'. [ 112.149707][ T2483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.569614][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.586373][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.614016][ T6770] bridge_slave_0: entered allmulticast mode [ 112.631184][ T6770] bridge_slave_0: entered promiscuous mode [ 112.683127][ T6823] IPv6: Can't replace route, no match found [ 112.711253][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.754819][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.762345][ T6770] bridge_slave_1: entered allmulticast mode [ 112.818906][ T6770] bridge_slave_1: entered promiscuous mode [ 112.873677][ T6832] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 112.903882][ T6835] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 113.028763][ T6770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.061640][ T2483] bridge_slave_1: left allmulticast mode [ 113.086037][ T2483] bridge_slave_1: left promiscuous mode [ 113.096345][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.127816][ T2483] bridge_slave_0: left allmulticast mode [ 113.133544][ T2483] bridge_slave_0: left promiscuous mode [ 113.158783][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.196720][ T6845] netlink: 'syz.4.539': attribute type 3 has an invalid length. [ 113.212957][ T6845] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.539'. [ 113.245389][ T5103] Bluetooth: hci4: command tx timeout [ 113.883880][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.910968][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.927277][ T2483] bond0 (unregistering): Released all slaves [ 113.958034][ T6770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.983867][ T6841] veth1_vlan: entered allmulticast mode [ 113.994265][ T6848] IPv6: Can't replace route, no match found [ 114.092926][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.205369][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.263410][ T6770] team0: Port device team_slave_0 added [ 114.281583][ T6770] team0: Port device team_slave_1 added [ 114.376366][ T6863] netlink: 'syz.4.543': attribute type 11 has an invalid length. [ 114.384228][ T6863] netlink: 'syz.4.543': attribute type 5 has an invalid length. [ 114.427226][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.443809][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.515751][ T6770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.530911][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.543034][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.590048][ T6770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.696806][ T6891] netlink: 'syz.1.551': attribute type 3 has an invalid length. [ 114.751889][ T6878] IPv6: Can't replace route, no match found [ 114.910513][ T6770] hsr_slave_0: entered promiscuous mode [ 114.921852][ T6770] hsr_slave_1: entered promiscuous mode [ 114.936247][ T6770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.955019][ T6770] Cannot create hsr debugfs directory [ 115.000833][ T6901] IPv6: Can't replace route, no match found [ 115.098917][ T2483] hsr_slave_0: left promiscuous mode [ 115.132529][ T2483] hsr_slave_1: left promiscuous mode [ 115.169991][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.191156][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.224831][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.242869][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.288835][ T2483] veth1_macvtap: left promiscuous mode [ 115.307817][ T2483] veth0_macvtap: left promiscuous mode [ 115.319157][ T2483] veth1_vlan: left promiscuous mode [ 115.326673][ T5103] Bluetooth: hci4: command tx timeout [ 115.334012][ T2483] veth0_vlan: left promiscuous mode [ 116.216974][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 116.283198][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 116.986435][ T6930] __nla_validate_parse: 2 callbacks suppressed [ 116.986455][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 117.287865][ T6937] IPv6: Can't replace route, no match found [ 117.406814][ T5103] Bluetooth: hci4: command tx timeout [ 117.425857][ T6948] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 117.460012][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 117.479450][ T6948] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.566'. [ 117.604511][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 117.700158][ T6942] netlink: 80 bytes leftover after parsing attributes in process `syz.1.565'. [ 118.035186][ T6770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.077704][ T6770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.100986][ T6770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.165329][ T6770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.481872][ T6770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.489282][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 118.542762][ T6770] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.623831][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.631056][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.641097][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.648346][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.914016][ T6982] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 118.940340][ T6982] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 118.974473][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 119.266418][ T7001] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 119.274121][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 119.389127][ T6770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.485680][ T5103] Bluetooth: hci4: command tx timeout [ 119.550005][ T6770] veth0_vlan: entered promiscuous mode [ 119.617708][ T6770] veth1_vlan: entered promiscuous mode [ 119.704210][ T7016] x_tables: unsorted entry at hook 1 [ 119.705884][ T6770] veth0_macvtap: entered promiscuous mode [ 119.738397][ T6770] veth1_macvtap: entered promiscuous mode [ 119.784266][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.808286][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.845903][ T6770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.892459][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.904028][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.925502][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.945612][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.968217][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.998856][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.023128][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.040030][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.052916][ T6770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.068222][ T6770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.087691][ T6770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.099310][ T6770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.123774][ T6770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.133820][ T6770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.143124][ T6770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.388362][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.413363][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.483991][ T7050] Bluetooth: MGMT ver 1.22 [ 120.490497][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 120.490866][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.543142][ T7054] IPv6: Can't replace route, no match found [ 120.543898][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.057066][ T7082] trusted_key: syz.1.609 sent an empty control message without MSG_MORE. [ 121.427437][ T7102] warning: `syz.1.612' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.536348][ T7108] Driver unsupported XDP return value 0 on prog (id 157) dev N/A, expect packet loss! [ 121.903627][ T7125] netlink: 'syz.0.626': attribute type 11 has an invalid length. [ 121.925391][ T7125] netlink: 'syz.0.626': attribute type 11 has an invalid length. [ 121.947607][ T7125] debugfs: Directory 'netdev:' with parent 'phy20' already present! [ 121.989567][ T29] audit: type=1800 audit(1719531352.305:3): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.627" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 122.070035][ T29] audit: type=1800 audit(1719531352.345:4): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.627" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 122.401499][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 122.404163][ T7142] bond0: entered promiscuous mode [ 122.434144][ T7142] bond_slave_0: entered promiscuous mode [ 122.450932][ T7142] bond_slave_1: entered promiscuous mode [ 122.570411][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 122.700266][ T7163] netlink: 'syz.4.641': attribute type 11 has an invalid length. [ 122.728429][ T7163] netlink: 'syz.4.641': attribute type 11 has an invalid length. [ 124.279038][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.302513][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.316621][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.351312][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.370201][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.382967][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.719996][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.823356][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 124.905220][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.021892][ T7201] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 125.095411][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.252121][ T7209] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 125.260813][ T7209] netlink: 'syz.4.653': attribute type 11 has an invalid length. [ 125.301763][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.421080][ T7212] netlink: 'syz.2.656': attribute type 11 has an invalid length. [ 125.481220][ T7212] netlink: 'syz.2.656': attribute type 11 has an invalid length. [ 125.493479][ T7212] debugfs: Directory 'netdev:' with parent 'phy14' already present! [ 125.522270][ T7219] IPv6: Can't replace route, no match found [ 125.671597][ T7230] netlink: 'syz.4.660': attribute type 3 has an invalid length. [ 125.679802][ T7230] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.660'. [ 125.855020][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 125.921231][ T11] bridge_slave_1: left allmulticast mode [ 125.927799][ T11] bridge_slave_1: left promiscuous mode [ 125.933572][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.983067][ T11] bridge_slave_0: left allmulticast mode [ 125.992208][ T11] bridge_slave_0: left promiscuous mode [ 126.004893][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.040212][ T7249] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 126.050830][ T7249] netlink: 'syz.2.667': attribute type 11 has an invalid length. [ 126.372268][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.391242][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.402535][ T11] bond0 (unregistering): Released all slaves [ 126.444825][ T5103] Bluetooth: hci4: command tx timeout [ 126.642788][ T7268] netlink: 'syz.1.673': attribute type 3 has an invalid length. [ 126.668462][ T7268] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.673'. [ 126.805821][ T7272] IPv6: Can't replace route, no match found [ 126.827341][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.864803][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.872095][ T7180] bridge_slave_0: entered allmulticast mode [ 126.896767][ T7180] bridge_slave_0: entered promiscuous mode [ 126.916768][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.949959][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.958129][ T7180] bridge_slave_1: entered allmulticast mode [ 126.977702][ T7180] bridge_slave_1: entered promiscuous mode [ 127.231880][ T7301] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 127.240373][ T7304] Bluetooth: MGMT ver 1.22 [ 127.251530][ T7304] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 127.253481][ T7301] netlink: 'syz.1.683': attribute type 11 has an invalid length. [ 127.271203][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.299232][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.400041][ T7180] team0: Port device team_slave_0 added [ 127.466523][ T11] hsr_slave_0: left promiscuous mode [ 127.492675][ T11] hsr_slave_1: left promiscuous mode [ 127.514701][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.515946][ T7316] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 127.527402][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.545455][ T7316] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.689'. [ 127.556610][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.564148][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.612735][ T11] veth1_macvtap: left promiscuous mode [ 127.632669][ T11] veth0_macvtap: left promiscuous mode [ 127.639350][ T11] veth1_vlan: left promiscuous mode [ 127.651968][ T11] veth0_vlan: left promiscuous mode [ 127.694493][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.267366][ T11] team0 (unregistering): Port device team_slave_1 removed [ 128.304186][ T11] team0 (unregistering): Port device team_slave_0 removed [ 128.525011][ T5103] Bluetooth: hci4: command tx timeout [ 128.662449][ T7180] team0: Port device team_slave_1 added [ 128.771944][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.799446][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.839922][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.885954][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.892940][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.942549][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.974227][ T7338] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 129.036153][ T7342] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 129.044093][ T7342] netlink: 113884 bytes leftover after parsing attributes in process `syz.4.700'. [ 129.065669][ T7342] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 129.135201][ T7180] hsr_slave_0: entered promiscuous mode [ 129.148621][ T7180] hsr_slave_1: entered promiscuous mode [ 129.160107][ T7180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.175627][ T7180] Cannot create hsr debugfs directory [ 129.339565][ T7350] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 129.377896][ T7350] netlink: 'syz.2.704': attribute type 11 has an invalid length. [ 129.583437][ T7356] smc: net device lo applied user defined pnetid SYZ2 [ 129.810816][ T7373] netlink: 'syz.4.712': attribute type 3 has an invalid length. [ 129.826406][ T7373] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.712'. [ 129.989513][ T7384] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 130.021470][ T7384] netlink: 'syz.0.719': attribute type 11 has an invalid length. [ 130.156941][ T7385] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 130.326498][ T7180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.363986][ T7180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.388797][ T7180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.420481][ T7180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.558136][ T7413] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 130.572736][ T7413] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.729'. [ 130.606088][ T5103] Bluetooth: hci4: command tx timeout [ 130.755197][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.834979][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.886940][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.894105][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.975489][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.982682][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.471180][ T7456] netlink: 'syz.1.744': attribute type 3 has an invalid length. [ 131.487874][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.504560][ T7456] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.744'. [ 131.632868][ T7180] veth0_vlan: entered promiscuous mode [ 131.706337][ T7180] veth1_vlan: entered promiscuous mode [ 131.783493][ T7180] veth0_macvtap: entered promiscuous mode [ 131.831937][ T7180] veth1_macvtap: entered promiscuous mode [ 131.899017][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.943283][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.983200][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.078482][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.107061][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.124753][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.150023][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.162253][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.177057][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.187079][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.198552][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.209659][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.223564][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.237990][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.252026][ T7180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.262595][ T7180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.271655][ T7180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.281493][ T7180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.414246][ T7498] netlink: 'syz.1.760': attribute type 3 has an invalid length. [ 132.438514][ T7498] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.760'. [ 132.452965][ T2407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.472268][ T2407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.542025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.560105][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.249433][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.256582][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.516337][ T7523] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 133.540522][ T7523] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 133.558949][ T7523] debugfs: Directory 'netdev:' with parent 'phy18' already present! [ 133.690435][ T7527] netlink: 'syz.4.775': attribute type 3 has an invalid length. [ 133.696802][ T7525] batman_adv: batadv0: Adding interface: gretap1 [ 133.704846][ T7527] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.775'. [ 133.722702][ T7525] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.775249][ T7525] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 133.886403][ T7529] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 134.414963][ T7540] netlink: 'syz.4.781': attribute type 11 has an invalid length. [ 134.443321][ T7540] netlink: 'syz.4.781': attribute type 11 has an invalid length. [ 134.462899][ T7540] debugfs: Directory 'netdev:' with parent 'phy18' already present! [ 134.734245][ T7548] netlink: 'syz.4.785': attribute type 11 has an invalid length. [ 134.787400][ T7551] netlink: 'syz.4.785': attribute type 11 has an invalid length. [ 134.913501][ T2407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.000316][ T7551] debugfs: Directory 'netdev:' with parent 'phy18' already present! [ 135.057042][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.786'. [ 136.007298][ T7568] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 136.034661][ T7568] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.789'. [ 136.043925][ T7568] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 136.337372][ T2407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.485486][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.522709][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.532335][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.541987][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.550081][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.559436][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.577472][ T2407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.653566][ T7581] IPv6: Can't replace route, no match found [ 136.747413][ T2407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.171746][ T2407] bridge_slave_1: left allmulticast mode [ 137.204683][ T2407] bridge_slave_1: left promiscuous mode [ 137.211054][ T2407] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.277690][ T2407] bridge_slave_0: left allmulticast mode [ 137.283386][ T2407] bridge_slave_0: left promiscuous mode [ 137.314592][ T2407] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.164139][ T2407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.172537][ T7620] netlink: 'syz.2.803': attribute type 11 has an invalid length. [ 138.184033][ T2407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.200189][ T2407] bond0 (unregistering): Released all slaves [ 138.230528][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 138.570627][ T7632] IPv6: Can't replace route, no match found [ 138.595620][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 138.651609][ T7642] ipt_REJECT: ECHOREPLY no longer supported. [ 138.685906][ T5103] Bluetooth: hci4: command tx timeout [ 139.070496][ T2407] hsr_slave_0: left promiscuous mode [ 139.144976][ T2407] hsr_slave_1: left promiscuous mode [ 139.206391][ T2407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.213859][ T2407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.255508][ T2407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.262962][ T2407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.364649][ T2407] veth1_macvtap: left promiscuous mode [ 139.370223][ T2407] veth0_macvtap: left promiscuous mode [ 139.404536][ T2407] veth1_vlan: left promiscuous mode [ 139.409911][ T2407] veth0_vlan: left promiscuous mode [ 140.315341][ T2407] team0 (unregistering): Port device team_slave_1 removed [ 140.381182][ T2407] team0 (unregistering): Port device team_slave_0 removed [ 140.764683][ T5103] Bluetooth: hci4: command tx timeout [ 141.074127][ T7664] IPv6: Can't replace route, no match found [ 141.174210][ T7679] netlink: 'syz.1.817': attribute type 11 has an invalid length. [ 141.196818][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.204977][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.225698][ T7578] bridge_slave_0: entered allmulticast mode [ 141.238562][ T7578] bridge_slave_0: entered promiscuous mode [ 141.272722][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.290309][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.328826][ T7578] bridge_slave_1: entered allmulticast mode [ 141.345411][ T7578] bridge_slave_1: entered promiscuous mode [ 141.410558][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.459070][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.535295][ T7689] IPv6: Can't replace route, no match found [ 141.618576][ T7578] team0: Port device team_slave_0 added [ 141.659178][ T7578] team0: Port device team_slave_1 added [ 141.805384][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.812372][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.841884][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.867441][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.886509][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.933010][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.958700][ T7702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.966030][ T7702] IPv6: NLM_F_CREATE should be set when creating new route [ 141.973307][ T7702] IPv6: NLM_F_CREATE should be set when creating new route [ 142.153404][ T7712] IPv6: Can't replace route, no match found [ 142.231792][ T7578] hsr_slave_0: entered promiscuous mode [ 142.259985][ T7578] hsr_slave_1: entered promiscuous mode [ 142.288583][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.315473][ T7721] netlink: 'syz.2.832': attribute type 11 has an invalid length. [ 142.334789][ T7578] Cannot create hsr debugfs directory [ 142.622765][ T7736] IPv6: Can't replace route, no match found [ 142.845247][ T5103] Bluetooth: hci4: command tx timeout [ 143.042888][ T7749] netlink: 'syz.0.839': attribute type 11 has an invalid length. [ 143.363203][ T7578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.403943][ T7578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.431969][ T7578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.453300][ T7578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.750975][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.837172][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.893752][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.900974][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.950570][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.957764][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.045808][ T7779] IPv6: Can't replace route, no match found [ 144.258611][ T7789] batadv_slave_0: entered allmulticast mode [ 144.342842][ T7795] netlink: 'syz.0.852': attribute type 11 has an invalid length. [ 144.563046][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.679748][ T7578] veth0_vlan: entered promiscuous mode [ 144.736622][ T7578] veth1_vlan: entered promiscuous mode [ 144.827803][ T7578] veth0_macvtap: entered promiscuous mode [ 144.840669][ T7811] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 144.867937][ T7578] veth1_macvtap: entered promiscuous mode [ 144.922105][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.933621][ T5103] Bluetooth: hci4: command tx timeout [ 144.953150][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.966735][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.017795][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.055861][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.089163][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.113937][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.124587][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.136824][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.149501][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.168350][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.180157][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.194186][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.207946][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.233608][ T7578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.267253][ T7578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.291525][ T7578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.322645][ T7578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.570958][ T7825] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 145.591998][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.611129][ T7825] netlink: 'syz.1.865': attribute type 11 has an invalid length. [ 145.622973][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.741954][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.764376][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.966048][ T7840] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 145.973749][ T7840] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.872'. [ 145.985790][ T7840] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 146.166020][ T29] audit: type=1804 audit(1719531376.475:5): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.871" name="/root/syzkaller.IFcj3x/157/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 146.207372][ T7850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.214397][ T7850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.239155][ T7838] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.245720][ T29] audit: type=1804 audit(1719531376.535:6): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.874" name="/root/syzkaller.UvVymJ/159/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 146.491759][ T7857] netlink: 56 bytes leftover after parsing attributes in process `syz.4.877'. [ 146.786246][ T7864] netlink: 'syz.0.881': attribute type 11 has an invalid length. [ 146.805268][ T7864] netlink: 'syz.0.881': attribute type 11 has an invalid length. [ 146.813135][ T7864] debugfs: Directory 'netdev:' with parent 'phy20' already present! [ 147.256269][ T7881] IPv6: Can't replace route, no match found [ 147.348927][ T7879] netlink: 76 bytes leftover after parsing attributes in process `syz.1.887'. [ 147.536419][ T7879] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 147.763703][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 148.023636][ T7899] netlink: 'syz.4.893': attribute type 11 has an invalid length. [ 148.047130][ T7899] netlink: 'syz.4.893': attribute type 11 has an invalid length. [ 148.063950][ T7899] debugfs: Directory 'netdev:' with parent 'phy18' already present! [ 148.112892][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 148.212991][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 148.263666][ T7901] netlink: 80 bytes leftover after parsing attributes in process `syz.0.894'. [ 148.624597][ T2483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.699025][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 149.472288][ T7928] IPv6: Can't replace route, no match found [ 149.847903][ T2483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.931362][ T7949] netlink: 'syz.4.910': attribute type 5 has an invalid length. [ 149.952200][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.962583][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.977478][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.987519][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.988608][ T2483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.010163][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.019169][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.087898][ T2483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.172415][ T7957] netlink: 'syz.4.912': attribute type 8 has an invalid length. [ 150.327932][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 150.497852][ T7965] IPv6: Can't replace route, no match found [ 150.515178][ T2483] bridge_slave_1: left allmulticast mode [ 150.521785][ T2483] bridge_slave_1: left promiscuous mode [ 150.531043][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.555377][ T2483] bridge_slave_0: left allmulticast mode [ 150.561074][ T2483] bridge_slave_0: left promiscuous mode [ 150.567484][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.290147][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.307676][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.319127][ T2483] bond0 (unregistering): Released all slaves [ 151.341773][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'. [ 151.405285][ T7993] IPv6: Can't replace route, no match found [ 151.435494][ T7995] IPv6: Can't replace route, no match found [ 151.557697][ T8015] netlink: 'syz.1.922': attribute type 5 has an invalid length. [ 151.660303][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.667689][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.677222][ T7951] bridge_slave_0: entered allmulticast mode [ 151.686133][ T7951] bridge_slave_0: entered promiscuous mode [ 151.716756][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.726646][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.733907][ T7951] bridge_slave_1: entered allmulticast mode [ 151.754603][ T7951] bridge_slave_1: entered promiscuous mode [ 151.883649][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.941336][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.970987][ T8037] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 151.996330][ T8041] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 152.004216][ T8041] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.932'. [ 152.013674][ T8041] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 152.062990][ T7951] team0: Port device team_slave_0 added [ 152.088378][ T7951] team0: Port device team_slave_1 added [ 152.111751][ T2483] hsr_slave_0: left promiscuous mode [ 152.126867][ T5101] Bluetooth: hci4: command tx timeout [ 152.134819][ T2483] hsr_slave_1: left promiscuous mode [ 152.141862][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.149627][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.159224][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.174619][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.210458][ T2483] veth1_macvtap: left promiscuous mode [ 152.216475][ T2483] veth0_macvtap: left promiscuous mode [ 152.222578][ T2483] veth1_vlan: left promiscuous mode [ 152.228674][ T2483] veth0_vlan: left promiscuous mode [ 152.361728][ T8052] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 152.377661][ T8052] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.935'. [ 152.396498][ T8052] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 152.531678][ T29] audit: type=1800 audit(1719531382.835:7): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.936" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 152.573354][ T29] audit: type=1804 audit(1719531382.865:8): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.936" name="/root/syzkaller.IFcj3x/176/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 152.644064][ T29] audit: type=1804 audit(1719531382.875:9): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.936" name="/root/syzkaller.IFcj3x/176/memory.events" dev="sda1" ino=1976 res=1 errno=0 [ 153.234132][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 153.274112][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 153.654114][ T8046] IPv6: Can't replace route, no match found [ 153.763818][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.784369][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.865564][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.868993][ T8082] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 153.887201][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.894271][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.905104][ T8082] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.944'. [ 153.922084][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.963687][ T8082] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 154.129061][ T7951] hsr_slave_0: entered promiscuous mode [ 154.135198][ T8094] syz.1.946[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.135418][ T8094] syz.1.946[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.148126][ T7951] hsr_slave_1: entered promiscuous mode [ 154.181239][ T7951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.192762][ T7951] Cannot create hsr debugfs directory [ 154.204909][ T5101] Bluetooth: hci4: command tx timeout [ 154.584681][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 154.648256][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 154.692311][ T8110] netlink: 80 bytes leftover after parsing attributes in process `syz.1.953'. [ 154.987387][ T7951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.036030][ T7951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.036814][ T8130] syz.0.961[8130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.042986][ T8130] syz.0.961[8130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.070755][ T7951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.125551][ T8134] netlink: 'syz.2.963': attribute type 2 has an invalid length. [ 155.128527][ T7951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.148428][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'. [ 155.354954][ T8140] IPv6: Can't replace route, no match found [ 155.407735][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.481048][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.547222][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.554451][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.567616][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.574831][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.662912][ T8154] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 155.681979][ T7951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.696435][ T8154] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.971'. [ 155.701165][ T7951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.731544][ T8154] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 155.913180][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 155.962201][ T8167] : entered promiscuous mode [ 155.978122][ T8174] bridge_slave_1: left allmulticast mode [ 155.994031][ T8174] bridge_slave_1: left promiscuous mode [ 156.015959][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.071589][ T8174] bridge_slave_0: left allmulticast mode [ 156.086637][ T8174] bridge_slave_0: left promiscuous mode [ 156.098150][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.236234][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.285300][ T5101] Bluetooth: hci4: command tx timeout [ 156.340895][ T7951] veth0_vlan: entered promiscuous mode [ 156.354065][ T7951] veth1_vlan: entered promiscuous mode [ 156.420125][ T7951] veth0_macvtap: entered promiscuous mode [ 156.451638][ T7951] veth1_macvtap: entered promiscuous mode [ 156.521783][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.563627][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.593076][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.616291][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.627148][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.638466][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.665055][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.684545][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.709730][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.729256][ T8205] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 156.736877][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.754366][ T8205] __nla_validate_parse: 3 callbacks suppressed [ 156.754383][ T8205] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.984'. [ 156.761554][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.803042][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.803138][ T8205] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 156.825234][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.848548][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.859639][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 156.870090][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 156.895688][ T8206] geneve2: entered promiscuous mode [ 156.901103][ T8206] geneve2: entered allmulticast mode [ 156.917276][ T7951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.935462][ T7951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.958537][ T8218] netlink: 'syz.1.988': attribute type 3 has an invalid length. [ 156.964361][ T7951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.978619][ T8218] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.988'. [ 156.986599][ T7951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.070863][ T8225] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 157.094093][ T8225] netlink: 'syz.4.990': attribute type 11 has an invalid length. [ 157.218365][ T2396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.251208][ T2396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.310338][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.331488][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.356972][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 158.269256][ T8280] IPv6: Can't replace route, no match found [ 158.283260][ T8282] netlink: 'syz.2.1015': attribute type 11 has an invalid length. [ 159.176888][ T8323] veth0_vlan: entered allmulticast mode [ 159.474526][ T8330] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 159.513252][ T8330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1027'. [ 159.553573][ T8330] bond0: entered promiscuous mode [ 159.564890][ T5103] Bluetooth: hci3: command 0x0405 tx timeout [ 159.584470][ T8330] bond_slave_0: entered promiscuous mode [ 159.590348][ T8330] bond_slave_1: entered promiscuous mode [ 159.626361][ T8330] bond0: entered allmulticast mode [ 159.651671][ T8330] bond_slave_0: entered allmulticast mode [ 159.661827][ T8330] bond_slave_1: entered allmulticast mode [ 159.684161][ T8330] bridge0: port 3(bond0) entered blocking state [ 159.704792][ T8330] bridge0: port 3(bond0) entered disabled state [ 159.732749][ T8330] bridge0: port 3(bond0) entered blocking state [ 159.739223][ T8330] bridge0: port 3(bond0) entered forwarding state [ 159.776313][ T8336] IPv6: Can't replace route, no match found [ 160.299359][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.284561][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.333071][ T8357] team0: Port device virt_wifi0 added [ 161.436995][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.628641][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.857871][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.916949][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.928485][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.939245][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.956348][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.969020][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.977070][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.313513][ T35] bridge_slave_1: left allmulticast mode [ 162.337500][ T35] bridge_slave_1: left promiscuous mode [ 162.343299][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.377839][ T35] bridge_slave_0: left allmulticast mode [ 162.383533][ T35] bridge_slave_0: left promiscuous mode [ 162.416822][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.958501][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1045'. [ 163.307772][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.346246][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.370034][ T35] bond0 (unregistering): Released all slaves [ 164.044553][ T5103] Bluetooth: hci4: command tx timeout [ 164.082381][ T8407] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 164.105457][ T35] hsr_slave_0: left promiscuous mode [ 164.123650][ T35] hsr_slave_1: left promiscuous mode [ 164.142499][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.161273][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.177128][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.192483][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.245240][ T35] veth1_macvtap: left promiscuous mode [ 164.254013][ T35] veth0_macvtap: left promiscuous mode [ 164.266258][ T35] veth1_vlan: left promiscuous mode [ 164.271781][ T35] veth0_vlan: left promiscuous mode [ 165.071542][ T35] team0 (unregistering): Port device team_slave_1 removed [ 165.133566][ T35] team0 (unregistering): Port device team_slave_0 removed [ 165.134242][ T8412] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 165.149759][ T8412] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1053'. [ 165.913991][ T8373] chnl_net:caif_netlink_parms(): no params data found [ 166.124635][ T5103] Bluetooth: hci4: command tx timeout [ 166.239462][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.270521][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.294629][ T8373] bridge_slave_0: entered allmulticast mode [ 166.305205][ T8373] bridge_slave_0: entered promiscuous mode [ 166.329994][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.355629][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.377081][ T8373] bridge_slave_1: entered allmulticast mode [ 166.391625][ T8373] bridge_slave_1: entered promiscuous mode [ 166.503083][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.542863][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.603040][ T8373] team0: Port device team_slave_0 added [ 166.638556][ T8373] team0: Port device team_slave_1 added [ 166.700156][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.711677][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.753825][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.806243][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.823080][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.874530][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.065990][ T8373] hsr_slave_0: entered promiscuous mode [ 167.079481][ T8373] hsr_slave_1: entered promiscuous mode [ 167.096144][ T8373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.117785][ T8373] Cannot create hsr debugfs directory [ 167.432974][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1065'. [ 167.455179][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1065'. [ 167.476447][ T8459] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1065'. [ 167.615614][ T8457] netlink: set zone limit has 4 unknown bytes [ 167.743888][ T8471] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1069'. [ 167.791898][ T8471] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 167.854218][ T8471] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 167.871429][ T8471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.151887][ T8373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.197437][ T8373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.214646][ T5103] Bluetooth: hci4: command tx timeout [ 168.238368][ T8373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.253151][ T8373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.382571][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.418823][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.482243][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.490243][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.512416][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.519615][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.561232][ T8490] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 168.619587][ T8490] netlink: 95796 bytes leftover after parsing attributes in process `syz.4.1075'. [ 168.643843][ T8490] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 168.783568][ T8477] syz.1.1070: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 168.804546][ T8477] CPU: 1 PID: 8477 Comm: syz.1.1070 Not tainted 6.10.0-rc4-syzkaller-00948-gcce346d44139 #0 [ 168.814650][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.824735][ T8477] Call Trace: [ 168.828039][ T8477] [ 168.830992][ T8477] dump_stack_lvl+0x241/0x360 [ 168.835729][ T8477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.840963][ T8477] ? __pfx__printk+0x10/0x10 [ 168.845584][ T8477] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.852030][ T8477] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.858572][ T8477] warn_alloc+0x278/0x410 [ 168.862945][ T8477] ? __pfx_warn_alloc+0x10/0x10 [ 168.867832][ T8477] ? hash_ipport_create+0x801/0x1670 [ 168.873147][ T8477] ? __get_vm_area_node+0x23d/0x270 [ 168.876877][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.878355][ T8477] __vmalloc_node_range_noprof+0x69f/0x1460 [ 168.891082][ T8477] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.897432][ T8477] ? rcu_is_watching+0x15/0xb0 [ 168.902573][ T8477] ? trace_kmalloc+0x1f/0xd0 [ 168.907193][ T8477] ? __kmalloc_node_noprof+0x247/0x440 [ 168.912668][ T8477] ? kvmalloc_node_noprof+0x72/0x190 [ 168.917974][ T8477] kvmalloc_node_noprof+0x142/0x190 [ 168.923197][ T8477] ? hash_ipport_create+0x801/0x1670 [ 168.928504][ T8477] hash_ipport_create+0x801/0x1670 [ 168.933638][ T8477] ? __pfx_lock_acquire+0x10/0x10 [ 168.938688][ T8477] ? __pfx_hash_ipport_create+0x10/0x10 [ 168.944254][ T8477] ? __nla_parse+0x40/0x60 [ 168.948697][ T8477] ? __pfx_hash_ipport_create+0x10/0x10 [ 168.954270][ T8477] ip_set_create+0xa5c/0x1900 [ 168.958970][ T8477] ? ip_set_create+0x45e/0x1900 [ 168.963850][ T8477] ? __pfx_ip_set_create+0x10/0x10 [ 168.969035][ T8477] ? nfnetlink_rcv_msg+0x225/0x1180 [ 168.974262][ T8477] nfnetlink_rcv_msg+0xbec/0x1180 [ 168.979304][ T8477] ? kernel_text_address+0xa7/0xe0 [ 168.984442][ T8477] ? nfnetlink_rcv_msg+0x225/0x1180 [ 168.989686][ T8477] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.995188][ T8477] ? netlink_deliver_tap+0x19d/0x1b0 [ 169.000492][ T8477] ? netlink_unicast+0x7be/0x990 [ 169.005455][ T8477] ? netlink_sendmsg+0x8e4/0xcb0 [ 169.010414][ T8477] ? __sock_sendmsg+0x221/0x270 [ 169.015293][ T8477] ? ____sys_sendmsg+0x525/0x7d0 [ 169.020255][ T8477] ? __sys_sendmsg+0x2b0/0x3a0 [ 169.025042][ T8477] ? do_syscall_64+0xf3/0x230 [ 169.029927][ T8477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.036033][ T8477] netlink_rcv_skb+0x1e3/0x430 [ 169.040819][ T8477] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 169.046299][ T8477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.051626][ T8477] ? apparmor_capable+0x138/0x1b0 [ 169.056684][ T8477] ? bpf_lsm_capable+0x9/0x10 [ 169.061390][ T8477] ? security_capable+0x90/0xb0 [ 169.064101][ T8373] veth0_vlan: entered promiscuous mode [ 169.066252][ T8477] nfnetlink_rcv+0x297/0x2a90 [ 169.066284][ T8477] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 169.082170][ T8477] ? __dev_queue_xmit+0x2da/0x3e90 [ 169.087315][ T8477] ? __dev_queue_xmit+0x1763/0x3e90 [ 169.092543][ T8477] ? kasan_save_track+0x51/0x80 [ 169.097437][ T8477] ? do_syscall_64+0xf3/0x230 [ 169.102147][ T8477] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 169.105979][ T8373] veth1_vlan: entered promiscuous mode [ 169.107261][ T8477] ? __dev_queue_xmit+0x2da/0x3e90 [ 169.117834][ T8477] ? __pfx___dev_queue_xmit+0x10/0x10 [ 169.123255][ T8477] ? ref_tracker_free+0x643/0x7e0 [ 169.128312][ T8477] ? __asan_memcpy+0x40/0x70 [ 169.132929][ T8477] ? __pfx_ref_tracker_free+0x10/0x10 [ 169.138351][ T8477] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.143567][ T8477] ? skb_clone+0x240/0x390 [ 169.148010][ T8477] ? __pfx_lock_release+0x10/0x10 [ 169.153106][ T8477] ? __netlink_deliver_tap+0x77e/0x7c0 [ 169.158605][ T8477] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.163825][ T8477] netlink_unicast+0x7f0/0x990 [ 169.168629][ T8477] ? __pfx_netlink_unicast+0x10/0x10 [ 169.173948][ T8477] ? __virt_addr_valid+0x183/0x520 [ 169.179087][ T8477] ? __check_object_size+0x49c/0x900 [ 169.183747][ T8373] veth0_macvtap: entered promiscuous mode [ 169.184376][ T8477] ? bpf_lsm_netlink_send+0x9/0x10 [ 169.184412][ T8477] netlink_sendmsg+0x8e4/0xcb0 [ 169.184446][ T8477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.184467][ T8477] ? __import_iovec+0x536/0x820 [ 169.184487][ T8477] ? aa_sock_msg_perm+0x91/0x160 [ 169.209427][ T8373] veth1_macvtap: entered promiscuous mode [ 169.210128][ T8477] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.226069][ T8477] ? security_socket_sendmsg+0x87/0xb0 [ 169.231556][ T8477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.236865][ T8477] __sock_sendmsg+0x221/0x270 [ 169.241577][ T8477] ____sys_sendmsg+0x525/0x7d0 [ 169.246382][ T8477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.251708][ T8477] __sys_sendmsg+0x2b0/0x3a0 [ 169.256332][ T8477] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.261029][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.261489][ T8477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.278275][ T8477] ? do_syscall_64+0x100/0x230 [ 169.283079][ T8477] ? do_syscall_64+0xb6/0x230 [ 169.287792][ T8477] do_syscall_64+0xf3/0x230 [ 169.291164][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.292306][ T8477] ? clear_bhb_loop+0x35/0x90 [ 169.307039][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.312977][ T8477] RIP: 0033:0x7feda1d75b29 [ 169.317409][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.318543][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.337009][ T8477] RSP: 002b:00007feda2b17048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.337035][ T8477] RAX: ffffffffffffffda RBX: 00007feda1f04070 RCX: 00007feda1d75b29 [ 169.337048][ T8477] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 169.337061][ T8477] RBP: 00007feda1df6756 R08: 0000000000000000 R09: 0000000000000000 [ 169.337073][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.337086][ T8477] R13: 000000000000006e R14: 00007feda1f04070 R15: 00007ffea03487a8 [ 169.337113][ T8477] [ 169.352933][ T8477] Mem-Info: [ 169.407020][ T8477] active_anon:3096 inactive_anon:0 isolated_anon:0 [ 169.407020][ T8477] active_file:1628 inactive_file:38640 isolated_file:0 [ 169.407020][ T8477] unevictable:768 dirty:252 writeback:0 [ 169.407020][ T8477] slab_reclaimable:10123 slab_unreclaimable:98536 [ 169.407020][ T8477] mapped:13239 shmem:1245 pagetables:645 [ 169.407020][ T8477] sec_pagetables:0 bounce:0 [ 169.407020][ T8477] kernel_misc_reclaimable:0 [ 169.407020][ T8477] free:1398269 free_pcp:295 free_cma:0 [ 169.456498][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.476809][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.501651][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.527399][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.547663][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.577182][ T8477] Node 0 active_anon:12384kB inactive_anon:0kB active_file:6512kB inactive_file:154476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52956kB dirty:1004kB writeback:0kB shmem:3444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 169.579587][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.642522][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.653340][ T8477] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 169.653396][ T8477] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.653454][ T8477] lowmem_reserve[]: 0 2571 [ 169.741614][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.752068][ T8477] 2571 0 0 [ 169.773375][ T8477] Node 0 DMA32 free:1624456kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:12440kB inactive_anon:0kB active_file:6512kB inactive_file:154168kB unevictable:1536kB writepending:1000kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1524kB local_pcp:344kB free_cma:0kB [ 169.788067][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.819958][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.845378][ T8477] lowmem_reserve[]: 0 0 0 0 0 [ 169.851704][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.855162][ T8477] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 169.892358][ T8477] lowmem_reserve[]: 0 0 0 0 0 [ 169.902251][ T8477] Node 1 Normal free:3952012kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 169.920892][ T8373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.953168][ T8477] lowmem_reserve[]: 0 0 0 0 0 [ 169.957294][ T8373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.968738][ T8373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.983598][ T8477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.987329][ T8373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.005462][ T8477] Node 0 DMA32: 88*4kB (UME) 317*8kB (UME) 323*16kB (UME) 253*32kB (UME) 243*64kB (UME) 197*128kB (UME) 93*256kB (UM) 58*512kB (UME) 40*1024kB (UM) 7*2048kB (UME) 356*4096kB (UM) = 1623896kB [ 170.005669][ T8477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 170.005793][ T8477] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 13*32kB (UM) 6*64kB (U) 7*128kB (U) 5*256kB (UM) 7*512kB (UM) 3*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3952064kB [ 170.005990][ T8477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.006008][ T8477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.006026][ T8477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.006042][ T8477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.006060][ T8477] 41513 total pagecache pages [ 170.006072][ T8477] 0 pages in swap cache [ 170.006080][ T8477] Free swap = 124996kB [ 170.006089][ T8477] Total swap = 124996kB [ 170.006098][ T8477] 2097051 pages RAM [ 170.006106][ T8477] 0 pages HighMem/MovableOnly [ 170.006114][ T8477] 400873 pages reserved [ 170.006122][ T8477] 0 pages cma reserved [ 170.155445][ T8502] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1077'. [ 170.165709][ T8502] ip6gretap0: entered promiscuous mode [ 170.196204][ T8502] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1077'. [ 170.286659][ T5103] Bluetooth: hci4: command tx timeout [ 170.330620][ T8524] IPv6: Can't replace route, no match found [ 170.414529][ T2407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.444775][ T2407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.551482][ T7972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.571861][ T7972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.633176][ T8537] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1086'. [ 170.863062][ T8537] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 171.153665][ T8565] netlink: 810 bytes leftover after parsing attributes in process `syz.2.1098'. [ 171.224185][ T8564] [ 171.226553][ T8564] ====================================================== [ 171.233580][ T8564] WARNING: possible circular locking dependency detected [ 171.240706][ T8564] 6.10.0-rc4-syzkaller-00948-gcce346d44139 #0 Not tainted [ 171.247812][ T8564] ------------------------------------------------------ [ 171.254818][ T8564] syz.1.1097/8564 is trying to acquire lock: [ 171.260778][ T8564] ffff888044848768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 171.269913][ T8564] [ 171.269913][ T8564] but task is already holding lock: [ 171.277263][ T8564] ffff88806c2f8d20 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 171.286929][ T8564] [ 171.286929][ T8564] which lock already depends on the new lock. [ 171.286929][ T8564] [ 171.297407][ T8564] [ 171.297407][ T8564] the existing dependency chain (in reverse order) is: [ 171.306406][ T8564] [ 171.306406][ T8564] -> #1 (team->team_lock_key#3){+.+.}-{3:3}: [ 171.314568][ T8564] lock_acquire+0x1ed/0x550 [ 171.319582][ T8564] __mutex_lock+0x136/0xd70 [ 171.324593][ T8564] team_port_change_check+0x51/0x1e0 [ 171.330385][ T8564] team_device_event+0x161/0x5b0 [ 171.335914][ T8564] notifier_call_chain+0x19f/0x3e0 [ 171.341536][ T8564] dev_close_many+0x33c/0x4c0 [ 171.346719][ T8564] unregister_netdevice_many_notify+0x544/0x16b0 [ 171.353558][ T8564] macvlan_device_event+0x7e0/0x870 [ 171.359788][ T8564] notifier_call_chain+0x19f/0x3e0 [ 171.365408][ T8564] unregister_netdevice_many_notify+0xd75/0x16b0 [ 171.372246][ T8564] unregister_netdevice_queue+0x303/0x370 [ 171.378477][ T8564] _cfg80211_unregister_wdev+0x162/0x560 [ 171.384619][ T8564] ieee80211_if_remove+0x25d/0x3a0 [ 171.390242][ T8564] ieee80211_del_iface+0x19/0x30 [ 171.395695][ T8564] cfg80211_remove_virtual_intf+0x23f/0x410 [ 171.402189][ T8564] genl_rcv_msg+0xb14/0xec0 [ 171.407203][ T8564] netlink_rcv_skb+0x1e3/0x430 [ 171.412476][ T8564] genl_rcv+0x28/0x40 [ 171.416986][ T8564] netlink_unicast+0x7f0/0x990 [ 171.422282][ T8564] netlink_sendmsg+0x8e4/0xcb0 [ 171.427570][ T8564] __sock_sendmsg+0x221/0x270 [ 171.432758][ T8564] ____sys_sendmsg+0x525/0x7d0 [ 171.438036][ T8564] __sys_sendmsg+0x2b0/0x3a0 [ 171.443136][ T8564] do_syscall_64+0xf3/0x230 [ 171.448151][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.454560][ T8564] [ 171.454560][ T8564] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 171.462285][ T8564] validate_chain+0x18e0/0x5900 [ 171.467734][ T8564] __lock_acquire+0x1346/0x1fd0 [ 171.473114][ T8564] lock_acquire+0x1ed/0x550 [ 171.478141][ T8564] __mutex_lock+0x136/0xd70 [ 171.483164][ T8564] ieee80211_open+0xe7/0x200 [ 171.488274][ T8564] __dev_open+0x2d3/0x450 [ 171.493113][ T8564] dev_open+0xae/0x1b0 [ 171.497691][ T8564] team_add_slave+0x9b3/0x2750 [ 171.502974][ T8564] do_setlink+0xe70/0x41f0 [ 171.507929][ T8564] rtnl_newlink+0x180d/0x20a0 [ 171.513122][ T8564] rtnetlink_rcv_msg+0x89b/0x1180 [ 171.518662][ T8564] netlink_rcv_skb+0x1e3/0x430 [ 171.524021][ T8564] netlink_unicast+0x7f0/0x990 [ 171.529294][ T8564] netlink_sendmsg+0x8e4/0xcb0 [ 171.534562][ T8564] __sock_sendmsg+0x221/0x270 [ 171.539745][ T8564] ____sys_sendmsg+0x525/0x7d0 [ 171.545021][ T8564] __sys_sendmsg+0x2b0/0x3a0 [ 171.550123][ T8564] do_syscall_64+0xf3/0x230 [ 171.555144][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.561810][ T8564] [ 171.561810][ T8564] other info that might help us debug this: [ 171.561810][ T8564] [ 171.572029][ T8564] Possible unsafe locking scenario: [ 171.572029][ T8564] [ 171.579552][ T8564] CPU0 CPU1 [ 171.584903][ T8564] ---- ---- [ 171.590249][ T8564] lock(team->team_lock_key#3); [ 171.595189][ T8564] lock(&rdev->wiphy.mtx); [ 171.602209][ T8564] lock(team->team_lock_key#3); [ 171.609657][ T8564] lock(&rdev->wiphy.mtx); [ 171.614146][ T8564] [ 171.614146][ T8564] *** DEADLOCK *** [ 171.614146][ T8564] [ 171.622273][ T8564] 2 locks held by syz.1.1097/8564: [ 171.627365][ T8564] #0: ffffffff8f5e78c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 171.636842][ T8564] #1: ffff88806c2f8d20 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 171.646938][ T8564] [ 171.646938][ T8564] stack backtrace: [ 171.652810][ T8564] CPU: 1 PID: 8564 Comm: syz.1.1097 Not tainted 6.10.0-rc4-syzkaller-00948-gcce346d44139 #0 [ 171.662945][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.672988][ T8564] Call Trace: [ 171.676255][ T8564] [ 171.679177][ T8564] dump_stack_lvl+0x241/0x360 [ 171.683856][ T8564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.689070][ T8564] ? print_circular_bug+0x130/0x1a0 [ 171.694266][ T8564] check_noncircular+0x36a/0x4a0 [ 171.699202][ T8564] ? __pfx_check_noncircular+0x10/0x10 [ 171.704649][ T8564] ? lockdep_lock+0x123/0x2b0 [ 171.709310][ T8564] ? validate_chain+0x11e/0x5900 [ 171.714323][ T8564] ? mark_lock+0x9a/0x350 [ 171.718648][ T8564] ? _find_first_zero_bit+0xd3/0x100 [ 171.723958][ T8564] validate_chain+0x18e0/0x5900 [ 171.728806][ T8564] ? __pfx_validate_chain+0x10/0x10 [ 171.733995][ T8564] ? mark_lock+0x9a/0x350 [ 171.738311][ T8564] ? __pfx_validate_chain+0x10/0x10 [ 171.743495][ T8564] ? __pfx_validate_chain+0x10/0x10 [ 171.748683][ T8564] ? mark_lock+0x9a/0x350 [ 171.753002][ T8564] ? __lock_acquire+0x1346/0x1fd0 [ 171.758016][ T8564] ? mark_lock+0x9a/0x350 [ 171.762345][ T8564] __lock_acquire+0x1346/0x1fd0 [ 171.767188][ T8564] lock_acquire+0x1ed/0x550 [ 171.771677][ T8564] ? ieee80211_open+0xe7/0x200 [ 171.776438][ T8564] ? __pfx_lock_acquire+0x10/0x10 [ 171.781448][ T8564] ? __pfx___might_resched+0x10/0x10 [ 171.786809][ T8564] ? ib_device_get_by_netdev+0x595/0x5e0 [ 171.792441][ T8564] ? ib_device_get_by_netdev+0x85/0x5e0 [ 171.797976][ T8564] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 171.803943][ T8564] ? net_generic+0x1f/0x240 [ 171.808442][ T8564] ? net_generic+0x1f0/0x240 [ 171.813020][ T8564] __mutex_lock+0x136/0xd70 [ 171.817515][ T8564] ? ieee80211_open+0xe7/0x200 [ 171.822272][ T8564] ? rxe_notify+0xef/0x4c0 [ 171.826684][ T8564] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 171.832475][ T8564] ? __pfx_rxe_notify+0x10/0x10 [ 171.837315][ T8564] ? is_hsr_master+0x19/0x70 [ 171.841894][ T8564] ? ieee80211_open+0xe7/0x200 [ 171.846650][ T8564] ? __pfx___mutex_lock+0x10/0x10 [ 171.851752][ T8564] ? ip6_route_dev_notify+0x99/0x600 [ 171.857028][ T8564] ieee80211_open+0xe7/0x200 [ 171.861618][ T8564] __dev_open+0x2d3/0x450 [ 171.865944][ T8564] ? __pfx___dev_open+0x10/0x10 [ 171.870779][ T8564] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.876233][ T8564] dev_open+0xae/0x1b0 [ 171.880296][ T8564] ? __pfx_dev_open+0x10/0x10 [ 171.884965][ T8564] ? rcu_is_watching+0x15/0xb0 [ 171.889716][ T8564] ? team_add_slave+0x686/0x2750 [ 171.894645][ T8564] ? team_add_slave+0x8a0/0x2750 [ 171.899575][ T8564] team_add_slave+0x9b3/0x2750 [ 171.904336][ T8564] ? __pfx___dev_notify_flags+0x10/0x10 [ 171.909956][ T8564] ? __dev_change_flags+0x515/0x6f0 [ 171.915142][ T8564] ? __pfx_team_add_slave+0x10/0x10 [ 171.920331][ T8564] ? 0xffffffffa0001b08 [ 171.924471][ T8564] ? __pfx___dev_change_flags+0x10/0x10 [ 171.930004][ T8564] ? is_bpf_text_address+0x285/0x2a0 [ 171.935279][ T8564] ? kernel_text_address+0xa7/0xe0 [ 171.940378][ T8564] ? nla_strscpy+0x100/0x180 [ 171.944956][ T8564] ? mutex_is_locked+0x12/0x50 [ 171.949723][ T8564] do_setlink+0xe70/0x41f0 [ 171.954186][ T8564] ? stack_trace_save+0x118/0x1d0 [ 171.959196][ T8564] ? __pfx_stack_trace_save+0x10/0x10 [ 171.964566][ T8564] ? __pfx_do_setlink+0x10/0x10 [ 171.969406][ T8564] ? __nla_validate_parse+0x26ce/0x3090 [ 171.974937][ T8564] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 171.980294][ T8564] ? rtnl_newlink+0xf2/0x20a0 [ 171.984968][ T8564] ? __pfx___nla_validate_parse+0x10/0x10 [ 171.990683][ T8564] ? nla_strscpy+0x100/0x180 [ 171.995262][ T8564] ? full_name_hash+0x93/0xe0 [ 171.999927][ T8564] ? validate_linkmsg+0x71e/0x900 [ 172.004941][ T8564] rtnl_newlink+0x180d/0x20a0 [ 172.009618][ T8564] ? rtnl_newlink+0x491/0x20a0 [ 172.014378][ T8564] ? __pfx_rtnl_newlink+0x10/0x10 [ 172.019393][ T8564] ? __pfx___mutex_trylock_common+0x10/0x10 [ 172.025289][ T8564] ? __pfx_lock_release+0x10/0x10 [ 172.030308][ T8564] ? __pfx_rtnl_newlink+0x10/0x10 [ 172.035325][ T8564] rtnetlink_rcv_msg+0x89b/0x1180 [ 172.040338][ T8564] ? rtnetlink_rcv_msg+0x208/0x1180 [ 172.045524][ T8564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.050974][ T8564] ? __local_bh_enable_ip+0x168/0x200 [ 172.056338][ T8564] ? lockdep_hardirqs_on+0x99/0x150 [ 172.061525][ T8564] ? __local_bh_enable_ip+0x168/0x200 [ 172.066890][ T8564] ? dev_hard_start_xmit+0x773/0x7e0 [ 172.072164][ T8564] ? __dev_queue_xmit+0x2da/0x3e90 [ 172.077262][ T8564] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 172.082970][ T8564] ? __dev_queue_xmit+0x2da/0x3e90 [ 172.088071][ T8564] ? __dev_queue_xmit+0x1763/0x3e90 [ 172.093261][ T8564] ? kasan_save_track+0x51/0x80 [ 172.098104][ T8564] ? do_syscall_64+0xf3/0x230 [ 172.102778][ T8564] ? __dev_queue_xmit+0x2da/0x3e90 [ 172.107898][ T8564] ? __pfx___dev_queue_xmit+0x10/0x10 [ 172.113355][ T8564] ? ref_tracker_free+0x643/0x7e0 [ 172.118374][ T8564] netlink_rcv_skb+0x1e3/0x430 [ 172.123127][ T8564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.128576][ T8564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.133860][ T8564] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.139052][ T8564] netlink_unicast+0x7f0/0x990 [ 172.143813][ T8564] ? __pfx_netlink_unicast+0x10/0x10 [ 172.149093][ T8564] ? __virt_addr_valid+0x183/0x520 [ 172.154195][ T8564] ? __check_object_size+0x49c/0x900 [ 172.159473][ T8564] ? bpf_lsm_netlink_send+0x9/0x10 [ 172.164578][ T8564] netlink_sendmsg+0x8e4/0xcb0 [ 172.169335][ T8564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.174609][ T8564] ? __import_iovec+0x536/0x820 [ 172.179447][ T8564] ? aa_sock_msg_perm+0x91/0x160 [ 172.184382][ T8564] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 172.189741][ T8564] ? security_socket_sendmsg+0x87/0xb0 [ 172.195194][ T8564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.200464][ T8564] __sock_sendmsg+0x221/0x270 [ 172.205132][ T8564] ____sys_sendmsg+0x525/0x7d0 [ 172.209892][ T8564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.215173][ T8564] __sys_sendmsg+0x2b0/0x3a0 [ 172.219772][ T8564] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.224876][ T8564] ? bpf_btf_load+0xcf/0x1a0 [ 172.229462][ T8564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.235779][ T8564] ? do_syscall_64+0x100/0x230 [ 172.240542][ T8564] ? do_syscall_64+0xb6/0x230 [ 172.245208][ T8564] do_syscall_64+0xf3/0x230 [ 172.249722][ T8564] ? clear_bhb_loop+0x35/0x90 [ 172.254406][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.260307][ T8564] RIP: 0033:0x7feda1d75b29 [ 172.264716][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.284314][ T8564] RSP: 002b:00007feda2b38048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.292729][ T8564] RAX: ffffffffffffffda RBX: 00007feda1f03fa0 RCX: 00007feda1d75b29 [ 172.300690][ T8564] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009 [ 172.308647][ T8564] RBP: 00007feda1df6756 R08: 0000000000000000 R09: 0000000000000000 [ 172.316604][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.324561][ T8564] R13: 000000000000000b R14: 00007feda1f03fa0 R15: 00007ffea03487a8 [ 172.332526][ T8564] [ 172.343925][ T8564] team0: Port device wlan1 added [ 172.378078][ T8570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.502612][ T8570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.221933][ T35] bridge_slave_1: left allmulticast mode [ 174.227966][ T35] bridge_slave_1: left promiscuous mode [ 174.233719][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.243621][ T35] bridge_slave_0: left allmulticast mode [ 174.249548][ T35] bridge_slave_0: left promiscuous mode [ 174.255763][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.376183][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.387852][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.398914][ T35] bond0 (unregistering): Released all slaves [ 174.571230][ T35] hsr_slave_0: left promiscuous mode [ 174.577158][ T35] hsr_slave_1: left promiscuous mode [ 174.583728][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.599191][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.607093][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.615309][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.624980][ T35] veth1_macvtap: left promiscuous mode [ 174.630624][ T35] veth0_macvtap: left promiscuous mode [ 174.636300][ T35] veth1_vlan: left promiscuous mode [ 174.641601][ T35] veth0_vlan: left promiscuous mode [ 174.882012][ T35] team0 (unregistering): Port device team_slave_1 removed [ 174.917872][ T35] team0 (unregistering): Port device team_slave_0 removed [ 175.392615][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.462620][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.521875][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.582178][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.667883][ T35] bridge_slave_1: left allmulticast mode [ 175.673560][ T35] bridge_slave_1: left promiscuous mode [ 175.679460][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.690412][ T35] bridge_slave_0: left allmulticast mode [ 175.696735][ T35] bridge_slave_0: left promiscuous mode [ 175.702672][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.893373][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.908152][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.919294][ T35] bond0 (unregistering): Released all slaves [ 176.156413][ T35] hsr_slave_0: left promiscuous mode [ 176.162307][ T35] hsr_slave_1: left promiscuous mode [ 176.171073][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.178790][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.192303][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.200815][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.213420][ T35] veth1_macvtap: left promiscuous mode [ 176.219312][ T35] veth0_macvtap: left promiscuous mode [ 176.227765][ T35] veth1_vlan: left promiscuous mode [ 176.233066][ T35] veth0_vlan: left promiscuous mode [ 176.473181][ T35] team0 (unregistering): Port device team_slave_1 removed [ 176.513052][ T35] team0 (unregistering): Port device team_slave_0 removed