last executing test programs: 1m55.053034057s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1m41.789862949s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1m28.435922232s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1m16.513760913s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1m6.353706265s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 50.688712268s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.581229766s ago: executing program 0 (id=2115): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000ebff2400000024000000020000000000000000000006040000000001000004000000000000000001000000000000004000000000"], 0x0, 0x3e}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x4000, 0x0, 0xc, 0x26}, 0x9c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x401, 0x0, 0x0, 0x100, 0x3, 0x80000002}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) recvmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000580)=""/202, 0xca}], 0x2}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x23, &(0x7f0000000e40)={0x77359400}) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000100), 0xfffffd03) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.657288313s ago: executing program 0 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="e70033005024e500080211000001ffffffffffff50505050505047000200000000000000080018000105826c180c36040600c03108bf07060205007107ffff0100000741dda1f2ddcffb69f79ad29beb592d407825849b6b89ede3d4f208b43673df836ba3ef05ec87ebb4485a9eba1bff"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0xa4fbfd4840e03a43}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 2.34099873s ago: executing program 0 (id=2124): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22}, 0x49) 2.26881949s ago: executing program 1 (id=2126): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000ebff2400000024000000020000000000000000000006040000000001000004000000000000000001000000000000004000000000"], 0x0, 0x3e}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x4000, 0x0, 0xc, 0x26}, 0x9c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x401, 0x0, 0x0, 0x100, 0x3, 0x80000002}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) recvmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000580)=""/202, 0xca}], 0x2}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x23, &(0x7f0000000e40)={0x77359400}) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000100), 0xfffffd03) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.218383583s ago: executing program 0 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000580)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$sock(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3c8928c6f67fce77871e66b", 0x7d}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.612253699s ago: executing program 1 (id=2129): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001880)={{r5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x8, 0x3ff, 0x2, 0x4bb, 0x2, 0xffff86ad, 0x8, 0xffff, 0x1, 0x0, 0x7}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103002000000000000001"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32, @ANYBLOB="140006"], 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r10, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, r10, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4044804) 1.379882191s ago: executing program 1 (id=2132): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0xfffffd03) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.331699817s ago: executing program 3 (id=2133): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001880)={{r5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x8, 0x3ff, 0x2, 0x4bb, 0x2, 0xffff86ad, 0x8, 0xffff, 0x1, 0x101}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103002000000000000001"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32, @ANYBLOB="140006"], 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r10, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, r10, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4044804) 1.288001045s ago: executing program 0 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000580)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.24153885s ago: executing program 4 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="e70033005024e500080211000001ffffffffffff50505050505047000200000000000000080018000105826c180c36040600c03108bf07060205007107ffff0100000741dda1f2ddcffb69f79ad29beb592d407825849b6b89ede3d4f208b43673df836ba3ef05ec87ebb4485a9eba1bff"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0xa4fbfd4840e03a43}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 1.131087718s ago: executing program 4 (id=2136): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x110) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 1.053507521s ago: executing program 3 (id=2137): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="058cb9abf70000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="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"]}]}, 0x184}}, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r7, 0xa4fbfd4840e03a43}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) 803.77134ms ago: executing program 4 (id=2138): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x2, 0x1, 0x6, 0x0, 0x1, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffff0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x94, &(0x7f0000000680)=""/148, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0xfffffff7, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x4, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x3, 0x2}, {0x1, 0x2, 0x8}, {0x1, 0x3, 0x2, 0x1}, {0x5, 0x1, 0xd, 0x5}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0xe, 0x28, &(0x7f0000000300)="ed806f2bbb53781f054d3d38a5d9", &(0x7f0000000580)=""/40, 0x3, 0x0, 0x73, 0xcc, &(0x7f0000000940)="3e0ddbe112ee60ac4a2e596764a32404cd11f85e66b02565f7c0c859bfa37cdc0e72bbea1b9bade0dd81db2975753a2945d24a42ba7e42740729adeb06afa99634672d7c53afb1926d592719693d016dcaf29aff6c5d2295ae1d27f30b1a1130f1874fd9fde0d0fc4af4b90f58dda628a839c8", &(0x7f00000009c0)="ac0d5a4c423bbd44f72f58bf08f5c7386735ad44982edc2186fb3c2a218724d620aff3aa6bcae6952aa65b9a917e4afa5242682813251e550535e407d4bcafffeb0d11852adb9b2690885dc6e11e60f906da88f48d4cc8b31e6f4b0830eae86c219353ce36102ffcfd7f8b6367e848a901ef3e6d69b81d1691cf9730c6e493747e54cff2cd153ae520cae43c5c5c44017790487f6d135bfeba9bba347d8fb2dcc123c262e76c7ace204873cede55785a11ab341be77b44526ec2ddfe3cc7dd4276c3d84fb3cc054de16d1fb9", 0x4, 0x0, 0x7f}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote}, &(0x7f0000000080)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)={0x110, 0x52, 0x1, 0x70bd2c, 0x0, {0xa}, [@typed={0x4, 0x1}, @generic="538415909c391ef29e5109e3b6c62eb618fdc058fb82412e768b8e3d9c57445a5e4115996bdce7a9e10827bf0c0cd191539b481f2fdc34a0cafd769745af62d93c60e47aceef979801a9f80579166ecd9fe4b488d61d7ffa345f7a729c6275309112763946ef04765208941a199ee0544deb5616ad107daab9e7c11b6631a54c61dfad72ccc85e654bb79c82deda07316e1ed2b1daa4b58d6fd278b1fec44100451757b307e4e31e5e7731635d3f4f98ffedd92a28d1ea11bb0d650bb53a3e158bff1aa72fbd62d94ad47baa9c62b448e7e6da3df456bae2da621c778900011e543504", @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@loopback}]}, 0x110}}, 0x0) getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f00000000c0), 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 760.754887ms ago: executing program 3 (id=2139): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x0, 0x1, 0x6, 0xa, 0x1, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffff0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x94, &(0x7f0000000680)=""/148, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0xfffffff7, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x4, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x3, 0x2}, {0x1, 0x2, 0x8}, {0x1, 0x3, 0x2, 0x1}, {0x5, 0x1, 0xd, 0x5}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0xe, 0x28, &(0x7f0000000300)="ed806f2bbb53781f054d3d38a5d9", &(0x7f0000000580)=""/40, 0x3, 0x0, 0x73, 0xcc, &(0x7f0000000940)="3e0ddbe112ee60ac4a2e596764a32404cd11f85e66b02565f7c0c859bfa37cdc0e72bbea1b9bade0dd81db2975753a2945d24a42ba7e42740729adeb06afa99634672d7c53afb1926d592719693d016dcaf29aff6c5d2295ae1d27f30b1a1130f1874fd9fde0d0fc4af4b90f58dda628a839c8", &(0x7f00000009c0)="ac0d5a4c423bbd44f72f58bf08f5c7386735ad44982edc2186fb3c2a218724d620aff3aa6bcae6952aa65b9a917e4afa5242682813251e550535e407d4bcafffeb0d11852adb9b2690885dc6e11e60f906da88f48d4cc8b31e6f4b0830eae86c219353ce36102ffcfd7f8b6367e848a901ef3e6d69b81d1691cf9730c6e493747e54cff2cd153ae520cae43c5c5c44017790487f6d135bfeba9bba347d8fb2dcc123c262e76c7ace204873cede55785a11ab341be77b44526ec2ddfe3cc7dd4276c3d84fb3cc054de16d1fb9", 0x4, 0x0, 0x7f}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote}, &(0x7f0000000080)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)={0x110, 0x52, 0x1, 0x70bd2c, 0x0, {0xa}, [@typed={0x4, 0x1}, @generic="538415909c391ef29e5109e3b6c62eb618fdc058fb82412e768b8e3d9c57445a5e4115996bdce7a9e10827bf0c0cd191539b481f2fdc34a0cafd769745af62d93c60e47aceef979801a9f80579166ecd9fe4b488d61d7ffa345f7a729c6275309112763946ef04765208941a199ee0544deb5616ad107daab9e7c11b6631a54c61dfad72ccc85e654bb79c82deda07316e1ed2b1daa4b58d6fd278b1fec44100451757b307e4e31e5e7731635d3f4f98ffedd92a28d1ea11bb0d650bb53a3e158bff1aa72fbd62d94ad47baa9c62b448e7e6da3df456bae2da621c778900011e543504", @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@loopback}]}, 0x110}}, 0x0) getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f00000000c0), 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 700.625107ms ago: executing program 4 (id=2140): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000ebff2400000024000000020000000000000000000006040000000001000004000000000000000001000000000000004000000000"], 0x0, 0x3e}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x4000, 0x0, 0xc, 0x26}, 0x9c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x401, 0x0, 0x0, 0x100, 0x3, 0x80000002}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) recvmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000580)=""/202, 0xca}], 0x2}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x23, &(0x7f0000000e40)={0x77359400}) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000100), 0xfffffd03) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 636.423878ms ago: executing program 3 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x0, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 542.139386ms ago: executing program 3 (id=2142): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x110) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 468.815956ms ago: executing program 1 (id=2143): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b000100626174616476000004000280", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x20000800) 329.056047ms ago: executing program 0 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010000000000000000000a00190000000000100008800c00038008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001000fd"], 0x40}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000580)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0x80000001) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000980)={0x0, 0x1, 0x0, r9, 0x8}, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$sock(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3c8928c6f67fce77871e66b", 0x7d}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 299.896603ms ago: executing program 4 (id=2145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x360, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) getsockname(r1, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@dellink={0x330, 0x11, 0x820, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3f008}, @IFLA_CARRIER={0x5, 0x21, 0xe}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc5dd}, @IFLA_VF_PORTS={0x2cc, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5b18f3280f0856772d5218b978246b18"}, @IFLA_PORT_VF={0x8, 0x1, 0x40100}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b17e37df92d8882bc402c56dacf830ae"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "010ae60debd219e44f8413a8dbd41153"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7fffffff}, @IFLA_PORT_PROFILE={0xe, 0x2, 'hashlimit\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '-y\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x16}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9e79e569d903499f1f9b24e3fd1c9bd3"}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7fa396691455eedff7849f96fab2b164"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "78642171070fb0102d81f79259ffba14"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8c4ae820150f7a2bc040ad264175284f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "67bc531caf9666a1d4963a96be720680"}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "96d9f46669229ac8dcb805763ba4e532"}, @IFLA_PORT_PROFILE={0xb, 0x2, '(^]}:/\x00'}, @IFLA_PORT_PROFILE={0x14, 0x2, 'veth1_to_batadv\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8acdf2f087c0379b50aaf92110be2a74"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "417d26236c3cc30733381f61d864da5e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "20f5e30707bf7dc327d6a873004b6e49"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "71e8cc89e84e4cfaaf507e0098ad66c2"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c5a6ec21d81f04bf322e00e51f2c2b27"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "62f3c10647484b89d5c0243d49118316"}, @IFLA_PORT_PROFILE={0x7, 0x2, '$]\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "464bf3854cdad44dc9bc5628098c9527"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9029c7ef6952157f21590681cde1217c"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e075a6b57da2ffae5f60c9f0daa50f9e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x86}, @IFLA_PORT_VF={0x8, 0x1, 0xfff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a9bf342b5f96c590e2a28cca7613ee7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6df86779f361a7c8541fd04cc6d7c491"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "49d8ccfdc7e8041023cf56cd1b5b08bf"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6c269946f470d235e4c6bffb7d3910c9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0xe, 0x2, 'hashlimit\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x20}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x144a9}, @IFLA_OPERSTATE={0x5, 0x10, 0x41}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1156}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x330}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r2, 0x4) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000040003bcc00"/20, @ANYRES32=r4, @ANYBLOB="0c0001800800"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, 0x0, 0x0}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002bbd700001000000100000000800070080000000080009000600000008000900cf0006000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c4c0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0xf3}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 140.334ms ago: executing program 1 (id=2146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="e70033005024e500080211000001ffffffffffff50505050505047000200000000000000080018000105826c180c36040600c03108bf07060205007107ffff0100000741dda1f2ddcffb69f79ad29beb592d407825849b6b89ede3d4f208b43673df836ba3ef05ec87ebb4485a9eba1bff"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0xa4fbfd4840e03a43}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 129.791483ms ago: executing program 4 (id=2147): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000340)={0x2c, 0x1, r4, 0x10000, r5}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0xbf, 0x1000, &(0x7f0000000380)="1c0e0f93fa6179b7977925b8cf743585af69fd28fde243dcf2e2f4f87ec14a71f70d81e519d7dc785918e644631d2845ad45c8cd7dd76335e409e2ea13500b2a50a5959e4029ee5592c387f30ec3353de6955d339090083582d9d28dd11520b7713583e4eaaf96a69907888ebbd9734fdd754e09148a8acae4a262e84912d9c0297905981669909e0958a2210909bdb609d47f526e652aca4ed55f2f33898d79c66631b0480a4ad7ced8aa457d27561df27aed39b03cbebcbe1dbd4d435a0a", &(0x7f00000007c0)=""/4096, 0x70, 0x0, 0xe2, 0x8d, &(0x7f00000005c0)="16a79c6fbc082699069d618f7b4d9cdf60efc25f49d2d25666c65419c6e2d77bfce245d63393ef5c5e56ac0d808ea09363b1942904377126d8ffaf1df0c54bba3423d655d91d5361705c6f5f6ef17dfb5292db4399de9ed3f4ef83b8ed648489e074e4530d3a68f7a07d79cdddfb385962f742bf71a50238efb73917230f725e1b5e3b296e1c216be625bfb7743ac3d06d2acda0ee0557761b060d8ab67f21ddefb879f4bbde33a5dff8d8a6dd95a78dc1441fd9e18ff3ce784b55d74a071ae135731ad1b8c1150a72f25ec051688d59c98a37b20b7f0e4b7a145cfb81563034119c", &(0x7f0000000440)="28d3c60db1db23b5fa4e03e03e39bd6b504af77376bf54b4ca15e454115e5aa1a9eb5d14c123e172efcc832fd8e5eb9fad0f8a64c0a34a84ea298457db302c8b87c66dab32971b7638538a21fd98558d4bc7e4548e5f1ff4eff2d8dc8ba00c18e8d088fc5db78bccf315f0469e0474b4cc3b756a0efe7dd248a6fd052b0e3f6eaaa2a285e7ed816897ee1ba14c", 0x2, 0x0, 0x9}, 0x50) recvmmsg(r7, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendmmsg$inet6(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x241) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000001000000020000000000000900000000060015000400bb3ed2061658027f8004000880280001800600010000"], 0x38}}, 0x0) 41.722911ms ago: executing program 3 (id=2148): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x110) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=2149): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x100}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x80000001, 0xaf393cce8d345061}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000844}, 0x3e5ea02d44a4b76a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x68, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x200408d1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, r4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000c50000001a0000009500000000020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.0.1752'. [ 281.117690][T10887] team0: entered promiscuous mode [ 281.124313][T10887] team_slave_0: entered promiscuous mode [ 281.137666][T10887] team_slave_1: entered promiscuous mode [ 281.156280][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.163668][T10887] batman_adv: batadv0: Interface activated: team0 [ 281.180164][T10887] batman_adv: batadv0: Interface deactivated: team0 [ 281.192317][T10887] batman_adv: batadv0: Removing interface: team0 [ 281.203055][T10887] bridge0: port 3(team0) entered blocking state [ 281.213667][T10887] bridge0: port 3(team0) entered disabled state [ 281.223887][T10887] team0: entered allmulticast mode [ 281.234734][T10887] team_slave_0: entered allmulticast mode [ 281.244530][T10887] team_slave_1: entered allmulticast mode [ 281.549047][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 281.556847][T10901] ip6t_REJECT: ECHOREPLY is not supported [ 281.572173][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 281.584337][T10901] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1756'. [ 281.605341][T10908] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 281.614265][T10908] team0: Port device batadv4 added [ 281.707374][T10910] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1761'. [ 281.763703][T10913] "syz.3.1762" (10913) uses obsolete ecb(arc4) skcipher [ 282.162986][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.258107][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1764'. [ 282.981281][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.038149][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.119617][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.212953][ T61] bridge_slave_1: left allmulticast mode [ 283.219898][ T61] bridge_slave_1: left promiscuous mode [ 283.225661][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.235867][ T61] bridge_slave_0: left allmulticast mode [ 283.241812][ T61] bridge_slave_0: left promiscuous mode [ 283.247866][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.601099][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.613003][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.624759][ T61] bond0 (unregistering): Released all slaves [ 283.837726][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 283.892490][T10928] ip6t_REJECT: ECHOREPLY is not supported [ 283.924232][T10928] validate_nla: 6 callbacks suppressed [ 283.924254][T10928] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 283.977935][T10928] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1767'. [ 283.996521][T10928] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 284.074319][T10928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 284.106666][T10928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 284.127568][T10931] ip6t_REJECT: ECHOREPLY is not supported [ 284.149790][T10932] ip6t_REJECT: ECHOREPLY is not supported [ 284.163369][ T61] hsr_slave_0: left promiscuous mode [ 284.165683][T10931] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 284.176781][ T61] hsr_slave_1: left promiscuous mode [ 284.190634][T10931] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1768'. [ 284.200321][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.212692][T10931] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 284.218856][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.239685][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.257119][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.279543][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.303619][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.308543][ T61] veth1_macvtap: left promiscuous mode [ 284.318404][ T61] veth0_macvtap: left promiscuous mode [ 284.318580][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.325794][ T61] veth1_vlan: left promiscuous mode [ 284.336950][ T61] veth0_vlan: left promiscuous mode [ 284.343330][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.353155][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.360786][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.018383][ T61] team0 (unregistering): Port device team_slave_1 removed [ 285.104126][ T61] team0 (unregistering): Port device team_slave_0 removed [ 285.603712][T10932] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 285.613110][T10932] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1769'. [ 285.657384][T10932] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 285.829148][T10961] "syz.1.1773" (10961) uses obsolete ecb(arc4) skcipher [ 285.975416][T10971] netlink: 'syz.1.1775': attribute type 4 has an invalid length. [ 286.198471][T10980] __nla_validate_parse: 2 callbacks suppressed [ 286.198495][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 286.316072][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 286.319921][T10936] chnl_net:caif_netlink_parms(): no params data found [ 286.457616][ T5101] Bluetooth: hci3: command tx timeout [ 286.562315][T10994] ip6t_REJECT: ECHOREPLY is not supported [ 286.583446][T10990] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 286.601555][T10990] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1780'. [ 286.622702][T10990] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 286.702745][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 286.979664][T10936] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.006189][T10936] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.028775][T10936] bridge_slave_0: entered allmulticast mode [ 287.046682][T10936] bridge_slave_0: entered promiscuous mode [ 287.062527][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.082655][T10936] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.090446][T10936] bridge_slave_1: entered allmulticast mode [ 287.099268][T10936] bridge_slave_1: entered promiscuous mode [ 287.202813][T10936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.225991][T10936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.282500][T11008] ip6t_REJECT: ECHOREPLY is not supported [ 287.294997][T11008] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 287.303324][T11008] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1783'. [ 287.319384][T10936] team0: Port device team_slave_0 added [ 287.329226][T11004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 287.349275][T10936] team0: Port device team_slave_1 added [ 287.374577][T11008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 287.384554][T11008] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 287.399512][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 287.409225][T10936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.416591][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.445276][T10936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.458303][T10936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.465306][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.491677][T10936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.545122][T10936] hsr_slave_0: entered promiscuous mode [ 287.552410][T10936] hsr_slave_1: entered promiscuous mode [ 287.981710][T11013] "syz.1.1785" (11013) uses obsolete ecb(arc4) skcipher [ 288.116060][T10936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.147235][T10936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.149189][T11017] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1787'. [ 288.169836][T10936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.183949][T10936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.260482][T11020] ip6t_REJECT: ECHOREPLY is not supported [ 288.273316][T11020] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1788'. [ 288.292741][T11015] ip6t_REJECT: ECHOREPLY is not supported [ 288.314264][T11020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 288.315532][T11015] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1786'. [ 288.346542][T11020] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 288.402593][T11024] veth0_vlan: entered allmulticast mode [ 288.489545][T10936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.538260][T10936] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.538713][ T5101] Bluetooth: hci3: command 0x041b tx timeout [ 288.565409][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.572788][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.602823][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.610065][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.872920][T10936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.928798][T10936] veth0_vlan: entered promiscuous mode [ 288.970123][T10936] veth1_vlan: entered promiscuous mode [ 289.055048][T10936] veth0_macvtap: entered promiscuous mode [ 289.082624][T11037] unsupported nla_type 40 [ 289.084276][T10936] veth1_macvtap: entered promiscuous mode [ 289.139705][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.155651][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.169303][T10936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.201127][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.216333][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.262108][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.284073][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.303754][T10936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.313702][T11047] validate_nla: 5 callbacks suppressed [ 289.313723][T11047] netlink: 'syz.1.1793': attribute type 16 has an invalid length. [ 289.327489][T11047] netlink: 'syz.1.1793': attribute type 17 has an invalid length. [ 289.514843][T10936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.547711][T10936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.556571][T10936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.615995][T10936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.847846][T11054] "syz.1.1796" (11054) uses obsolete ecb(arc4) skcipher [ 290.004281][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.032756][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.169943][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.200853][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.617593][ T5101] Bluetooth: hci3: command 0x041b tx timeout [ 291.833958][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.843604][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.855470][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.886343][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.894757][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.916378][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.115441][T11075] ip6t_REJECT: ECHOREPLY is not supported [ 292.134658][T11075] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 292.143836][T11075] __nla_validate_parse: 9 callbacks suppressed [ 292.143856][T11075] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1802'. [ 292.163214][T11075] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 292.196411][T11075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 292.207812][T11075] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 292.407086][T11072] chnl_net:caif_netlink_parms(): no params data found [ 292.509869][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880237aa000: rx timeout, send abort [ 292.518373][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dbad400: rx timeout, send abort [ 292.526889][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880237aa000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.542697][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802dbad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.588299][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.606610][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.614590][T11072] bridge_slave_0: entered allmulticast mode [ 292.631635][T11072] bridge_slave_0: entered promiscuous mode [ 292.642480][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.651526][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.659042][T11072] bridge_slave_1: entered allmulticast mode [ 292.669408][T11072] bridge_slave_1: entered promiscuous mode [ 292.705102][T11089] ip6t_REJECT: ECHOREPLY is not supported [ 292.717895][T11089] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 292.723412][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.725746][T11089] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1804'. [ 292.753820][T11089] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 292.754878][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.830565][T11072] team0: Port device team_slave_0 added [ 292.837865][T11089] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 292.855017][T11072] team0: Port device team_slave_1 added [ 292.863324][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 292.867355][T11089] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 292.925336][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.936184][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.963650][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.984821][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 293.011360][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.025444][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.054342][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.146771][T11072] hsr_slave_0: entered promiscuous mode [ 293.168294][T11072] hsr_slave_1: entered promiscuous mode [ 293.175303][T11072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.183431][T11072] Cannot create hsr debugfs directory [ 293.377446][T11099] ip6t_REJECT: ECHOREPLY is not supported [ 293.425295][T11099] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 293.433533][T11099] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1808'. [ 293.443049][T11099] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 293.454930][T11072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.495674][T11099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.519264][T11099] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.591863][T11072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.620567][T11104] "syz.1.1810" (11104) uses obsolete ecb(arc4) skcipher [ 293.689364][T11106] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1811'. [ 293.722752][T11072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.763583][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 293.835535][T11072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.935077][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.977605][ T5099] Bluetooth: hci3: command tx timeout [ 294.082108][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.174578][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.177825][ T2792] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.207991][T11072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.220875][T11072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.250892][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.265208][T11072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.276869][T11072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.410236][ T12] bridge_slave_1: left allmulticast mode [ 294.416592][ T12] bridge_slave_1: left promiscuous mode [ 294.423567][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.447098][ T12] bridge_slave_0: left allmulticast mode [ 294.453490][ T12] bridge_slave_0: left promiscuous mode [ 294.468021][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.864336][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.878360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.890686][ T12] bond0 (unregistering): Released all slaves [ 294.964058][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.990850][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.011717][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.019062][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.039248][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.046522][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.143049][T11072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.153685][T11072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.329324][ T12] hsr_slave_0: left promiscuous mode [ 295.348146][ T12] hsr_slave_1: left promiscuous mode [ 295.354661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.363916][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.372365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.379936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.408917][ T12] veth1_macvtap: left promiscuous mode [ 295.414525][ T12] veth0_macvtap: left promiscuous mode [ 295.420824][ T12] veth1_vlan: left promiscuous mode [ 295.426172][ T12] veth0_vlan: left promiscuous mode [ 295.747663][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 295.781400][T11119] xt_hashlimit: invalid rate [ 296.001912][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 296.008132][T11126] ip6t_REJECT: ECHOREPLY is not supported [ 296.035152][T11126] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 296.047391][T11126] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1815'. [ 296.056738][T11126] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 296.065176][ T5099] Bluetooth: hci3: command tx timeout [ 296.122284][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.306526][ T5101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.328282][ T5101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.352298][ T5101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.362970][ T5101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.371841][ T5101] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.380198][ T5101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.766925][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.819792][ T12] team0 (unregistering): Port device team_slave_0 removed [ 297.383378][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.521399][T11137] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 297.547883][T11137] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 297.569355][T11137] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1818'. [ 297.578727][T11137] team0: entered promiscuous mode [ 297.584399][T11137] team_slave_0: entered promiscuous mode [ 297.590799][T11137] team_slave_1: entered promiscuous mode [ 297.596697][T11137] batadv1: entered promiscuous mode [ 297.606092][T11137] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.613533][T11137] batman_adv: batadv0: Interface activated: team0 [ 297.620171][T11137] batman_adv: batadv0: Interface deactivated: team0 [ 297.626844][T11137] batman_adv: batadv0: Removing interface: team0 [ 297.639827][T11137] bridge0: port 3(team0) entered blocking state [ 297.646415][T11137] bridge0: port 3(team0) entered disabled state [ 297.653445][T11137] team0: entered allmulticast mode [ 297.662954][T11137] team_slave_0: entered allmulticast mode [ 297.667121][T11144] "syz.1.1820" (11144) uses obsolete ecb(arc4) skcipher [ 297.677208][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 297.681665][T11137] team_slave_1: entered allmulticast mode [ 297.697692][T11137] batadv1: entered allmulticast mode [ 297.835171][T11072] veth0_vlan: entered promiscuous mode [ 297.858798][T11148] ip6t_REJECT: ECHOREPLY is not supported [ 297.880710][T11148] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 297.888798][T11148] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1821'. [ 297.907883][T11148] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 297.933544][T11072] veth1_vlan: entered promiscuous mode [ 297.967999][T11148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 298.005897][T11072] veth0_macvtap: entered promiscuous mode [ 298.009870][T11148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 298.026179][ T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 298.036554][ T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 298.059650][T11072] veth1_macvtap: entered promiscuous mode [ 298.072211][T11132] chnl_net:caif_netlink_parms(): no params data found [ 298.138409][ T5101] Bluetooth: hci3: command tx timeout [ 298.155738][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.181402][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.195245][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.260978][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.275371][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.285724][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.303545][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.315367][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.324438][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.332194][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.339927][T11132] bridge_slave_0: entered allmulticast mode [ 298.349418][T11132] bridge_slave_0: entered promiscuous mode [ 298.366067][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.374978][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.387095][T11132] bridge_slave_1: entered allmulticast mode [ 298.395829][T11132] bridge_slave_1: entered promiscuous mode [ 298.417888][T11072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.426769][T11072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.436371][T11072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.445627][T11072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.458361][T11156] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1822'. [ 298.459244][ T5101] Bluetooth: hci5: command tx timeout [ 298.540829][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.559802][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.674997][T11132] team0: Port device team_slave_0 added [ 298.702824][T11132] team0: Port device team_slave_1 added [ 298.760791][T11163] ip6t_REJECT: ECHOREPLY is not supported [ 298.779788][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.790316][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.816745][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.834270][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.841506][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.869687][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.902560][T11163] netlink: 'syz.4.1823': attribute type 1 has an invalid length. [ 298.929707][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.938641][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.940371][T11163] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1823'. [ 298.975387][T11163] netlink: 'syz.4.1823': attribute type 1 has an invalid length. [ 299.011158][T11132] hsr_slave_0: entered promiscuous mode [ 299.022036][T11132] hsr_slave_1: entered promiscuous mode [ 299.084172][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.107523][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.323274][T11170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1800'. [ 299.706513][T11132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.718042][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 299.740357][T11132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.752916][T11132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.765108][T11132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.876893][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1828'. [ 300.032669][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 300.045411][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.119966][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.194328][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.201819][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.218166][ T5101] Bluetooth: hci3: command tx timeout [ 300.252653][T11184] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 300.399255][T11184] batman_adv: batadv0: Adding interface: team0 [ 300.405489][T11184] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.450373][T11184] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 300.491742][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.499096][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.536629][T11185] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 300.538004][ T5101] Bluetooth: hci5: command tx timeout [ 300.544848][T11185] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1829'. [ 300.577931][T11185] team0: entered promiscuous mode [ 300.586068][T11185] team_slave_0: entered promiscuous mode [ 300.610303][T11185] team_slave_1: entered promiscuous mode [ 300.630733][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.638597][T11185] batman_adv: batadv0: Interface activated: team0 [ 300.645147][T11185] batman_adv: batadv0: Interface deactivated: team0 [ 300.655403][T11190] "syz.1.1830" (11190) uses obsolete ecb(arc4) skcipher [ 300.662806][T11185] batman_adv: batadv0: Removing interface: team0 [ 300.695960][T11185] bridge0: port 3(team0) entered blocking state [ 300.709453][T11185] bridge0: port 3(team0) entered disabled state [ 300.717829][T11185] team0: entered allmulticast mode [ 300.737731][T11185] team_slave_0: entered allmulticast mode [ 300.743534][T11185] team_slave_1: entered allmulticast mode [ 300.773663][T11185] bridge0: port 3(team0) entered blocking state [ 300.780182][T11185] bridge0: port 3(team0) entered forwarding state [ 301.170309][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.289735][T11132] veth0_vlan: entered promiscuous mode [ 301.327917][T11132] veth1_vlan: entered promiscuous mode [ 301.405885][T11132] veth0_macvtap: entered promiscuous mode [ 301.453831][T11132] veth1_macvtap: entered promiscuous mode [ 301.501166][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.512356][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.523149][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.533996][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.547140][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.562473][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.573296][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.584830][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.595818][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.615940][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.627023][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.645844][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.687007][T11132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.705851][T11132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.722212][T11132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.731752][T11132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.960164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.978397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.012260][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.022265][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.110519][T11212] ip6t_REJECT: ECHOREPLY is not supported [ 302.128806][T11212] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 302.137406][T11212] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 302.226997][T11212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 302.243436][T11212] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 304.117817][ T2477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.693206][ T29] audit: type=1800 audit(1719648022.586:15): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="memory.events" dev="sda1" ino=1992 res=0 errno=0 [ 305.683747][ T2477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.751272][ T2477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.828397][ T2477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.932082][ T2477] bridge_slave_1: left allmulticast mode [ 305.938109][ T2477] bridge_slave_1: left promiscuous mode [ 305.943821][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.956234][ T2477] bridge_slave_0: left allmulticast mode [ 305.962449][ T2477] bridge_slave_0: left promiscuous mode [ 305.968504][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.086820][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.277928][T11232] __nla_validate_parse: 4 callbacks suppressed [ 306.277952][T11232] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1842'. [ 306.535866][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 306.552046][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.584213][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.601110][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.610489][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.625775][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 306.639193][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.710452][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.724048][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.736619][ T2477] bond0 (unregistering): Released all slaves [ 306.751311][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'. [ 307.000504][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 307.839772][ T2477] hsr_slave_0: left promiscuous mode [ 307.873641][ T2477] hsr_slave_1: left promiscuous mode [ 307.881841][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.917392][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.938372][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.945849][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.029720][ T2477] veth1_macvtap: left promiscuous mode [ 308.035312][ T2477] veth0_macvtap: left promiscuous mode [ 308.054424][ T2477] veth1_vlan: left promiscuous mode [ 308.067460][ T2477] veth0_vlan: left promiscuous mode [ 308.535991][ T5101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.548950][ T5101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.572522][ T5101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.582257][ T5101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.600545][ T5101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 308.619300][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.707893][ T5099] Bluetooth: hci5: command tx timeout [ 309.026106][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 309.082050][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 309.720128][T11242] chnl_net:caif_netlink_parms(): no params data found [ 309.817179][T11276] ip6t_REJECT: ECHOREPLY is not supported [ 309.854029][T11276] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 309.865118][T11276] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1851'. [ 309.896921][T11276] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 309.966743][T11276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 309.990042][T11282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1853'. [ 309.990762][T11276] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 310.081413][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.089928][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.097185][T11242] bridge_slave_0: entered allmulticast mode [ 310.104417][T11242] bridge_slave_0: entered promiscuous mode [ 310.124206][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.147479][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.156695][T11242] bridge_slave_1: entered allmulticast mode [ 310.166217][T11242] bridge_slave_1: entered promiscuous mode [ 310.182483][T11265] chnl_net:caif_netlink_parms(): no params data found [ 310.283920][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 310.319452][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.333286][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.507568][T11242] team0: Port device team_slave_0 added [ 310.706912][ T5099] Bluetooth: hci6: command tx timeout [ 310.715937][T11242] team0: Port device team_slave_1 added [ 310.729421][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 310.757041][ T5098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.769166][ T5098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.777832][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.790996][T11265] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.797762][ T5098] Bluetooth: hci5: command tx timeout [ 310.802577][ T5108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.808279][T11265] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.811434][ T5108] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 310.819283][T11265] bridge_slave_0: entered allmulticast mode [ 310.830815][ T5108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.832536][T11265] bridge_slave_0: entered promiscuous mode [ 310.866142][T11265] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.897526][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.904829][T11265] bridge_slave_1: entered allmulticast mode [ 310.939216][T11265] bridge_slave_1: entered promiscuous mode [ 311.075167][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.083338][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.110247][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.533641][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'. [ 311.553934][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.561263][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.621968][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.640997][T11265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.670161][T11265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.706263][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 311.804034][T11265] team0: Port device team_slave_0 added [ 311.877091][T11265] team0: Port device team_slave_1 added [ 311.881443][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 311.982163][T11242] hsr_slave_0: entered promiscuous mode [ 311.989782][T11242] hsr_slave_1: entered promiscuous mode [ 311.999445][T11320] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1864'. [ 312.032563][T11265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.041028][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.067973][T11265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.081777][T11265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.089001][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.116749][T11265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.141763][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 312.236042][T11265] hsr_slave_0: entered promiscuous mode [ 312.251405][T11265] hsr_slave_1: entered promiscuous mode [ 312.260274][T11265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.272955][T11265] Cannot create hsr debugfs directory [ 312.334855][T11325] netlink: 'syz.4.1865': attribute type 10 has an invalid length. [ 312.383787][T11325] netlink: 'syz.4.1865': attribute type 10 has an invalid length. [ 312.392258][T11325] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1865'. [ 312.404696][T11325] team0: entered promiscuous mode [ 312.409944][T11325] batadv1: entered promiscuous mode [ 312.415596][T11325] batadv2: entered promiscuous mode [ 312.421155][T11325] batadv3: entered promiscuous mode [ 312.426624][T11325] batadv4: entered promiscuous mode [ 312.434815][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.441961][T11325] batman_adv: batadv0: Interface activated: team0 [ 312.448516][T11325] batman_adv: batadv0: Interface deactivated: team0 [ 312.455203][T11325] batman_adv: batadv0: Removing interface: team0 [ 312.468201][T11325] bridge0: port 1(team0) entered blocking state [ 312.474740][T11325] bridge0: port 1(team0) entered disabled state [ 312.481958][T11325] team0: entered allmulticast mode [ 312.487309][T11325] batadv1: entered allmulticast mode [ 312.492803][T11325] batadv2: entered allmulticast mode [ 312.498457][T11325] batadv3: entered allmulticast mode [ 312.503936][T11325] batadv4: entered allmulticast mode [ 312.656640][T11302] chnl_net:caif_netlink_parms(): no params data found [ 312.778485][ T5108] Bluetooth: hci6: command tx timeout [ 312.834384][ T2477] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 312.843894][ T2477] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 312.857491][ T5108] Bluetooth: hci5: command tx timeout [ 312.857959][ T5101] Bluetooth: hci7: command tx timeout [ 313.015065][ T2792] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 313.025297][ T2792] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 313.058521][ T2792] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 313.068216][ T2792] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 313.085787][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.101291][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.109853][ T2792] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 313.119460][ T2792] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 313.132906][T11302] bridge_slave_0: entered allmulticast mode [ 313.140991][T11302] bridge_slave_0: entered promiscuous mode [ 313.171436][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.181796][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.189822][T11302] bridge_slave_1: entered allmulticast mode [ 313.197499][T11302] bridge_slave_1: entered promiscuous mode [ 313.305980][T11302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.335048][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.453397][T11302] team0: Port device team_slave_0 added [ 313.486298][T11302] team0: Port device team_slave_1 added [ 313.605153][T11302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.618628][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.648193][T11302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.687069][T11302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.704367][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.752166][T11302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.852492][T11302] hsr_slave_0: entered promiscuous mode [ 313.859574][T11302] hsr_slave_1: entered promiscuous mode [ 313.866049][T11302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.874062][T11302] Cannot create hsr debugfs directory [ 313.886245][T11242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.005040][T11265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.049676][T11242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.096259][T11242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.126052][T11242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.220244][T11265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.256013][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'. [ 314.329783][T11265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.461817][T11265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.857460][ T5101] Bluetooth: hci6: command 0x040f tx timeout [ 314.937900][ T5101] Bluetooth: hci7: command tx timeout [ 314.937908][ T5108] Bluetooth: hci5: command tx timeout [ 315.252161][T11302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.383003][T11302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.454200][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.520912][T11302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.581004][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.655111][T11302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.683066][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.690284][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.739898][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.747351][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.975518][T11265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.032615][T11265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.099089][T11265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.132716][T11265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.278980][T11302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.305951][T11302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.332470][T11302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.353319][T11302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.398333][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.557379][T11242] veth0_vlan: entered promiscuous mode [ 316.621526][T11242] veth1_vlan: entered promiscuous mode [ 316.741096][T11265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.844546][T11265] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.866718][T11242] veth0_macvtap: entered promiscuous mode [ 316.905963][T11242] veth1_macvtap: entered promiscuous mode [ 316.933257][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.939169][ T5099] Bluetooth: hci6: command 0x040f tx timeout [ 316.940509][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.003540][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.015600][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.026535][ T5101] Bluetooth: hci7: command tx timeout [ 317.035524][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.057338][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.079941][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.101597][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.112648][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.125279][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.135900][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.146211][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.157049][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.171086][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.184619][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.191907][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.215294][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1871'. [ 317.233111][T11302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.248906][T11242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.259055][T11242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.268200][T11242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.277142][T11242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.361899][T11302] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.412713][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.420149][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.455786][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.462990][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.579213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.587082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.712795][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.721467][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.056835][T11265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.177823][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 318.196787][T11265] veth0_vlan: entered promiscuous mode [ 318.225799][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.244032][T11265] veth1_vlan: entered promiscuous mode [ 318.317168][T11265] veth0_macvtap: entered promiscuous mode [ 318.336651][T11265] veth1_macvtap: entered promiscuous mode [ 318.389241][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.400336][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.411037][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.424369][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.434323][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.447084][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.460202][T11265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.484548][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.495422][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.507982][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.519377][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.529852][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.543081][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.556083][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.568225][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.580890][T11265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.595513][T11302] veth0_vlan: entered promiscuous mode [ 318.612371][T11265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.625119][T11265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.634429][T11265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.643882][T11265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.665797][T11302] veth1_vlan: entered promiscuous mode [ 318.741816][T11302] veth0_macvtap: entered promiscuous mode [ 318.809748][T11302] veth1_macvtap: entered promiscuous mode [ 318.866938][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.896103][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.930792][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.942660][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.959797][T11374] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1873'. [ 318.969387][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.981209][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.991975][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.002833][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.014560][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.025310][ T5101] Bluetooth: hci6: command 0x040f tx timeout [ 319.032716][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.045203][T11302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.072048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.081795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.102256][ T5101] Bluetooth: hci7: command 0x0419 tx timeout [ 319.120310][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.132260][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.142359][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.152906][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.165292][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.176291][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.187159][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.199613][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.212185][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.222900][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.236510][T11302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.271209][T11302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.297347][T11302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.306124][T11302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.327786][T11302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.428809][T11379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.516135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.548115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.614809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.624332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.660110][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.667918][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.767077][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 319.856038][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 319.873467][T11390] ip6t_REJECT: ECHOREPLY is not supported [ 319.886469][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.924901][T11390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 319.935809][T11390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 320.632360][T10888] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 320.641788][T11140] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 320.699961][T11186] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 320.727775][T11327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 320.944535][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.182439][ T5110] Bluetooth: hci7: command 0x0419 tx timeout [ 321.237963][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.332466][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.449594][ T12] bridge_slave_1: left allmulticast mode [ 321.455282][ T12] bridge_slave_1: left promiscuous mode [ 321.461391][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.472811][ T12] bridge_slave_0: left allmulticast mode [ 321.478808][ T12] bridge_slave_0: left promiscuous mode [ 321.484518][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.809608][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 322.263032][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.273786][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.291935][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.309731][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.318338][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.334880][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.369022][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 322.619056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.642236][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.664337][ T12] bond0 (unregistering): Released all slaves [ 322.690090][T11413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1880'. [ 322.873040][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'. [ 322.888822][T11420] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1883'. [ 323.087866][T11433] ip6t_REJECT: ECHOREPLY is not supported [ 323.208125][T11432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1885'. [ 323.423631][ T12] hsr_slave_0: left promiscuous mode [ 323.456116][ T12] hsr_slave_1: left promiscuous mode [ 323.502377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.522241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.554402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.557881][T11448] ip6t_REJECT: ECHOREPLY is not supported [ 323.572338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.626118][ T12] veth1_macvtap: left promiscuous mode [ 323.654856][ T12] veth0_macvtap: left promiscuous mode [ 323.662215][ T12] veth1_vlan: left promiscuous mode [ 323.672046][ T12] veth0_vlan: left promiscuous mode [ 323.782268][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 323.828992][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 324.045418][T11459] ip6t_REJECT: ECHOREPLY is not supported [ 324.378656][ T5110] Bluetooth: hci0: command tx timeout [ 324.403250][ T12] team0 (unregistering): Port device team_slave_1 removed [ 324.446950][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.990196][T11443] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 325.004020][T11443] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 325.019087][T11459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 325.037669][T11459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 325.106295][T11415] chnl_net:caif_netlink_parms(): no params data found [ 325.205420][ T2477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.247495][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 325.392262][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.419402][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.443508][T11415] bridge_slave_0: entered allmulticast mode [ 325.466700][T11415] bridge_slave_0: entered promiscuous mode [ 325.492371][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.512908][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.521518][T11415] bridge_slave_1: entered allmulticast mode [ 325.535352][T11415] bridge_slave_1: entered promiscuous mode [ 325.632728][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 325.653361][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1895'. [ 325.769743][T11415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.809339][T11415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.153776][T11415] team0: Port device team_slave_0 added [ 326.165938][T11490] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 326.183801][T11415] team0: Port device team_slave_1 added [ 326.368693][T11415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.397840][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.454864][T11501] ip6t_REJECT: ECHOREPLY is not supported [ 326.463622][T11415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.474433][ T5099] Bluetooth: hci0: command tx timeout [ 326.496418][ T2792] team0: left allmulticast mode [ 326.501488][ T2792] team_slave_0: left allmulticast mode [ 326.507080][ T2792] team_slave_1: left allmulticast mode [ 326.513471][ T2792] bridge0: port 3(team0) entered disabled state [ 326.524689][ T2792] bridge_slave_1: left allmulticast mode [ 326.530751][ T2792] bridge_slave_1: left promiscuous mode [ 326.540044][ T2792] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.559131][ T2792] bridge_slave_0: left allmulticast mode [ 326.564842][ T2792] bridge_slave_0: left promiscuous mode [ 326.571813][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.592093][ T2792] team0: left allmulticast mode [ 326.597082][ T2792] team_slave_0: left allmulticast mode [ 326.603559][ T2792] team_slave_1: left allmulticast mode [ 326.610952][ T2792] batadv1: left allmulticast mode [ 326.617817][ T2792] bridge0: port 3(team0) entered disabled state [ 326.627645][ T2792] bridge_slave_1: left allmulticast mode [ 326.633326][ T2792] bridge_slave_1: left promiscuous mode [ 326.641644][ T2792] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.661494][ T2792] bridge_slave_0: left allmulticast mode [ 326.667185][ T2792] bridge_slave_0: left promiscuous mode [ 326.673449][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.700244][ T2792] team0: left allmulticast mode [ 326.705268][ T2792] team_slave_0: left allmulticast mode [ 326.710968][ T2792] team_slave_1: left allmulticast mode [ 326.716699][ T2792] bridge0: port 3(team0) entered disabled state [ 326.734942][ T2792] bridge_slave_1: left allmulticast mode [ 326.744801][ T2792] bridge_slave_1: left promiscuous mode [ 326.751181][ T2792] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.762051][ T2792] bridge_slave_0: left allmulticast mode [ 326.776248][ T2792] bridge_slave_0: left promiscuous mode [ 326.782654][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.049223][ T2477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.466151][ T2792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.482559][ T2792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.495549][ T2792] bond0 (unregistering): Released all slaves [ 328.542315][ T5099] Bluetooth: hci0: command 0x040f tx timeout [ 328.578771][T11509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 328.625271][ T2792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.639334][ T2792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.650547][ T2792] bond0 (unregistering): Released all slaves [ 328.666178][ T2792] bond1 (unregistering): Released all slaves [ 328.681898][ T2792] bond2 (unregistering): Released all slaves [ 328.700131][ T2792] bond3 (unregistering): Released all slaves [ 328.721377][ T2792] bond4 (unregistering): Released all slaves [ 328.737177][ T2792] bond5 (unregistering): Released all slaves [ 328.850989][ T2792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.864730][ T2792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.877734][ T2792] bond0 (unregistering): Released all slaves [ 328.899512][ T2792] bond1 (unregistering): Released all slaves [ 328.915339][ T2792] bond2 (unregistering): Released all slaves [ 328.936726][ T2792] bond3 (unregistering): Released all slaves [ 328.958720][ T2792] bond4 (unregistering): Released all slaves [ 328.978481][ T2792] bond5 (unregistering): Released all slaves [ 328.998185][T11504] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 329.015537][T11504] team0: left allmulticast mode [ 329.037794][T11504] team0: left promiscuous mode [ 329.042846][T11504] bridge0: port 1(team0) entered disabled state [ 329.074908][T11504] batman_adv: batadv0: Adding interface: team0 [ 329.091986][T11504] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.127505][T11504] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 329.150660][T11501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 329.165173][T11415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.172859][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.187493][T11501] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 329.201626][T11415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.258573][T11507] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 329.285240][T11507] __nla_validate_parse: 3 callbacks suppressed [ 329.285264][T11507] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1905'. [ 329.322328][T11507] team0: entered promiscuous mode [ 329.328788][T11507] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.347704][T11507] batman_adv: batadv0: Interface activated: team0 [ 329.357542][T11507] batman_adv: batadv0: Interface deactivated: team0 [ 329.364337][T11507] batman_adv: batadv0: Removing interface: team0 [ 329.391342][T11507] bridge0: port 1(team0) entered blocking state [ 329.408634][T11507] bridge0: port 1(team0) entered disabled state [ 329.427979][T11507] team0: entered allmulticast mode [ 329.627519][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 329.652987][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 329.682061][T11521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 329.692258][T11521] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 329.718239][T11415] hsr_slave_0: entered promiscuous mode [ 329.728582][T11415] hsr_slave_1: entered promiscuous mode [ 330.564684][T11538] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1914'. [ 330.763169][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1913'. [ 330.798707][T11550] ip6t_REJECT: ECHOREPLY is not supported [ 330.869827][T11550] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 330.887429][T11550] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 330.902988][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 331.035368][ T2792] hsr_slave_0: left promiscuous mode [ 331.045396][ T2792] hsr_slave_1: left promiscuous mode [ 331.054875][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.063589][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.072402][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.080326][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.100264][ T2792] hsr_slave_0: left promiscuous mode [ 331.116564][ T2792] hsr_slave_1: left promiscuous mode [ 331.124186][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.133010][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.141300][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.152931][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.169355][ T2792] hsr_slave_0: left promiscuous mode [ 331.175616][ T2792] hsr_slave_1: left promiscuous mode [ 331.182913][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.190688][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.199091][ T2792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.206652][ T2792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.306396][ T2792] veth1_macvtap: left promiscuous mode [ 331.318427][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 331.332352][ T2792] veth0_macvtap: left promiscuous mode [ 331.349808][ T2792] veth1_vlan: left promiscuous mode [ 331.356431][ T2792] veth0_vlan: left promiscuous mode [ 331.372073][ T2792] veth1_macvtap: left promiscuous mode [ 331.378072][ T2792] veth0_macvtap: left promiscuous mode [ 331.383887][ T2792] veth1_vlan: left promiscuous mode [ 331.391407][ T2792] veth1_macvtap: left promiscuous mode [ 331.397071][ T2792] veth0_macvtap: left promiscuous mode [ 331.404439][ T2792] veth1_vlan: left promiscuous mode [ 331.410057][ T2792] veth0_vlan: left promiscuous mode [ 331.625157][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 331.722396][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1922'. [ 332.466266][ T2792] team_slave_1 (unregistering): left promiscuous mode [ 332.485897][ T2792] team0 (unregistering): Port device team_slave_1 removed [ 332.534322][ T2792] team_slave_0 (unregistering): left promiscuous mode [ 332.545371][ T2792] team0 (unregistering): Port device team_slave_0 removed [ 333.026088][ T2792] batadv1 (unregistering): left promiscuous mode [ 333.037060][ T2792] team0 (unregistering): Port device batadv1 removed [ 333.477082][ T2792] team_slave_1 (unregistering): left promiscuous mode [ 333.490593][ T2792] team0 (unregistering): Port device team_slave_1 removed [ 333.535958][ T2792] team_slave_0 (unregistering): left promiscuous mode [ 333.544740][ T2792] team0 (unregistering): Port device team_slave_0 removed [ 334.441972][ T2792] team_slave_1 (unregistering): left promiscuous mode [ 334.454391][ T2792] team0 (unregistering): Port device team_slave_1 removed [ 334.501281][ T2792] team_slave_0 (unregistering): left promiscuous mode [ 334.510028][ T2792] team0 (unregistering): Port device team_slave_0 removed [ 335.072619][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.080489][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.267087][T11578] netlink: 'syz.4.1925': attribute type 21 has an invalid length. [ 335.296885][T11578] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1925'. [ 335.319799][T11576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 335.339730][T11578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1925'. [ 335.347802][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 335.357510][T11576] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 335.521186][T11415] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.543943][T11415] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.605370][T11415] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.712396][T11415] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.943962][T11415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.999540][T11415] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.025569][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.032853][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.093871][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.101134][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.270720][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1930'. [ 336.364029][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 336.401746][T11603] ip6t_REJECT: ECHOREPLY is not supported [ 336.429412][T11603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 336.440328][T11603] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 336.514667][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 336.602107][T11415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.663340][T11415] veth0_vlan: entered promiscuous mode [ 336.682317][T11415] veth1_vlan: entered promiscuous mode [ 336.771591][T11415] veth0_macvtap: entered promiscuous mode [ 336.796515][T11415] veth1_macvtap: entered promiscuous mode [ 336.823732][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.834968][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.845311][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.856440][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.871258][T11415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.893559][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.904878][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.926294][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.937179][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.953332][T11415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.961075][T11615] netlink: 'syz.4.1934': attribute type 10 has an invalid length. [ 336.974807][T11615] team0: left allmulticast mode [ 336.987513][T11615] batadv1: left allmulticast mode [ 336.993943][T11615] batadv2: left allmulticast mode [ 337.000028][T11615] batadv3: left allmulticast mode [ 337.005312][T11615] batadv4: left allmulticast mode [ 337.010929][T11615] team0: left promiscuous mode [ 337.015910][T11615] batadv1: left promiscuous mode [ 337.023181][T11615] batadv2: left promiscuous mode [ 337.029460][T11615] batadv3: left promiscuous mode [ 337.034557][T11615] batadv4: left promiscuous mode [ 337.040076][T11615] bridge0: port 1(team0) entered disabled state [ 337.061642][T11615] batman_adv: batadv0: Adding interface: team0 [ 337.068429][T11615] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.113800][T11615] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 337.145270][T11616] netlink: 'syz.4.1934': attribute type 10 has an invalid length. [ 337.176208][T11616] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1934'. [ 337.209962][T11616] team0: entered promiscuous mode [ 337.220112][T11616] batadv1: entered promiscuous mode [ 337.225668][T11616] batadv2: entered promiscuous mode [ 337.231388][T11616] batadv3: entered promiscuous mode [ 337.236840][T11616] batadv4: entered promiscuous mode [ 337.246262][T11616] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.255211][T11616] batman_adv: batadv0: Interface activated: team0 [ 337.263718][T11616] batman_adv: batadv0: Interface deactivated: team0 [ 337.273517][T11616] batman_adv: batadv0: Removing interface: team0 [ 337.281626][T11616] bridge0: port 1(team0) entered blocking state [ 337.289676][T11616] bridge0: port 1(team0) entered disabled state [ 337.296210][T11616] team0: entered allmulticast mode [ 337.301718][T11616] batadv1: entered allmulticast mode [ 337.307056][T11616] batadv2: entered allmulticast mode [ 337.312839][T11616] batadv3: entered allmulticast mode [ 337.319351][T11616] batadv4: entered allmulticast mode [ 337.343608][T11415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.365606][T11415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.374753][T11415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.383730][T11415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.403628][T11620] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 337.428913][T11620] team0: left allmulticast mode [ 337.438776][T11620] team0: left promiscuous mode [ 337.443803][T11620] bridge0: port 1(team0) entered disabled state [ 337.455235][T11620] batman_adv: batadv0: Adding interface: team0 [ 337.463110][T11620] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.495805][T11620] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 337.518131][T11621] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 337.536342][T11621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1935'. [ 337.546770][T11621] team0: entered promiscuous mode [ 337.554100][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.561443][T11621] batman_adv: batadv0: Interface activated: team0 [ 337.569689][T11621] batman_adv: batadv0: Interface deactivated: team0 [ 337.577061][T11621] batman_adv: batadv0: Removing interface: team0 [ 337.586249][T11621] bridge0: port 1(team0) entered blocking state [ 337.594231][T11621] bridge0: port 1(team0) entered disabled state [ 337.601761][T11621] team0: entered allmulticast mode [ 337.785370][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.788157][ T11] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 337.803417][ T11] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 337.803821][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.827105][ T11] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 337.836498][ T11] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 337.846121][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 337.855803][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 337.907505][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.915390][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.000038][T11642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 338.013979][T11642] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 338.757175][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 339.122126][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 340.631596][T11665] __nla_validate_parse: 3 callbacks suppressed [ 340.631617][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 340.982679][T11675] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1951'. [ 341.385940][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 342.265607][T11689] ip6t_REJECT: ECHOREPLY is not supported [ 342.276144][T11689] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 342.285941][T11689] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 342.385668][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 343.280482][T11704] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1962'. [ 343.523353][T11715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 343.535957][T11715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 344.410701][T11722] ip6t_REJECT: ECHOREPLY is not supported [ 344.430269][T11719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 344.441272][T11719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 344.563256][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 345.437490][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1975'. [ 345.614189][T11745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1977'. [ 346.803862][T11758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 346.821459][T11758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 347.147832][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 347.323651][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.336987][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.346003][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.354469][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.362971][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.377278][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.650991][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.661822][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.671608][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.685407][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.694375][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.702107][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.754679][T11767] chnl_net:caif_netlink_parms(): no params data found [ 347.850870][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1987'. [ 347.979520][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.986883][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.995475][T11767] bridge_slave_0: entered allmulticast mode [ 348.003288][T11767] bridge_slave_0: entered promiscuous mode [ 348.015675][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.023501][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.031641][T11767] bridge_slave_1: entered allmulticast mode [ 348.041216][T11767] bridge_slave_1: entered promiscuous mode [ 348.090607][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.103728][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 348.104118][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.180646][T11767] team0: Port device team_slave_0 added [ 348.194120][T11767] team0: Port device team_slave_1 added [ 348.308033][T11794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1989'. [ 348.318025][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.324996][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.351987][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.391580][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.400804][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.427820][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.516944][T11767] hsr_slave_0: entered promiscuous mode [ 348.536364][T11767] hsr_slave_1: entered promiscuous mode [ 348.546438][T11767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.564597][T11767] Cannot create hsr debugfs directory [ 348.632671][T11776] chnl_net:caif_netlink_parms(): no params data found [ 348.855277][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.868240][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.875632][T11776] bridge_slave_0: entered allmulticast mode [ 348.883635][T11776] bridge_slave_0: entered promiscuous mode [ 348.901043][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.917642][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.927886][T11776] bridge_slave_1: entered allmulticast mode [ 348.939779][T11776] bridge_slave_1: entered promiscuous mode [ 349.063608][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.130482][T11767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.172454][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.284514][T11767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.314103][T11776] team0: Port device team_slave_0 added [ 349.328930][T11776] team0: Port device team_slave_1 added [ 349.420931][ T5099] Bluetooth: hci3: command tx timeout [ 349.439183][T11767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.458096][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.465087][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.494477][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.546657][T11767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.578187][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.585457][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.612720][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.657926][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 349.755325][T11776] hsr_slave_0: entered promiscuous mode [ 349.781486][T11776] hsr_slave_1: entered promiscuous mode [ 349.790279][T11776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.804805][T11776] Cannot create hsr debugfs directory [ 349.827612][ T5099] Bluetooth: hci4: command tx timeout [ 349.884085][T11813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1993'. [ 350.099974][T11767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.117918][T11767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.138939][T11767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.192857][T11767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.351725][T11776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.375819][T11776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.384455][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 350.520232][T11776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.535488][T11776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.628927][T11776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.643038][T11776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.670742][T11825] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 350.679325][T11825] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1998'. [ 350.688791][T11825] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 350.748665][T11776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.759159][T11776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.771799][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 350.788985][T11825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 350.799344][T11825] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 350.806539][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.842156][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.860797][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.868071][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.897004][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.904254][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.013418][T11776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.024538][T11776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.058757][T11776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.076524][T11776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.251076][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.294963][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.327015][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.334232][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.360750][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.368264][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.479256][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.494129][T11776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.507787][ T5099] Bluetooth: hci3: command tx timeout [ 351.558910][T11837] xt_hashlimit: overflow, try lower: 0/0 [ 351.872936][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 351.898496][ T5101] Bluetooth: hci4: command tx timeout [ 351.962438][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.043881][T11776] veth0_vlan: entered promiscuous mode [ 352.061247][T11776] veth1_vlan: entered promiscuous mode [ 352.129905][T11767] veth0_vlan: entered promiscuous mode [ 352.154785][T11776] veth0_macvtap: entered promiscuous mode [ 352.166371][T11767] veth1_vlan: entered promiscuous mode [ 352.178042][T11776] veth1_macvtap: entered promiscuous mode [ 352.234152][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.251527][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.263091][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.274187][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.284588][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.296492][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.311151][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.326306][T11767] veth0_macvtap: entered promiscuous mode [ 352.356043][T11767] veth1_macvtap: entered promiscuous mode [ 352.370118][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.387916][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.399873][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.410565][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.423942][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.434968][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.449604][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.491958][T11776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.517566][T11776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.526348][T11776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.555272][T11776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.570306][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 352.600760][T11853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2002'. [ 352.689340][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.706801][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.719046][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.729929][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.740104][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.753450][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.763673][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.778952][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.791668][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.826361][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.845609][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.857749][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.868548][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.878506][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.891838][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.908340][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.928175][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.952128][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 352.952444][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.002722][T11767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.019106][T11767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.034459][T11767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.050546][T11767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.197698][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.208664][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.335034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.353617][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 353.371032][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.409695][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.426408][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.511972][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.531013][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.590692][ T5101] Bluetooth: hci3: command tx timeout [ 353.758335][T11878] ip6t_REJECT: ECHOREPLY is not supported [ 353.795496][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.803369][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.848820][T11876] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.887444][T11876] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 353.958686][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 353.979467][ T5101] Bluetooth: hci4: command 0x040f tx timeout [ 354.046933][T11883] xt_hashlimit: overflow, try lower: 0/0 [ 354.355509][T11890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2012'. [ 354.406570][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 354.421884][T11892] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 354.449430][T11892] batman_adv: batadv0: Adding interface: team0 [ 354.455895][T11892] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.482459][T11892] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 354.513902][T11893] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 354.530846][T11893] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2013'. [ 354.558439][T11893] team0: entered promiscuous mode [ 354.573779][T11893] team_slave_0: entered promiscuous mode [ 354.596088][T11893] team_slave_1: entered promiscuous mode [ 354.604777][T11893] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.612109][T11893] batman_adv: batadv0: Interface activated: team0 [ 354.623223][T11893] batman_adv: batadv0: Interface deactivated: team0 [ 354.632035][T11893] batman_adv: batadv0: Removing interface: team0 [ 354.641743][T11893] bridge0: port 3(team0) entered blocking state [ 354.658607][T11893] bridge0: port 3(team0) entered disabled state [ 354.667598][T11893] team0: entered allmulticast mode [ 354.672872][T11893] team_slave_0: entered allmulticast mode [ 354.678891][T11893] team_slave_1: entered allmulticast mode [ 354.725091][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 354.971610][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2016'. [ 355.658054][ T5101] Bluetooth: hci3: command tx timeout [ 355.779053][T11923] xt_hashlimit: overflow, try lower: 0/0 [ 356.057942][ T5101] Bluetooth: hci4: command 0x040f tx timeout [ 356.139573][T11933] ip6t_REJECT: ECHOREPLY is not supported [ 356.164813][T11933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 356.190623][T11937] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 356.192003][T11933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 356.232253][ T2477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.255033][T11937] team0: left allmulticast mode [ 356.277691][T11937] team_slave_0: left allmulticast mode [ 356.283470][T11937] team_slave_1: left allmulticast mode [ 356.297198][T11937] team0: left promiscuous mode [ 356.316819][T11937] team_slave_0: left promiscuous mode [ 356.343449][T11937] team_slave_1: left promiscuous mode [ 356.362786][T11937] bridge0: port 3(team0) entered disabled state [ 356.386182][T11937] batman_adv: batadv0: Adding interface: team0 [ 356.410078][T11937] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.456871][T11937] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 356.482478][T11938] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 356.525623][T11938] team0: entered promiscuous mode [ 356.542560][T11938] team_slave_0: entered promiscuous mode [ 356.563073][T11938] team_slave_1: entered promiscuous mode [ 356.596078][T11938] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.616035][T11938] batman_adv: batadv0: Interface activated: team0 [ 356.636076][T11938] batman_adv: batadv0: Interface deactivated: team0 [ 356.668382][T11938] batman_adv: batadv0: Removing interface: team0 [ 356.682569][T11938] bridge0: port 3(team0) entered blocking state [ 356.703394][T11938] bridge0: port 3(team0) entered disabled state [ 356.718486][T11938] team0: entered allmulticast mode [ 356.731589][T11938] team_slave_0: entered allmulticast mode [ 356.747448][T11938] team_slave_1: entered allmulticast mode [ 357.315424][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.323329][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.488608][T11962] ip6t_REJECT: ECHOREPLY is not supported [ 357.539775][T11961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 357.565249][T11961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 357.756385][T11969] __nla_validate_parse: 7 callbacks suppressed [ 357.756403][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 357.972608][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.100993][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 358.138184][ T5099] Bluetooth: hci4: command 0x040f tx timeout [ 358.296382][T11977] ip6t_REJECT: ECHOREPLY is not supported [ 358.331139][T11977] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 358.357881][T11977] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 358.578119][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 358.649670][T11992] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 358.658501][T11992] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2044'. [ 358.669294][T11992] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 358.680545][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 359.115131][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 359.368374][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 359.424310][T12008] xt_hashlimit: overflow, try lower: 0/0 [ 359.432065][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 359.653733][T12012] ip6t_REJECT: ECHOREPLY is not supported [ 359.677761][T12012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.701130][T12012] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 360.015130][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 360.217602][ T5099] Bluetooth: hci4: command 0x040f tx timeout [ 360.368676][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 360.904764][T12047] xt_hashlimit: overflow, try lower: 0/0 [ 362.070838][T12070] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 362.145400][T12070] batman_adv: batadv0: Adding interface: team0 [ 362.157664][T12070] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.211044][T12070] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 362.240129][T12075] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 362.267578][T12075] team0: entered promiscuous mode [ 362.296901][T12077] ip6t_REJECT: ECHOREPLY is not supported [ 362.307467][T12075] team_slave_0: entered promiscuous mode [ 362.313479][T12075] team_slave_1: entered promiscuous mode [ 362.316883][T12077] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 362.333123][T12077] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 362.343478][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.353827][T12075] batman_adv: batadv0: Interface activated: team0 [ 362.360569][T12075] batman_adv: batadv0: Interface deactivated: team0 [ 362.368555][T12075] batman_adv: batadv0: Removing interface: team0 [ 362.380092][T12075] bridge0: port 3(team0) entered blocking state [ 362.388611][T12075] bridge0: port 3(team0) entered disabled state [ 362.395179][T12075] team0: entered allmulticast mode [ 362.401431][T12075] team_slave_0: entered allmulticast mode [ 362.408501][T12075] team_slave_1: entered allmulticast mode [ 362.914175][T12100] ip6t_REJECT: ECHOREPLY is not supported [ 362.932602][T12100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 362.968604][T12100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 363.209767][T12105] __nla_validate_parse: 16 callbacks suppressed [ 363.209789][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 363.239299][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 363.524389][T12113] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 363.538445][T12113] team0: left allmulticast mode [ 363.551589][T12113] team_slave_0: left allmulticast mode [ 363.558770][T12113] team_slave_1: left allmulticast mode [ 363.564466][T12113] team0: left promiscuous mode [ 363.567439][T12111] ip6t_REJECT: ECHOREPLY is not supported [ 363.569671][T12113] team_slave_0: left promiscuous mode [ 363.580099][T12111] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 363.581226][T12113] team_slave_1: left promiscuous mode [ 363.594029][T12111] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2088'. [ 363.607500][T12111] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 363.615783][T12113] bridge0: port 3(team0) entered disabled state [ 363.626914][T12113] batman_adv: batadv0: Adding interface: team0 [ 363.633424][T12113] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.659815][T12113] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 363.671259][T12115] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 363.687299][T12115] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2087'. [ 363.725816][T12115] team0: entered promiscuous mode [ 363.735891][T12115] team_slave_0: entered promiscuous mode [ 363.766558][T12115] team_slave_1: entered promiscuous mode [ 363.783897][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.792501][T12115] batman_adv: batadv0: Interface activated: team0 [ 363.799470][T12115] batman_adv: batadv0: Interface deactivated: team0 [ 363.806228][T12115] batman_adv: batadv0: Removing interface: team0 [ 363.819120][T12115] bridge0: port 3(team0) entered blocking state [ 363.825656][T12115] bridge0: port 3(team0) entered disabled state [ 363.832324][T12115] team0: entered allmulticast mode [ 363.837677][T12115] team_slave_0: entered allmulticast mode [ 363.843490][T12115] team_slave_1: entered allmulticast mode [ 363.853043][T12111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 363.856226][T12118] netlink: 'syz.0.2089': attribute type 10 has an invalid length. [ 363.863201][T12111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 363.937170][T12118] batman_adv: batadv0: Adding interface: team0 [ 363.952241][T12118] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.994342][T12118] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 364.023910][T12119] netlink: 'syz.0.2089': attribute type 10 has an invalid length. [ 364.045140][T12119] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2089'. [ 364.084542][T12119] team0: entered promiscuous mode [ 364.097429][T12119] team_slave_0: entered promiscuous mode [ 364.108883][T12119] team_slave_1: entered promiscuous mode [ 364.120829][T12119] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.145307][T12119] batman_adv: batadv0: Interface activated: team0 [ 364.161229][T12119] batman_adv: batadv0: Interface deactivated: team0 [ 364.174984][T12119] batman_adv: batadv0: Removing interface: team0 [ 364.175169][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 364.197631][T12119] bridge0: port 3(team0) entered blocking state [ 364.204226][T12119] bridge0: port 3(team0) entered disabled state [ 364.211058][T12119] team0: entered allmulticast mode [ 364.216309][T12119] team_slave_0: entered allmulticast mode [ 364.225654][T12119] team_slave_1: entered allmulticast mode [ 364.445305][T12133] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2094'. [ 364.479538][T12133] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 364.490744][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 364.503634][T12133] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.504278][T12140] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2096'. [ 364.575329][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 364.790578][T12151] ip6t_REJECT: ECHOREPLY is not supported [ 365.406418][T12161] team0: left allmulticast mode [ 365.416768][T12161] team_slave_0: left allmulticast mode [ 365.424930][T12161] team_slave_1: left allmulticast mode [ 365.433804][T12161] team0: left promiscuous mode [ 365.439131][T12161] team_slave_0: left promiscuous mode [ 365.444958][T12161] team_slave_1: left promiscuous mode [ 365.455604][T12161] bridge0: port 3(team0) entered disabled state [ 365.480590][T12161] batman_adv: batadv0: Adding interface: team0 [ 365.488797][T12161] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.516082][T12161] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 365.549929][T12162] team0: entered promiscuous mode [ 365.575985][T12162] team_slave_0: entered promiscuous mode [ 365.597633][T12162] team_slave_1: entered promiscuous mode [ 365.606546][T12162] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.628411][T12162] batman_adv: batadv0: Interface activated: team0 [ 365.637571][T12162] batman_adv: batadv0: Interface deactivated: team0 [ 365.661952][T12162] batman_adv: batadv0: Removing interface: team0 [ 365.681424][T12162] bridge0: port 3(team0) entered blocking state [ 365.692459][T12162] bridge0: port 3(team0) entered disabled state [ 365.700304][T12162] team0: entered allmulticast mode [ 365.705688][T12162] team_slave_0: entered allmulticast mode [ 365.712145][T12162] team_slave_1: entered allmulticast mode [ 365.760443][T12173] ip6t_REJECT: ECHOREPLY is not supported [ 365.794831][T12169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 365.819897][T12169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 366.977817][T12195] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 366.989068][T12195] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.026345][T12201] ip6t_REJECT: ECHOREPLY is not supported [ 367.654757][T12208] validate_nla: 10 callbacks suppressed [ 367.654779][T12208] netlink: 'syz.1.2120': attribute type 10 has an invalid length. [ 367.704672][T12208] team0: left allmulticast mode [ 367.717387][T12208] team_slave_0: left allmulticast mode [ 367.737491][T12208] team_slave_1: left allmulticast mode [ 367.764483][T12208] team0: left promiscuous mode [ 367.778416][T12208] team_slave_0: left promiscuous mode [ 367.788358][T12208] team_slave_1: left promiscuous mode [ 367.807842][T12208] bridge0: port 3(team0) entered disabled state [ 367.819289][T12208] batman_adv: batadv0: Adding interface: team0 [ 367.825506][T12208] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.852229][T12208] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 367.865742][T12209] netlink: 'syz.1.2120': attribute type 10 has an invalid length. [ 367.886833][T12209] team0: entered promiscuous mode [ 367.894743][T12209] team_slave_0: entered promiscuous mode [ 367.901357][T12209] team_slave_1: entered promiscuous mode [ 367.914196][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.921724][T12209] batman_adv: batadv0: Interface activated: team0 [ 367.930361][T12209] batman_adv: batadv0: Interface deactivated: team0 [ 367.937462][T12209] batman_adv: batadv0: Removing interface: team0 [ 367.953539][T12209] bridge0: port 3(team0) entered blocking state [ 367.966478][T12209] bridge0: port 3(team0) entered disabled state [ 367.973999][T12209] team0: entered allmulticast mode [ 367.980590][T12209] team_slave_0: entered allmulticast mode [ 367.993533][T12209] team_slave_1: entered allmulticast mode [ 368.041613][T12220] ip6t_REJECT: ECHOREPLY is not supported [ 368.053343][T12220] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 368.081302][T12220] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 368.139462][T12220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 368.154651][T12220] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 368.278118][T12228] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 368.286150][T12228] __nla_validate_parse: 19 callbacks suppressed [ 368.286168][T12228] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2126'. [ 368.303744][T12228] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 368.374195][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'. [ 368.396295][T12236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2128'. [ 368.831430][T12239] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2129'. [ 368.841671][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 369.047987][T12246] ip6t_REJECT: ECHOREPLY is not supported [ 369.069968][T12246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 369.087568][T12246] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.154585][T12248] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2133'. [ 369.204745][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 369.296689][T12255] netlink: 'syz.4.2136': attribute type 10 has an invalid length. [ 369.341757][T12255] batman_adv: batadv0: Adding interface: team0 [ 369.347021][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 369.357376][T12255] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.357413][T12255] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 369.388228][T12255] netlink: 'syz.4.2136': attribute type 10 has an invalid length. [ 369.404308][T12255] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2136'. [ 369.415210][T12255] team0: entered promiscuous mode [ 369.423861][T12255] team_slave_0: entered promiscuous mode [ 369.427732][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 369.431448][T12255] team_slave_1: entered promiscuous mode [ 369.449840][T12255] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.456945][T12255] batman_adv: batadv0: Interface activated: team0 [ 369.463850][T12255] batman_adv: batadv0: Interface deactivated: team0 [ 369.470836][T12255] batman_adv: batadv0: Removing interface: team0 [ 369.489682][T12255] bridge0: port 3(team0) entered blocking state [ 369.496237][T12255] bridge0: port 3(team0) entered disabled state [ 369.503209][T12255] team0: entered allmulticast mode [ 369.508650][T12255] team_slave_0: entered allmulticast mode [ 369.514411][T12255] team_slave_1: entered allmulticast mode [ 369.831319][T12272] netlink: 'syz.3.2142': attribute type 10 has an invalid length. [ 369.832371][T12267] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 369.858266][T12272] team0: left allmulticast mode [ 369.867964][T12272] team_slave_0: left allmulticast mode [ 369.879740][T12272] team_slave_1: left allmulticast mode [ 369.892791][T12272] team0: left promiscuous mode [ 369.907816][T12272] team_slave_0: left promiscuous mode [ 369.918319][T12272] team_slave_1: left promiscuous mode [ 369.933759][T12272] bridge0: port 3(team0) entered disabled state [ 369.960954][T12272] batman_adv: batadv0: Adding interface: team0 [ 369.967380][T12272] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.001233][T12272] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 370.018481][T12273] team0: entered promiscuous mode [ 370.029302][T12273] team_slave_0: entered promiscuous mode [ 370.050049][T12273] team_slave_1: entered promiscuous mode [ 370.090725][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.118164][T12273] batman_adv: batadv0: Interface activated: team0 [ 370.133674][T12273] batman_adv: batadv0: Interface deactivated: team0 [ 370.143256][T12273] batman_adv: batadv0: Removing interface: team0 [ 370.152514][T12273] bridge0: port 3(team0) entered blocking state [ 370.163395][T12273] bridge0: port 3(team0) entered disabled state [ 370.171981][T12273] team0: entered allmulticast mode [ 370.177591][T12273] team_slave_0: entered allmulticast mode [ 370.183710][T12273] team_slave_1: entered allmulticast mode [ 370.422378][T12291] team0: left allmulticast mode [ 370.439674][T12291] team_slave_0: left allmulticast mode [ 370.453228][T12291] team_slave_1: left allmulticast mode [ 370.471136][T12291] team0: left promiscuous mode [ 370.481451][T12291] team_slave_0: left promiscuous mode [ 370.487183][T12291] team_slave_1: left promiscuous mode [ 370.493369][T12291] bridge0: port 3(team0) entered disabled state [ 370.505582][T12291] batman_adv: batadv0: Adding interface: team0 [ 370.514670][T12291] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.552820][T11617] ================================================================== [ 370.560937][T11617] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 370.569214][T11617] Read of size 8 at addr ffff888067cb8058 by task syz.4.1934/11617 [ 370.577129][T11617] [ 370.579473][T11617] CPU: 1 PID: 11617 Comm: syz.4.1934 Not tainted 6.10.0-rc5-syzkaller-00169-gdc6be0b73f4f #0 [ 370.589648][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 370.600074][T11617] Call Trace: [ 370.603372][T11617] [ 370.606323][T11617] dump_stack_lvl+0x241/0x360 [ 370.611043][T11617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.616360][T11617] ? __pfx__printk+0x10/0x10 [ 370.621007][T11617] ? _printk+0xd5/0x120 [ 370.625197][T11617] ? __virt_addr_valid+0x183/0x520 [ 370.630368][T11617] ? __virt_addr_valid+0x183/0x520 [ 370.635517][T11617] print_report+0x169/0x550 [ 370.640090][T11617] ? __virt_addr_valid+0x183/0x520 [ 370.645250][T11617] ? __virt_addr_valid+0x183/0x520 [ 370.650406][T11617] ? __virt_addr_valid+0x44e/0x520 [ 370.655557][T11617] ? __phys_addr+0xba/0x170 [ 370.660101][T11617] ? skb_queue_purge_reason+0xb9/0x500 [ 370.665599][T11617] kasan_report+0x143/0x180 [ 370.670139][T11617] ? skb_queue_purge_reason+0xb9/0x500 [ 370.675634][T11617] skb_queue_purge_reason+0xb9/0x500 [ 370.680960][T11617] ? trace_contention_end+0x3c/0x120 [ 370.686278][T11617] ? __mutex_lock+0x2ef/0xd70 [ 370.690988][T11617] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 370.696911][T11617] ? drain_workqueue+0x2d3/0x3a0 [ 370.701857][T11617] ? hci_conn_hash_flush+0x1da/0x240 [ 370.707155][T11617] vhci_flush+0x44/0x50 [ 370.711585][T11617] ? __pfx_vhci_flush+0x10/0x10 [ 370.716446][T11617] hci_dev_reset+0x42a/0x5d0 [ 370.721052][T11617] sock_do_ioctl+0x158/0x460 [ 370.725658][T11617] ? __pfx_sock_do_ioctl+0x10/0x10 [ 370.730795][T11617] sock_ioctl+0x629/0x8e0 [ 370.735143][T11617] ? __pfx_sock_ioctl+0x10/0x10 [ 370.740003][T11617] ? __fget_files+0x29/0x470 [ 370.744600][T11617] ? __fget_files+0x3f6/0x470 [ 370.749286][T11617] ? __fget_files+0x29/0x470 [ 370.753887][T11617] ? bpf_lsm_file_ioctl+0x9/0x10 [ 370.758834][T11617] ? security_file_ioctl+0x87/0xb0 [ 370.764477][T11617] ? __pfx_sock_ioctl+0x10/0x10 [ 370.769343][T11617] __se_sys_ioctl+0xfc/0x170 [ 370.773957][T11617] do_syscall_64+0xf3/0x230 [ 370.778475][T11617] ? clear_bhb_loop+0x35/0x90 [ 370.783169][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.789073][T11617] RIP: 0033:0x7f5324f75b99 [ 370.793488][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.813102][T11617] RSP: 002b:00007f5325c81048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.821524][T11617] RAX: ffffffffffffffda RBX: 00007f5325104150 RCX: 00007f5324f75b99 [ 370.829497][T11617] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 370.837466][T11617] RBP: 00007f5324ff677e R08: 0000000000000000 R09: 0000000000000000 [ 370.845434][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.853401][T11617] R13: 000000000000006e R14: 00007f5325104150 R15: 00007ffe8e7035d8 [ 370.861386][T11617] [ 370.864402][T11617] [ 370.866728][T11617] Allocated by task 11415: [ 370.871133][T11617] kasan_save_track+0x3f/0x80 [ 370.875840][T11617] __kasan_kmalloc+0x98/0xb0 [ 370.880436][T11617] kmalloc_trace_noprof+0x19c/0x2c0 [ 370.885637][T11617] vhci_open+0x57/0x370 [ 370.889786][T11617] misc_open+0x313/0x390 [ 370.894137][T11617] chrdev_open+0x5b0/0x630 [ 370.898562][T11617] do_dentry_open+0x95a/0x1720 [ 370.903334][T11617] path_openat+0x289f/0x3280 [ 370.907925][T11617] do_filp_open+0x235/0x490 [ 370.912426][T11617] do_sys_openat2+0x13e/0x1d0 [ 370.917110][T11617] __x64_sys_openat+0x247/0x2a0 [ 370.921999][T11617] do_syscall_64+0xf3/0x230 [ 370.926512][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.932409][T11617] [ 370.934732][T11617] Freed by task 11415: [ 370.938795][T11617] kasan_save_track+0x3f/0x80 [ 370.943489][T11617] kasan_save_free_info+0x40/0x50 [ 370.948521][T11617] poison_slab_object+0xe0/0x150 [ 370.953455][T11617] __kasan_slab_free+0x37/0x60 [ 370.958215][T11617] kfree+0x149/0x360 [ 370.962197][T11617] vhci_release+0xbf/0xd0 [ 370.966540][T11617] __fput+0x406/0x8b0 [ 370.970525][T11617] task_work_run+0x24f/0x310 [ 370.975117][T11617] do_exit+0xa27/0x27e0 [ 370.979376][T11617] do_group_exit+0x207/0x2c0 [ 370.983983][T11617] __x64_sys_exit_group+0x3f/0x40 [ 370.989021][T11617] do_syscall_64+0xf3/0x230 [ 370.993534][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.999437][T11617] [ 371.001758][T11617] The buggy address belongs to the object at ffff888067cb8000 [ 371.001758][T11617] which belongs to the cache kmalloc-1k of size 1024 [ 371.015808][T11617] The buggy address is located 88 bytes inside of [ 371.015808][T11617] freed 1024-byte region [ffff888067cb8000, ffff888067cb8400) [ 371.029727][T11617] [ 371.032053][T11617] The buggy address belongs to the physical page: [ 371.038473][T11617] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67cb8 [ 371.047245][T11617] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 371.055761][T11617] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 371.063322][T11617] page_type: 0xffffefff(slab) [ 371.068044][T11617] raw: 00fff00000000040 ffff888015041dc0 ffffea0000af7600 dead000000000002 [ 371.076732][T11617] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 371.085333][T11617] head: 00fff00000000040 ffff888015041dc0 ffffea0000af7600 dead000000000002 [ 371.094017][T11617] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 371.102703][T11617] head: 00fff00000000003 ffffea00019f2e01 ffffffffffffffff 0000000000000000 [ 371.111380][T11617] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 371.120062][T11617] page dumped because: kasan: bad access detected [ 371.126484][T11617] page_owner tracks the page as allocated [ 371.132296][T11617] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1093, tgid 1093 (kworker/u8:6), ts 201386660322, free_ts 201308537629 [ 371.154725][T11617] post_alloc_hook+0x1f3/0x230 [ 371.159531][T11617] get_page_from_freelist+0x2e4c/0x2f10 [ 371.165176][T11617] __alloc_pages_noprof+0x256/0x6c0 [ 371.170479][T11617] alloc_slab_page+0x5f/0x120 [ 371.175172][T11617] allocate_slab+0x5a/0x2f0 [ 371.179821][T11617] ___slab_alloc+0xcd1/0x14b0 [ 371.184515][T11617] __slab_alloc+0x58/0xa0 [ 371.188857][T11617] kmalloc_node_track_caller_noprof+0x281/0x440 [ 371.195112][T11617] kmalloc_reserve+0x111/0x2a0 [ 371.199881][T11617] __alloc_skb+0x1f3/0x440 [ 371.204382][T11617] inet6_rt_notify+0xdf/0x290 [ 371.209063][T11617] fib6_del+0x10c5/0x1600 [ 371.213412][T11617] fib6_clean_node+0x2f7/0x5e0 [ 371.218174][T11617] fib6_walk_continue+0x658/0x8f0 [ 371.223211][T11617] fib6_walk+0x168/0x2b0 [ 371.227451][T11617] __fib6_clean_all+0x31f/0x4b0 [ 371.232338][T11617] page last free pid 8229 tgid 8229 stack trace: [ 371.238687][T11617] free_unref_page+0xd22/0xea0 [ 371.243556][T11617] __put_partials+0xeb/0x130 [ 371.248188][T11617] put_cpu_partial+0x17c/0x250 [ 371.252958][T11617] __slab_free+0x2ea/0x3d0 [ 371.257403][T11617] qlist_free_all+0x9e/0x140 [ 371.262112][T11617] kasan_quarantine_reduce+0x14f/0x170 [ 371.267603][T11617] __kasan_slab_alloc+0x23/0x80 [ 371.272481][T11617] kmem_cache_alloc_noprof+0x135/0x2a0 [ 371.278039][T11617] ptlock_alloc+0x20/0x70 [ 371.282369][T11617] pte_alloc_one+0xcd/0x5d0 [ 371.286885][T11617] __pte_alloc+0x79/0x3a0 [ 371.291235][T11617] copy_pmd_range+0x7c81/0x84c0 [ 371.296092][T11617] copy_page_range+0x99f/0xe90 [ 371.300860][T11617] copy_mm+0x128d/0x2020 [ 371.305106][T11617] copy_process+0x187a/0x3dc0 [ 371.309791][T11617] kernel_clone+0x226/0x8f0 [ 371.314325][T11617] [ 371.316676][T11617] Memory state around the buggy address: [ 371.322838][T11617] ffff888067cb7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 371.330936][T11617] ffff888067cb7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 371.339010][T11617] >ffff888067cb8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.347080][T11617] ^ [ 371.354110][T11617] ffff888067cb8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.362180][T11617] ffff888067cb8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.370269][T11617] ================================================================== [ 371.381871][T12291] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 371.396668][T11617] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.403993][T11617] CPU: 0 PID: 11617 Comm: syz.4.1934 Not tainted 6.10.0-rc5-syzkaller-00169-gdc6be0b73f4f #0 [ 371.414181][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.424293][T11617] Call Trace: [ 371.427597][T11617] [ 371.430546][T11617] dump_stack_lvl+0x241/0x360 [ 371.435244][T11617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.440463][T11617] ? __pfx__printk+0x10/0x10 [ 371.445065][T11617] ? preempt_schedule+0xe1/0xf0 [ 371.449925][T11617] ? vscnprintf+0x5d/0x90 [ 371.454266][T11617] panic+0x349/0x860 [ 371.458181][T11617] ? check_panic_on_warn+0x21/0xb0 [ 371.463322][T11617] ? __pfx_panic+0x10/0x10 [ 371.467836][T11617] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 371.473819][T11617] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 371.480150][T11617] ? print_report+0x502/0x550 [ 371.484865][T11617] check_panic_on_warn+0x86/0xb0 [ 371.489821][T11617] ? skb_queue_purge_reason+0xb9/0x500 [ 371.495288][T11617] end_report+0x77/0x160 [ 371.499569][T11617] kasan_report+0x154/0x180 [ 371.504086][T11617] ? skb_queue_purge_reason+0xb9/0x500 [ 371.509563][T11617] skb_queue_purge_reason+0xb9/0x500 [ 371.514862][T11617] ? trace_contention_end+0x3c/0x120 [ 371.520158][T11617] ? __mutex_lock+0x2ef/0xd70 [ 371.524845][T11617] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 371.530793][T11617] ? drain_workqueue+0x2d3/0x3a0 [ 371.535739][T11617] ? hci_conn_hash_flush+0x1da/0x240 [ 371.541038][T11617] vhci_flush+0x44/0x50 [ 371.545201][T11617] ? __pfx_vhci_flush+0x10/0x10 [ 371.550067][T11617] hci_dev_reset+0x42a/0x5d0 [ 371.554760][T11617] sock_do_ioctl+0x158/0x460 [ 371.559381][T11617] ? __pfx_sock_do_ioctl+0x10/0x10 [ 371.564539][T11617] sock_ioctl+0x629/0x8e0 [ 371.568913][T11617] ? __pfx_sock_ioctl+0x10/0x10 [ 371.573803][T11617] ? __fget_files+0x29/0x470 [ 371.578412][T11617] ? __fget_files+0x3f6/0x470 [ 371.583193][T11617] ? __fget_files+0x29/0x470 [ 371.587801][T11617] ? bpf_lsm_file_ioctl+0x9/0x10 [ 371.592754][T11617] ? security_file_ioctl+0x87/0xb0 [ 371.597895][T11617] ? __pfx_sock_ioctl+0x10/0x10 [ 371.602778][T11617] __se_sys_ioctl+0xfc/0x170 [ 371.607469][T11617] do_syscall_64+0xf3/0x230 [ 371.611985][T11617] ? clear_bhb_loop+0x35/0x90 [ 371.616669][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.622600][T11617] RIP: 0033:0x7f5324f75b99 [ 371.627021][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.646725][T11617] RSP: 002b:00007f5325c81048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.655151][T11617] RAX: ffffffffffffffda RBX: 00007f5325104150 RCX: 00007f5324f75b99 [ 371.663127][T11617] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 371.671189][T11617] RBP: 00007f5324ff677e R08: 0000000000000000 R09: 0000000000000000 [ 371.679168][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.687232][T11617] R13: 000000000000006e R14: 00007f5325104150 R15: 00007ffe8e7035d8 [ 371.695235][T11617] [ 371.698553][T11617] Kernel Offset: disabled [ 371.702886][T11617] Rebooting in 86400 seconds..