last executing test programs: 2m20.745826361s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 2m2.8080787s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 1m48.43633277s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 1m43.185997141s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 1m29.69501805s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 1m29.014328613s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m27.439939658s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m10.796004588s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 1m8.953397908s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m7.258882967s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 52.23931661s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 51.379673509s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 32.649732801s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 31.362536749s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 30.766328357s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 13.170169832s ago: executing program 0 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 11.799661335s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x479}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x1, 0x2, 0x7, 0x7, 0x10000, 0x9, 0x0, 0x4, 0xd2f6, 0xcb, 0x401, 0x2, 0xffffffff, 0x2, 0x6, 0x2, 0x8, 0xfa, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4e8, 0x9, 0x401, 0x38, 0x9, 0x8, 0x7fff, 0xffff7ee2, 0x1, 0xf, 0x9, 0x6, 0x7, 0x10, 0x81, 0x1, 0xffffffff, 0x10001, 0x2, 0xc, 0x3, 0x6, 0xd, 0x0, 0x0, 0x1, 0x0, 0xa16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf3, 0x3, 0x8, 0x8, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x4d, 0x4, 0x6, 0x8, 0x45, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x25000000, 0x6, 0x5, 0x61, 0x6c, 0x0, 0x38000, 0xaf0, 0x8, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0x0, 0x80000000, 0x9, 0x64e, 0x8, 0x7, 0x10001, 0x0, 0x0, 0x1ff, 0x1, 0x9, 0x80, 0xfffffffc, 0x0, 0x4, 0x8, 0x30000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffffa, 0xfffffffe, 0x967, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x0, 0x1, 0x401, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x4, 0x8, 0x3, 0x3, 0xffffff03, 0x0, 0x7f, 0x101, 0x7, 0xb, 0x3, 0x351c868f, 0x743, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10, 0xaf, 0x7f, 0x0, 0xfffff1db, 0x8, 0xc8, 0x0, 0x7ff, 0xd, 0x5, 0x400, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb5, 0x7, 0x80000000, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c710234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x4, 0x1, 0x3, 0x8000, 0x0, 0x74f}, {0xf, 0x0, 0x9, 0x78, 0xc, 0x4}, 0x0, 0x0, 0x951c}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 11.207333467s ago: executing program 3 (id=1028): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0xf5ffffff}, 0x1c) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0x3}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r10 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000006cb5bc68b70000000000"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 3.15722791s ago: executing program 1 (id=2202): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000001840)=@udp6}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="94270d1e6220b79e2efecd70ab9d69413e9c9cbfaab541ec56529bb737864600ca4b3a504cc260002bdf8f7d71020c1bca64943c44a65a328a2dccf53e16e185a3b682764e0b5ca32e07cc095a16919b6fbaf641d136a6315decaebe2f", @ANYRES32=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x6, 0x9, 0x8001, 0x80, 0xffffffffffffffff, 0x100000, '\x00', r3, r2, 0x4, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fd82553dcf71cceb17000000181100000575c7a2e561fc23373f4f4f267993ae8d6e87fcfe07cbe614b46b0fb1f7772caebf134882a1c284fb41f6e846c83863cb334b94bc233e6cb2690bf5d03cc038901909128b524ff4640757f3657fb14b3cac7b5cf55b08c5652b30490dc5a2fe8785fcdae424fe3fcccafb49ca", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e706000000060000005c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000280)=""/44, &(0x7f00000002c0)=0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r11], 0x4c}, 0x1, 0x0, 0x0, 0x4000095}, 0x4000080) 2.790111482s ago: executing program 1 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x72}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xff, 0x8001, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0xc}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0xff, 0x8001, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0xc}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1040) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000280)=""/44, &(0x7f00000002c0)=0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.282557802s ago: executing program 2 (id=2205): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0xa01}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000009c0), 0x1000, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x7, r5}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x72}}]}, &(0x7f00000000c0)='GPL\x00', 0x8}, 0x90) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xd) 1.984206791s ago: executing program 2 (id=2206): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x28, 0x107, 0x0, 0x0, {0x3}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}, 0x2c}}, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000001bc0)) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198}, 0x90) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 1.768750941s ago: executing program 2 (id=2207): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x0) 1.757643996s ago: executing program 2 (id=2208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000000faffffff0000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r4}, r5, 0x4, @unused=[0x6, 0xcad6, 0x718, 0xa], @subvolid=0x4}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) connect$bt_sco(r6, &(0x7f0000001140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.101930366s ago: executing program 1 (id=2209): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x3}, {0x0, 0x5a66}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_LINK={0x4}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x2, 0x8, {{0x22, 0x4, 0x1, 0x7, 0x88, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x64, 0x0, 0x4, [0x7, 0xfffffffb, 0x30f, 0x3, 0x6, 0x7, 0xbcd4]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0x4, "a19a"}, {0x2, 0x2}, {0x6, 0x5, "266aa7"}, {0x1, 0x9, "c7086b2a1d11fc"}, {0x0, 0xd, "f2836cb9b82e87c387b4e1"}, {0x6, 0xb, "be7bac86382d46a41c"}]}, @lsrr={0x83, 0x1b, 0xa0, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}]}}}}}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffe22, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0xede2, 0xc28, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x66, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0xd6, 0x3, 0x9, [{@empty, 0x2f}, {@broadcast, 0x2}, {@empty, 0x65}]}, @timestamp_addr={0x44, 0x44, 0x6, 0x1, 0x8, [{@multicast1, 0xbd2}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@private=0xa010101, 0xb0da}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xfc99}, {@rand_addr=0x64010100, 0x101}, {@multicast2, 0x9d}, {@private=0xa010102}]}, @rr={0x7, 0x27, 0x61, [@broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0xf, 0xa3, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @multicast2]}, @generic={0x89, 0xe, "1525b54fe4de08044e44b2b9"}, @rr={0x7, 0x1b, 0xdd, [@rand_addr=0x64010100, @remote, @private=0xa9, @local, @local, @private=0xa010100]}, @timestamp_prespec={0x44, 0x1c, 0x5e, 0x3, 0x2, [{@broadcast, 0x8000}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010101, 0x4}]}, @end, @generic={0x89, 0x2}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b00)={0x150, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xef}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x19a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x70}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x4000141, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.094379607s ago: executing program 2 (id=2210): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r8, @ANYBLOB="080026006c090000054018010c000000050019010a00000008009f0000000000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e, 0xa, 0xffff}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x59, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 508.737284ms ago: executing program 1 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80}]}, 0x44}, 0x1, 0x6040000}, 0x0) 454.003137ms ago: executing program 1 (id=2212): r0 = socket$inet6(0xa, 0x800, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}]}]}, 0xc4}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000002140)=""/4043, 0xfcb}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000cc0)=""/59, 0x3b}], 0x8}, 0x0) sendmmsg$inet(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xffffffffffffffd6, 0xe40, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x800000003, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}]}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="6c005e80080009000000000008000200000000000800060000000000080009000000000020"], 0x25c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@generic={0x7, 0xf, "2e33c48afbbb3ff8c549e4584df23d"}]}}}], 0x30}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r9}) socket$nl_route(0x10, 0x3, 0x0) 102.438222ms ago: executing program 2 (id=2213): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x1, &(0x7f0000001880)=@raw=[@exit], &(0x7f0000001900)='GPL\x00', 0x2, 0xf, &(0x7f0000001940)=""/15}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018320000030000000000000000000000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00020000090000003e9cbea179287b3261cdb915b70500000800000085000000a50000009500000000000000b0edf0a0de9888d052540eb155ead8fc9b30e1a50f8b"], &(0x7f0000000200)='syzkaller\x00', 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/13}, {&(0x7f0000000fc0)=""/221}, {&(0x7f00000010c0)=""/70}, {&(0x7f0000001140)=""/213}, {&(0x7f0000001240)=""/32}, {&(0x7f0000001280)=""/229}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/64}, {&(0x7f0000001440)=""/162}], 0x0, &(0x7f00000015c0)=""/177}}, {{&(0x7f0000001680)=@qipcrtr, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/240}, {&(0x7f0000001800)=""/162}, {&(0x7f00000018c0)=""/85}, {&(0x7f0000001940)=""/92}], 0x0, &(0x7f0000001a00)=""/88}}], 0x4000059, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004a80)=@newtaction={0x14}, 0x14}}, 0x0) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000004c0)=0x30, 0x4) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 0s ago: executing program 1 (id=2214): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, [@sadb_x_kmaddress={0x0, 0x19, 0x0, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010102}}]}, 0xfffffffffffffd10}}, 0x8005) (async) r1 = accept4(r0, &(0x7f0000000180)=@generic, &(0x7f0000000100)=0x80, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050001000500000008000200", @ANYRES32=0x0, @ANYBLOB="080003"], 0x4c}}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000340)=0x7, 0x4) (async, rerun: 64) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x5, {{0xa, 0x4e24, 0x4, @remote}}, {{0xa, 0x4e23, 0x7, @private1, 0x7fffffff}}}, 0x108) (rerun: 64) kernel console output (not intermixed with test programs): ng interface: batadv_slave_0 [ 346.557354][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.584331][T12762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.599407][T12790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.629156][T12762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.636418][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.663951][T12762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.685621][T12790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.756493][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.764252][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.771672][T12775] bridge_slave_0: entered allmulticast mode [ 346.781121][T12775] bridge_slave_0: entered promiscuous mode [ 346.789815][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.797365][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.804907][T12775] bridge_slave_1: entered allmulticast mode [ 346.812690][T12775] bridge_slave_1: entered promiscuous mode [ 346.849951][T12790] team0: Port device team_slave_0 added [ 346.877808][T12762] hsr_slave_0: entered promiscuous mode [ 346.885786][T12762] hsr_slave_1: entered promiscuous mode [ 346.907504][T12790] team0: Port device team_slave_1 added [ 347.029112][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.058053][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.121348][T12790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.129832][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.156349][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.229534][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.240720][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.268387][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.312449][ T5234] Bluetooth: hci1: command tx timeout [ 347.353498][T12775] team0: Port device team_slave_0 added [ 347.401009][ T3011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.520791][T12868] syzkaller0: entered promiscuous mode [ 347.526621][T12868] syzkaller0: entered allmulticast mode [ 347.537688][T12775] team0: Port device team_slave_1 added [ 347.591601][ T3011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.702581][ T5234] Bluetooth: hci0: command tx timeout [ 348.343474][ T5234] Bluetooth: hci3: command tx timeout [ 349.297659][T12790] hsr_slave_0: entered promiscuous mode [ 349.314018][T12790] hsr_slave_1: entered promiscuous mode [ 349.327408][T12790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.336445][T12790] Cannot create hsr debugfs directory [ 349.382580][ T5234] Bluetooth: hci1: command tx timeout [ 349.430666][ T3011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.545538][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.558382][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.632229][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.666330][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.682062][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.720679][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.782753][ T5234] Bluetooth: hci0: command tx timeout [ 349.789385][ T3011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.970560][T12896] pim6reg: entered allmulticast mode [ 349.998758][T12898] pim6reg: left allmulticast mode [ 350.039068][T12775] hsr_slave_0: entered promiscuous mode [ 350.054418][T12775] hsr_slave_1: entered promiscuous mode [ 350.073204][T12775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.083429][T12775] Cannot create hsr debugfs directory [ 350.182149][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 350.204082][T12901] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 350.221901][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 350.419276][ T3011] bridge_slave_1: left allmulticast mode [ 350.426041][ T5234] Bluetooth: hci3: command tx timeout [ 350.442535][ T3011] bridge_slave_1: left promiscuous mode [ 350.448324][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.465688][ T3011] bridge_slave_0: left allmulticast mode [ 350.471375][ T3011] bridge_slave_0: left promiscuous mode [ 350.496277][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.556378][ T3011] bridge_slave_1: left allmulticast mode [ 350.564772][ T3011] bridge_slave_1: left promiscuous mode [ 350.570565][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.581256][ T3011] bridge_slave_0: left allmulticast mode [ 350.599515][ T3011] bridge_slave_0: left promiscuous mode [ 350.612403][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.472287][ T5234] Bluetooth: hci1: command tx timeout [ 351.483048][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.495938][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.507662][ T3011] bond0 (unregistering): Released all slaves [ 351.646369][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.659122][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.670343][ T3011] bond0 (unregistering): Released all slaves [ 352.173602][T12762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.200574][T12762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.304028][T12762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.364402][T12762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.389032][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1937'. [ 352.513847][ T5234] Bluetooth: hci3: command tx timeout [ 352.719352][ T3011] hsr_slave_0: left promiscuous mode [ 352.726713][ T3011] hsr_slave_1: left promiscuous mode [ 352.742741][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.759308][T12945] No such timeout policy "syz0" [ 352.762131][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.772988][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.780418][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.797679][ T3011] hsr_slave_0: left promiscuous mode [ 352.803958][ T3011] hsr_slave_1: left promiscuous mode [ 352.810084][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.817670][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.827702][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.835292][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.877562][ T3011] veth1_macvtap: left promiscuous mode [ 352.883613][ T3011] veth0_macvtap: left promiscuous mode [ 352.889359][ T3011] veth1_vlan: left promiscuous mode [ 352.895109][ T3011] veth0_vlan: left promiscuous mode [ 352.901605][ T3011] veth1_macvtap: left promiscuous mode [ 352.907551][ T3011] veth0_macvtap: left promiscuous mode [ 352.913525][ T3011] veth1_vlan: left promiscuous mode [ 352.918884][ T3011] veth0_vlan: left promiscuous mode [ 353.636571][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 353.685834][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 354.541316][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 354.588482][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 355.128636][T12949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 355.171495][T12949] gretap2: entered promiscuous mode [ 355.177530][T12949] gretap2: entered allmulticast mode [ 355.277685][T12762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.306102][T12951] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 355.340032][T12951] bond5: entered promiscuous mode [ 355.401453][T12951] ip_vti0: entered promiscuous mode [ 355.466189][T12762] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.473622][T12956] netlink: 'syz.2.1942': attribute type 5 has an invalid length. [ 355.525149][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.532361][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.547086][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.554299][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.842894][T12790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.897828][T12790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.920054][T12790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.982239][T12790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.168988][T12775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.233150][T12775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.246141][T12775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.263476][T12971] tc_dump_action: action bad kind [ 356.290044][T12775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.353598][T12971] mac80211_hwsim hwsim9 syzkaller0: renamed from wlan1 (while UP) [ 356.380814][T12762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.533349][T12979] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1947'. [ 356.689625][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.768423][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.791677][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.812186][T12986] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 356.884360][T12989] netlink: 'syz.2.1948': attribute type 6 has an invalid length. [ 356.924083][T12986] netlink: 'syz.1.1949': attribute type 11 has an invalid length. [ 356.942424][T12991] macsec2: entered promiscuous mode [ 356.947688][T12991] bond6: entered promiscuous mode [ 356.962312][T12991] macsec2: entered allmulticast mode [ 356.967698][T12991] bond6: entered allmulticast mode [ 357.042754][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.049938][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.071919][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.079126][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.148776][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.203422][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.210634][ T941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.277784][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.284990][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.431717][T12790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.473606][T12790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.527832][T12762] veth0_vlan: entered promiscuous mode [ 357.567990][T13007] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 357.596782][T13007] bond7: entered promiscuous mode [ 357.684323][T12762] veth1_vlan: entered promiscuous mode [ 357.904526][T12762] veth0_macvtap: entered promiscuous mode [ 357.948968][T12762] veth1_macvtap: entered promiscuous mode [ 358.027570][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.063072][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.083410][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.106259][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.117253][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.130298][T12762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.181804][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.193634][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.207544][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.218452][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.228721][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.252326][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.284953][T12762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.308132][T12762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.323724][T12762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.357935][T12762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.367474][ T6723] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 358.377566][T12762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.394932][T12762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.415979][T12762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.458659][T12775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.594389][T12790] veth0_vlan: entered promiscuous mode [ 358.665508][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.692243][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.705213][T12790] veth1_vlan: entered promiscuous mode [ 358.788653][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.809138][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.892594][T12775] veth0_vlan: entered promiscuous mode [ 358.905407][T12790] veth0_macvtap: entered promiscuous mode [ 358.950365][T12775] veth1_vlan: entered promiscuous mode [ 358.986627][T12790] veth1_macvtap: entered promiscuous mode [ 359.254673][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.255196][T13041] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1957'. [ 359.282843][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.296475][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.307774][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.319177][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.330010][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.353389][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.377343][T13033] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1957'. [ 359.418743][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.430659][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.442455][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.472813][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.492082][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.512083][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.527417][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.538291][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.549044][T12790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.567987][T12790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.581785][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.603272][T12775] veth0_macvtap: entered promiscuous mode [ 359.679361][ T6710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.749314][T12790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.770333][T12790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.779380][T12790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.788500][T12790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.809121][T12775] veth1_macvtap: entered promiscuous mode [ 359.855740][ T6710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.934333][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.956991][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.970039][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.980998][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.991027][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.001672][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.011715][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.022930][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.036858][T12775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.048074][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.066309][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.076418][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.087314][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.097306][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.108905][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.118791][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.129466][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.139553][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.151330][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.161234][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.171764][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.184255][T12775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.219930][ T6710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.268621][T12775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.277459][T12775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.287311][T12775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.296247][T12775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.329259][ T6710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.353643][ T5243] Bluetooth: hci4: command 0x0405 tx timeout [ 360.365757][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.377127][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.441893][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.492122][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.607549][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.626075][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.701440][ T6710] bridge_slave_1: left allmulticast mode [ 360.708709][ T6710] bridge_slave_1: left promiscuous mode [ 360.716403][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.727381][ T6710] bridge_slave_0: left allmulticast mode [ 360.733762][ T6710] bridge_slave_0: left promiscuous mode [ 360.739469][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.972421][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 361.392448][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.422694][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.431094][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.448806][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.474076][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.481665][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.661968][ T6710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.677580][ T6710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.689072][ T6710] bond0 (unregistering): Released all slaves [ 361.721957][T13064] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1961'. [ 361.817966][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.842827][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.905353][T13065] lo speed is unknown, defaulting to 1000 [ 362.134928][ T6710] hsr_slave_0: left promiscuous mode [ 362.141013][ T6710] hsr_slave_1: left promiscuous mode [ 362.151063][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.158553][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.169294][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.177653][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.205572][ T6710] veth1_macvtap: left promiscuous mode [ 362.211189][ T6710] veth0_macvtap: left promiscuous mode [ 362.217150][ T6710] veth1_vlan: left promiscuous mode [ 362.222596][ T6710] veth0_vlan: left promiscuous mode [ 363.055311][ T6710] team0 (unregistering): Port device team_slave_1 removed [ 363.116780][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.127400][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.137594][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.159695][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.167825][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 363.175482][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.177810][ T6710] team0 (unregistering): Port device team_slave_0 removed [ 363.559960][ T5243] Bluetooth: hci0: command tx timeout [ 363.737583][T13080] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 363.772745][T13080] bond8: entered promiscuous mode [ 363.882677][T13082] lo speed is unknown, defaulting to 1000 [ 364.079740][T13065] chnl_net:caif_netlink_parms(): no params data found [ 364.221117][T13082] chnl_net:caif_netlink_parms(): no params data found [ 364.306435][T13065] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.316226][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.324885][T13065] bridge_slave_0: entered allmulticast mode [ 364.334233][T13065] bridge_slave_0: entered promiscuous mode [ 364.349861][T13065] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.357405][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.364926][T13065] bridge_slave_1: entered allmulticast mode [ 364.372056][T13065] bridge_slave_1: entered promiscuous mode [ 364.435469][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.442936][T13082] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.450136][T13082] bridge_slave_0: entered allmulticast mode [ 364.458038][T13082] bridge_slave_0: entered promiscuous mode [ 364.521541][ T6719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.545516][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.558487][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.566447][T13082] bridge_slave_1: entered allmulticast mode [ 364.586494][T13082] bridge_slave_1: entered promiscuous mode [ 364.667662][T13065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.686683][T13065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.745960][ T6719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.883930][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.065819][ T6719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.115119][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.128760][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.142981][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.151854][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.168334][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.182664][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.193284][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.219874][T13065] team0: Port device team_slave_0 added [ 365.226179][ T5234] Bluetooth: hci1: command tx timeout [ 365.241203][T13065] team0: Port device team_slave_1 added [ 365.273817][ T6719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.330269][T13082] team0: Port device team_slave_0 added [ 365.356575][T13101] lo speed is unknown, defaulting to 1000 [ 365.406541][T13082] team0: Port device team_slave_1 added [ 365.450939][T13065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.459065][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.490121][T13065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.624440][ T5234] Bluetooth: hci0: command tx timeout [ 365.644460][T13065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.655007][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.694295][T13065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.710781][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.718228][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.744728][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.758883][T13109] lo speed is unknown, defaulting to 1000 [ 365.788263][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.814941][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.863874][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.289582][T13082] hsr_slave_0: entered promiscuous mode [ 366.298091][T13082] hsr_slave_1: entered promiscuous mode [ 366.305405][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 366.324175][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 366.338117][T13065] hsr_slave_0: entered promiscuous mode [ 366.364364][T13065] hsr_slave_1: entered promiscuous mode [ 366.371252][T13065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.381725][T13065] Cannot create hsr debugfs directory [ 366.531945][ T6719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.573853][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 366.787130][ T6719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.799086][T13140] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1972'. [ 366.825156][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 366.862701][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1972'. [ 366.971422][ T6719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.104371][ T6719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.233120][ T5234] Bluetooth: hci3: command tx timeout [ 367.312281][ T5234] Bluetooth: hci1: command tx timeout [ 367.567662][T13109] chnl_net:caif_netlink_parms(): no params data found [ 367.621609][ T6719] bridge_slave_1: left allmulticast mode [ 367.634450][ T6719] bridge_slave_1: left promiscuous mode [ 367.647608][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.666901][ T6719] bridge_slave_0: left allmulticast mode [ 367.679303][ T6719] bridge_slave_0: left promiscuous mode [ 367.692432][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.713421][ T5234] Bluetooth: hci0: command tx timeout [ 367.723556][ T6719] bridge_slave_1: left allmulticast mode [ 367.752416][ T6719] bridge_slave_1: left promiscuous mode [ 367.758482][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.790913][ T6719] bridge_slave_0: left allmulticast mode [ 367.811298][ T6719] bridge_slave_0: left promiscuous mode [ 367.817626][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.740853][ T6719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.765014][ T6719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.777770][ T6719] bond0 (unregistering): Released all slaves [ 368.968180][ T6719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.993271][ T6719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.021020][ T6719] bond0 (unregistering): Released all slaves [ 369.116315][T13184] lo speed is unknown, defaulting to 1000 [ 369.312196][ T5234] Bluetooth: hci3: command tx timeout [ 369.371402][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.382498][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.389955][T13109] bridge_slave_0: entered allmulticast mode [ 369.397890][ T5234] Bluetooth: hci1: command tx timeout [ 369.406384][T13109] bridge_slave_0: entered promiscuous mode [ 369.456246][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.464197][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.471696][T13109] bridge_slave_1: entered allmulticast mode [ 369.479948][T13109] bridge_slave_1: entered promiscuous mode [ 369.605549][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.633469][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.784549][ T5234] Bluetooth: hci0: command tx timeout [ 369.850889][T13109] team0: Port device team_slave_0 added [ 369.939248][T13109] team0: Port device team_slave_1 added [ 369.968212][T13201] Bluetooth: MGMT ver 1.23 [ 370.047775][ T6719] hsr_slave_0: left promiscuous mode [ 370.065304][ T6719] hsr_slave_1: left promiscuous mode [ 370.080302][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.088089][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.096698][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.104561][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.118463][ T6719] hsr_slave_0: left promiscuous mode [ 370.125915][ T6719] hsr_slave_1: left promiscuous mode [ 370.132444][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.140233][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.149360][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.157211][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.202813][ T6719] veth1_macvtap: left promiscuous mode [ 370.208829][ T6719] veth0_macvtap: left promiscuous mode [ 370.214577][ T6719] veth1_vlan: left promiscuous mode [ 370.220059][ T6719] veth0_vlan: left promiscuous mode [ 370.227172][ T6719] veth1_macvtap: left promiscuous mode [ 370.233879][ T6719] veth0_macvtap: left promiscuous mode [ 370.239516][ T6719] veth1_vlan: left promiscuous mode [ 370.245111][ T6719] veth0_vlan: left promiscuous mode [ 370.960539][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 371.006451][ T6719] team0 (unregistering): Port device team_slave_0 removed [ 371.394016][ T5234] Bluetooth: hci3: command tx timeout [ 371.467049][ T5234] Bluetooth: hci1: command tx timeout [ 371.921344][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 371.970872][ T6719] team0 (unregistering): Port device team_slave_0 removed [ 372.471934][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.488728][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.515565][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.529794][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.537062][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.563408][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.727886][T13109] hsr_slave_0: entered promiscuous mode [ 372.745749][T13109] hsr_slave_1: entered promiscuous mode [ 372.755947][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.763746][T13109] Cannot create hsr debugfs directory [ 372.897303][T13065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.934451][T13065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.965688][T13065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.064426][T13065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.281083][T13082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.339125][T13082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.406772][T13082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.463330][ T5234] Bluetooth: hci3: command tx timeout [ 373.493572][T13082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.566846][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 373.580686][T13232] SET target dimension over the limit! [ 373.637221][T13065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.744031][T13065] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.763488][T13240] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1995'. [ 373.809472][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.816738][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.870144][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.877337][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.194843][T13109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.234499][T13082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.243075][T13109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.266611][T13109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.288137][T13109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.376746][T13082] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.425872][T13256] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1998'. [ 374.466204][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.473390][ T941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.555130][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.562315][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.680028][T13065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.819275][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.828955][T13266] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2000'. [ 374.874305][T13266] No such timeout policy "syz1" [ 374.892195][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.931927][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.939267][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.990087][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.997407][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.176156][T13109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.316801][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.479735][T13065] veth0_vlan: entered promiscuous mode [ 375.488112][T13286] netlink: 'syz.1.2003': attribute type 29 has an invalid length. [ 375.521296][T13286] netlink: 'syz.1.2003': attribute type 29 has an invalid length. [ 375.558237][T13065] veth1_vlan: entered promiscuous mode [ 375.590041][T13082] veth0_vlan: entered promiscuous mode [ 375.628265][T13065] veth0_macvtap: entered promiscuous mode [ 375.687564][T13082] veth1_vlan: entered promiscuous mode [ 375.701478][T13065] veth1_macvtap: entered promiscuous mode [ 375.748790][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.827638][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.838516][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.851384][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.863792][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.876026][T13065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.957205][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.986679][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.021142][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.034983][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.044887][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.055452][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.065723][T13065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.076283][T13065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.090858][T13065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.105896][T13082] veth0_macvtap: entered promiscuous mode [ 376.146157][T13065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.169321][T13065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.192056][T13065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.200812][T13065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.226147][T13082] veth1_macvtap: entered promiscuous mode [ 376.285316][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.296243][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.322252][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.339534][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.351121][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.363947][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.379211][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.414910][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.434104][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.446907][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.461711][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.471985][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.485035][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.501346][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.513771][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.528439][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.538981][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.551381][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.607755][T13082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.622108][T13082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.630992][T13082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.640395][T13082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.743509][T13109] veth0_vlan: entered promiscuous mode [ 376.771783][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.800341][T13109] veth1_vlan: entered promiscuous mode [ 376.800788][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.878922][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.895987][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.947988][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.957996][T13109] veth0_macvtap: entered promiscuous mode [ 376.972317][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.029228][T13109] veth1_macvtap: entered promiscuous mode [ 377.140235][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.149381][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.215624][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.227798][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.253157][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.264098][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.274494][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.275602][T13328] No such timeout policy "syz0" [ 377.287620][T13329] No such timeout policy "syz0" [ 377.295392][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.306615][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.317356][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.330315][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.354610][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.374199][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.385611][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.398193][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.408532][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.420348][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.430312][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.442171][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.452649][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.464917][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.474937][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.485658][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.503799][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.537607][T13109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.574999][T13109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.584260][T13109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.593194][T13109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.760225][T13336] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 377.805128][T13333] lo speed is unknown, defaulting to 1000 [ 377.896292][T13339] tipc: Enabling of bearer rejected, failed to enable media [ 377.971950][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.980030][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.137253][ T6711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.294319][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.315745][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.367357][ T6711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.796105][ T6711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.944982][ T6711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.077004][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.086689][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.095495][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.112314][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.121492][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 379.129497][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.166652][ T6711] bridge_slave_1: left allmulticast mode [ 379.172492][ T6711] bridge_slave_1: left promiscuous mode [ 379.179661][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.191180][ T6711] bridge_slave_0: left allmulticast mode [ 379.201837][ T6711] bridge_slave_0: left promiscuous mode [ 379.208036][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.898361][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.912833][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.921506][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.936864][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.946416][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.957252][ T6711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.966116][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.977675][ T6711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.991450][ T6711] bond0 (unregistering): Released all slaves [ 380.110519][T13344] lo speed is unknown, defaulting to 1000 [ 380.159615][T13355] lo speed is unknown, defaulting to 1000 [ 380.359175][ T6711] hsr_slave_0: left promiscuous mode [ 380.367730][ T6711] hsr_slave_1: left promiscuous mode [ 380.373900][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.381293][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.389818][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.398139][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.427068][ T6711] veth1_macvtap: left promiscuous mode [ 380.433061][ T6711] veth0_macvtap: left promiscuous mode [ 380.438675][ T6711] veth1_vlan: left promiscuous mode [ 380.444258][ T6711] veth0_vlan: left promiscuous mode [ 381.046896][ T6711] team0 (unregistering): Port device team_slave_1 removed [ 381.073833][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 381.153462][ T5243] Bluetooth: hci0: command tx timeout [ 381.160599][ T6711] team0 (unregistering): Port device team_slave_0 removed [ 381.401436][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.409916][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.422880][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.449777][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.459609][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 381.469259][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.900610][T13363] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2019'. [ 382.022587][ T5234] Bluetooth: hci1: command tx timeout [ 382.077470][T13371] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2021'. [ 382.120068][T13372] netlink: 'syz.1.2022': attribute type 6 has an invalid length. [ 382.128508][T13372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2022'. [ 382.191508][T13366] lo speed is unknown, defaulting to 1000 [ 382.309151][T13377] netlink: 'syz.1.2023': attribute type 1 has an invalid length. [ 382.341794][T13344] chnl_net:caif_netlink_parms(): no params data found [ 382.354218][T13377] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2023'. [ 382.384790][T13377] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 382.411205][T13355] chnl_net:caif_netlink_parms(): no params data found [ 382.442225][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 382.512417][T13382] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 382.512765][T13383] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 382.520383][T13382] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2024'. [ 382.538895][T13383] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2024'. [ 382.754462][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.772158][T13344] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.803143][T13344] bridge_slave_0: entered allmulticast mode [ 382.810880][T13344] bridge_slave_0: entered promiscuous mode [ 382.836946][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.846666][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.854118][T13355] bridge_slave_0: entered allmulticast mode [ 382.862789][T13355] bridge_slave_0: entered promiscuous mode [ 382.871738][T13344] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.879756][T13344] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.892497][T13344] bridge_slave_1: entered allmulticast mode [ 382.900108][T13344] bridge_slave_1: entered promiscuous mode [ 382.932652][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.939866][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.957574][T13355] bridge_slave_1: entered allmulticast mode [ 382.973807][T13355] bridge_slave_1: entered promiscuous mode [ 383.060816][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.133202][T13397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2025'. [ 383.165522][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.222673][ T5243] Bluetooth: hci0: command tx timeout [ 383.272353][T13344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.311709][T13355] team0: Port device team_slave_0 added [ 383.342541][T13409] Bluetooth: MGMT ver 1.23 [ 383.397459][ T6711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.496110][T13344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.529404][T13355] team0: Port device team_slave_1 added [ 383.542243][ T5234] Bluetooth: hci3: command tx timeout [ 383.558265][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 383.633468][ T6711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.732861][T13344] team0: Port device team_slave_0 added [ 383.745588][T13344] team0: Port device team_slave_1 added [ 383.753325][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.760553][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.790050][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.868140][ T6711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.901761][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.909339][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.940767][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.102958][ T5234] Bluetooth: hci1: command tx timeout [ 384.176511][ T6711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.469209][T13355] hsr_slave_0: entered promiscuous mode [ 384.506554][T13355] hsr_slave_1: entered promiscuous mode [ 384.514389][T13438] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 384.525178][T13355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.544509][T13355] Cannot create hsr debugfs directory [ 384.602497][T13344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.613506][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.639786][T13344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.654590][T13344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.661942][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.688455][T13344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.701214][T13366] chnl_net:caif_netlink_parms(): no params data found [ 385.169694][T13344] hsr_slave_0: entered promiscuous mode [ 385.181310][T13344] hsr_slave_1: entered promiscuous mode [ 385.232369][T13344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.242727][T13344] Cannot create hsr debugfs directory [ 385.302644][ T5234] Bluetooth: hci0: command tx timeout [ 385.415556][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.438108][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.446070][T13366] bridge_slave_0: entered allmulticast mode [ 385.454549][T13366] bridge_slave_0: entered promiscuous mode [ 385.486890][T13459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.619449][T13366] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.628530][ T5234] Bluetooth: hci3: command tx timeout [ 385.647316][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.673716][T13366] bridge_slave_1: entered allmulticast mode [ 385.680813][T13366] bridge_slave_1: entered promiscuous mode [ 385.788370][ T6711] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.865154][T13366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.879368][T13366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.989538][ T6711] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.087816][T13478] __nla_validate_parse: 4 callbacks suppressed [ 386.087839][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2044'. [ 386.161727][T13366] team0: Port device team_slave_0 added [ 386.182887][ T5234] Bluetooth: hci1: command tx timeout [ 386.207395][ T6711] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.248037][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 386.290377][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 386.314246][T13366] team0: Port device team_slave_1 added [ 386.385027][ T6711] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.464804][T13366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.480312][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.529287][T13366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.563109][T13493] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2046'. [ 386.582600][T13366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.589620][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.617231][T13366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.770860][T13366] hsr_slave_0: entered promiscuous mode [ 386.794967][T13366] hsr_slave_1: entered promiscuous mode [ 386.802674][T13366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.810524][T13366] Cannot create hsr debugfs directory [ 386.841420][ T6711] bridge_slave_1: left allmulticast mode [ 386.871793][ T6711] bridge_slave_1: left promiscuous mode [ 386.878739][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.912914][ T6711] bridge_slave_0: left allmulticast mode [ 386.918611][ T6711] bridge_slave_0: left promiscuous mode [ 386.927101][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.952392][ T6711] bridge_slave_1: left allmulticast mode [ 386.958080][ T6711] bridge_slave_1: left promiscuous mode [ 386.968213][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.978561][ T6711] bridge_slave_0: left allmulticast mode [ 386.985832][ T6711] bridge_slave_0: left promiscuous mode [ 386.991640][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.382594][ T5234] Bluetooth: hci0: command tx timeout [ 387.702383][ T5234] Bluetooth: hci3: command tx timeout [ 387.838214][ T6711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.852671][ T6711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.875307][ T6711] bond0 (unregistering): Released all slaves [ 388.006183][ T6711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.019227][ T6711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.037192][ T6711] bond0 (unregistering): Released all slaves [ 388.097955][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 388.123107][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 388.262632][ T5234] Bluetooth: hci1: command tx timeout [ 388.660788][T13536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2054'. [ 389.031876][T13543] tipc: Cannot configure node identity twice [ 389.451565][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2060'. [ 389.458111][ T6711] hsr_slave_0: left promiscuous mode [ 389.473242][ T6711] hsr_slave_1: left promiscuous mode [ 389.489591][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.498985][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.543383][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.572221][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.606772][ T6711] hsr_slave_0: left promiscuous mode [ 389.633430][ T6711] hsr_slave_1: left promiscuous mode [ 389.643190][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.663214][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.676190][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.692385][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.782902][ T5234] Bluetooth: hci3: command tx timeout [ 389.804795][ T6711] veth1_macvtap: left promiscuous mode [ 389.810391][ T6711] veth0_macvtap: left promiscuous mode [ 389.835512][ T6711] veth1_vlan: left promiscuous mode [ 389.850540][ T6711] veth0_vlan: left promiscuous mode [ 389.866787][ T6711] veth1_macvtap: left promiscuous mode [ 389.884394][ T6711] veth0_macvtap: left promiscuous mode [ 389.896420][ T6711] veth1_vlan: left promiscuous mode [ 389.913268][ T6711] veth0_vlan: left promiscuous mode [ 390.704592][ T6711] team0 (unregistering): Port device team_slave_1 removed [ 390.757497][ T6711] team0 (unregistering): Port device team_slave_0 removed [ 391.740818][ T6711] team0 (unregistering): Port device team_slave_1 removed [ 391.801106][ T6711] team0 (unregistering): Port device team_slave_0 removed [ 392.333243][T13570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2062'. [ 392.662139][T13355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.737606][T13355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.828998][T13355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.845363][T13355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.138032][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2066'. [ 393.206269][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.325249][T13344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.362849][T13344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.431304][T13344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.447176][T13344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.475076][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.644864][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.652074][ T941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.665671][ T941] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.672848][ T941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.863024][T13366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.913735][T13366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.947096][T13366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.971434][T13366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.033937][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2073'. [ 394.147630][T13344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.260633][T13344] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.286875][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.294136][T13623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.342946][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.350180][T13623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.473090][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.493491][T13366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.534243][T13636] bond0: (slave wlan1): Releasing backup interface [ 394.541504][T13636] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 394.618686][T13366] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.668596][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.675894][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.702654][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'. [ 394.711675][T13640] netlink: 'syz.2.2075': attribute type 25 has an invalid length. [ 394.788327][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.795659][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.851739][T13355] veth0_vlan: entered promiscuous mode [ 394.943065][T13355] veth1_vlan: entered promiscuous mode [ 395.028059][T13344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.144939][T13355] veth0_macvtap: entered promiscuous mode [ 395.202704][T13355] veth1_macvtap: entered promiscuous mode [ 395.265522][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.293058][T13653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2077'. [ 395.312521][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.332553][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.349839][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.363537][T13656] x_tables: duplicate underflow at hook 3 [ 395.371321][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.397520][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.452056][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.462833][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.473649][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.483693][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.495063][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.506446][T13355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.518888][T13355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.536501][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.580205][T13355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.618822][T13355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.642179][T13355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.672535][T13355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.877237][T13668] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 395.951362][T13666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2080'. [ 395.962456][T13666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.984457][T13366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.073712][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.081544][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.126414][T13344] veth0_vlan: entered promiscuous mode [ 396.187362][T13344] veth1_vlan: entered promiscuous mode [ 396.221811][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.240572][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.276108][T13366] veth0_vlan: entered promiscuous mode [ 396.360792][T13366] veth1_vlan: entered promiscuous mode [ 396.420675][T13344] veth0_macvtap: entered promiscuous mode [ 396.438795][T13344] veth1_macvtap: entered promiscuous mode [ 396.557480][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.581487][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.612126][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.632308][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.645009][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.657445][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.681863][T13344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.706787][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.730092][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.744117][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.767859][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.778048][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.789009][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.800300][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.810863][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.821500][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.834394][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.846157][T13344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.854955][T13688] tipc: Cannot configure node identity twice [ 396.933873][T13344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.962290][T13344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.981260][T13344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.002294][T13344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.069634][T13366] veth0_macvtap: entered promiscuous mode [ 397.108768][T13366] veth1_macvtap: entered promiscuous mode [ 397.130830][T13693] bridge_slave_0: default FDB implementation only supports local addresses [ 397.154045][T13695] bridge_slave_0: default FDB implementation only supports local addresses [ 397.280274][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.342302][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.372907][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.387437][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.410510][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.430777][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.440681][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.451750][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.465438][T13366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.626223][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.662212][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.751116][ T6723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.777074][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.788327][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.798427][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.809173][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.820667][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.843042][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.861897][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.879520][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.889490][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.902905][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.912872][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.926121][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.940714][T13366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.955636][T13366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.965582][T13366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.974475][T13366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.983969][T13366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.046066][ T6723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.067283][ T6703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.080995][ T6703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.120466][ T6723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.302318][ T6703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.310268][ T6703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.341506][ T6723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.388321][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.408826][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.785098][ T6723] bridge_slave_1: left allmulticast mode [ 398.790814][ T6723] bridge_slave_1: left promiscuous mode [ 398.796751][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.813475][ T6723] bridge_slave_0: left allmulticast mode [ 398.819264][ T6723] bridge_slave_0: left promiscuous mode [ 398.842980][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.943096][T13721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2090'. [ 399.274062][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.291537][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.299938][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.310508][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.319363][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 399.328020][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.745853][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.756544][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.762679][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.771799][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.788018][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.788761][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.805896][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 399.808664][ T6723] bond0 (unregistering): Released all slaves [ 399.819604][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.923602][T13723] lo speed is unknown, defaulting to 1000 [ 400.066755][T13729] lo speed is unknown, defaulting to 1000 [ 400.184100][ T6723] hsr_slave_0: left promiscuous mode [ 400.190105][ T6723] hsr_slave_1: left promiscuous mode [ 400.207521][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.218963][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.228595][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.236263][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.261898][ T6723] veth1_macvtap: left promiscuous mode [ 400.269873][ T6723] veth0_macvtap: left promiscuous mode [ 400.276225][ T6723] veth1_vlan: left promiscuous mode [ 400.281566][ T6723] veth0_vlan: left promiscuous mode [ 400.856417][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 400.901390][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 401.392351][ T5243] Bluetooth: hci0: command tx timeout [ 401.578004][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.595121][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.611924][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.621415][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.637048][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.653707][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.865932][ T5243] Bluetooth: hci1: command tx timeout [ 401.973032][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 402.103635][T13757] lo speed is unknown, defaulting to 1000 [ 402.526225][T13723] chnl_net:caif_netlink_parms(): no params data found [ 402.622379][T13784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2103'. [ 402.805947][T13729] chnl_net:caif_netlink_parms(): no params data found [ 402.993557][T13794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2105'. [ 403.135288][ T6723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.281524][T13723] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.290211][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.297699][T13723] bridge_slave_0: entered allmulticast mode [ 403.305511][T13723] bridge_slave_0: entered promiscuous mode [ 403.367730][ T6723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.394102][T13757] chnl_net:caif_netlink_parms(): no params data found [ 403.462516][ T5243] Bluetooth: hci0: command tx timeout [ 403.463553][ T6723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.499979][T13723] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.508263][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.515760][T13723] bridge_slave_1: entered allmulticast mode [ 403.528635][T13723] bridge_slave_1: entered promiscuous mode [ 403.650978][ T6723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.672965][T13812] netlink: 'syz.1.2104': attribute type 4 has an invalid length. [ 403.680933][T13812] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2104'. [ 403.703815][ T5243] Bluetooth: hci3: command tx timeout [ 403.764637][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.783386][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.798927][T13729] bridge_slave_0: entered allmulticast mode [ 403.818343][T13729] bridge_slave_0: entered promiscuous mode [ 403.835491][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.858006][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.879848][T13729] bridge_slave_1: entered allmulticast mode [ 403.891723][T13729] bridge_slave_1: entered promiscuous mode [ 403.913948][T13723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.942364][ T5243] Bluetooth: hci1: command tx timeout [ 404.012525][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.024707][T13723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.097418][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.142919][T13825] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 404.175341][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 404.184971][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 404.242385][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.249795][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.257339][T13757] bridge_slave_0: entered allmulticast mode [ 404.275815][T13757] bridge_slave_0: entered promiscuous mode [ 404.326440][T13729] team0: Port device team_slave_0 added [ 404.351759][T13723] team0: Port device team_slave_0 added [ 404.390699][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.408876][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.422725][T13757] bridge_slave_1: entered allmulticast mode [ 404.430315][T13757] bridge_slave_1: entered promiscuous mode [ 404.458171][T13729] team0: Port device team_slave_1 added [ 404.497407][T13723] team0: Port device team_slave_1 added [ 404.532643][T13842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2114'. [ 404.638078][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.645512][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.672481][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.687446][T13723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.694937][T13723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.721348][T13723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.735114][T13723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.742426][T13723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.768717][T13723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.837576][ T6723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.867430][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.896059][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.905240][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.938835][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.965779][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.023647][ T6723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.181172][ T6723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.211716][T13757] team0: Port device team_slave_0 added [ 405.226194][T13723] hsr_slave_0: entered promiscuous mode [ 405.236006][T13723] hsr_slave_1: entered promiscuous mode [ 405.270359][T13848] IPVS: Error connecting to the multicast addr [ 405.374411][T13729] hsr_slave_0: entered promiscuous mode [ 405.394249][T13729] hsr_slave_1: entered promiscuous mode [ 405.415303][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.431958][T13729] Cannot create hsr debugfs directory [ 405.441498][T13757] team0: Port device team_slave_1 added [ 405.486220][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 405.510539][ T6723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.552289][ T5243] Bluetooth: hci0: command tx timeout [ 405.643030][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.650153][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.683318][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.767000][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 405.782469][ T5243] Bluetooth: hci3: command tx timeout [ 405.790874][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.805691][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.850380][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.954840][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 406.023436][ T5243] Bluetooth: hci1: command tx timeout [ 406.133133][T13860] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2119'. [ 406.257289][T13757] hsr_slave_0: entered promiscuous mode [ 406.269673][T13757] hsr_slave_1: entered promiscuous mode [ 406.286427][T13757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.308455][T13757] Cannot create hsr debugfs directory [ 406.480829][ T6723] bridge_slave_1: left allmulticast mode [ 406.497166][ T6723] bridge_slave_1: left promiscuous mode [ 406.513973][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.533029][ T6723] bridge_slave_0: left allmulticast mode [ 406.538730][ T6723] bridge_slave_0: left promiscuous mode [ 406.555325][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.576842][ T6723] bridge_slave_1: left allmulticast mode [ 406.591344][ T6723] bridge_slave_1: left promiscuous mode [ 406.612322][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.624502][ T6723] bridge_slave_0: left allmulticast mode [ 406.630187][ T6723] bridge_slave_0: left promiscuous mode [ 406.642222][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.622751][ T5243] Bluetooth: hci0: command tx timeout [ 407.654068][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.670186][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.682471][ T6723] bond0 (unregistering): Released all slaves [ 407.832662][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.847523][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.860500][ T6723] bond0 (unregistering): Released all slaves [ 407.867318][ T5243] Bluetooth: hci3: command tx timeout [ 407.958196][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 408.074676][T13887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2125'. [ 408.102452][ T5243] Bluetooth: hci1: command tx timeout [ 408.733931][ T6723] hsr_slave_0: left promiscuous mode [ 408.740157][ T6723] hsr_slave_1: left promiscuous mode [ 408.747173][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.763125][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.779698][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.787396][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.807693][ T6723] hsr_slave_0: left promiscuous mode [ 408.819708][ T6723] hsr_slave_1: left promiscuous mode [ 408.853120][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.869140][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.877838][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.892439][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.972600][ T6723] veth1_macvtap: left promiscuous mode [ 408.978355][ T6723] veth0_macvtap: left promiscuous mode [ 408.984449][ T6723] veth1_vlan: left promiscuous mode [ 408.989808][ T6723] veth0_vlan: left promiscuous mode [ 408.996893][ T6723] veth1_macvtap: left promiscuous mode [ 409.002538][ T6723] veth0_macvtap: left promiscuous mode [ 409.008194][ T6723] veth1_vlan: left promiscuous mode [ 409.014718][ T6723] veth0_vlan: left promiscuous mode [ 409.872914][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 409.928323][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 409.945891][ T5243] Bluetooth: hci3: command tx timeout [ 410.822761][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 410.870559][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 411.361467][T13908] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 411.372438][T13908] mac80211_hwsim hwsim80 wlan0: left promiscuous mode [ 411.814696][T13723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.828810][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2137'. [ 411.847604][T13723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.914372][T13723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.937205][T13723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.191635][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 412.207483][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 412.387964][T13723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.503895][T13723] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.607431][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.614675][T13623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.645671][T13729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.669215][T13729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.706241][T13618] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.713451][T13618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.742109][T13729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.763376][T13729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.909241][T13757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.942484][T13757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.968418][T13723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.979921][T13723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.006563][T13757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.007363][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'. [ 413.029110][T13757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.434124][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.467937][T13729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.518332][T13987] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 413.565402][T13987] bond9: entered promiscuous mode [ 413.579173][T13723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.597714][T13987] bond9: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 413.611300][T13990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2150'. [ 413.631627][T13987] bond9: (slave ip_vti0): Error -95 calling set_mac_address [ 413.653085][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.697616][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.704819][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.718514][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.725765][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.748484][T13729] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.794216][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.801432][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.861262][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.868481][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.980819][T13999] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.2152'. [ 414.094071][T13729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.117791][T13729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.214557][T14006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2154'. [ 414.227118][T13723] veth0_vlan: entered promiscuous mode [ 414.244912][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 414.286403][T13723] veth1_vlan: entered promiscuous mode [ 414.395333][T13723] veth0_macvtap: entered promiscuous mode [ 414.427229][T13723] veth1_macvtap: entered promiscuous mode [ 414.518223][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.549725][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.570182][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.592059][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.604695][T13723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.620907][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.648124][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.671250][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.692577][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.710738][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.721319][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.732286][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.743544][T13723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.760294][T13723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.772661][T13723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.818617][T13729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.864996][T13723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.895146][T13723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.932364][T13723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.955368][T13723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.204646][T14039] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 415.237027][T14039] bond10: entered promiscuous mode [ 415.264656][T14043] bond10: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 415.289226][T14043] bond10: (slave ip_vti0): Error -95 calling set_mac_address [ 415.451121][T14052] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2163'. [ 415.456611][ T6703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.497462][T13757] veth0_vlan: entered promiscuous mode [ 415.513112][ T6703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.547834][T13757] veth1_vlan: entered promiscuous mode [ 415.649674][ T6703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.660118][ T6703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.686902][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 415.741373][T13729] veth0_vlan: entered promiscuous mode [ 415.779699][T13729] veth1_vlan: entered promiscuous mode [ 415.793714][T14059] netlink: 'syz.1.2166': attribute type 3 has an invalid length. [ 415.820171][T13757] veth0_macvtap: entered promiscuous mode [ 415.891965][T13757] veth1_macvtap: entered promiscuous mode [ 416.011205][T13729] veth0_macvtap: entered promiscuous mode [ 416.037134][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.050698][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.060822][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.071582][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.081898][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.092908][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.107642][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.118472][T13729] veth1_macvtap: entered promiscuous mode [ 416.157516][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.177474][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.202451][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.214095][T14066] netlink: 'syz.1.2169': attribute type 5 has an invalid length. [ 416.221980][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.232915][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.244472][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.260371][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.271711][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.282735][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.293670][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.305769][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.336595][T14066] : entered promiscuous mode [ 416.367999][T13757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.376982][T13757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.386230][T13757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.396425][T13757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.446523][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.468392][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.484636][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.503793][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.522165][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.546002][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.557058][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.571309][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.585972][T13729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.599775][T14074] bond_slave_0: entered promiscuous mode [ 416.605588][T14074] bond_slave_1: entered promiscuous mode [ 416.612469][T14074] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 416.623352][T14074] vlan5: entered promiscuous mode [ 416.628775][T14074] bond0: entered promiscuous mode [ 416.634595][T14074] netdevsim netdevsim1 : entered promiscuous mode [ 416.647674][T14074] bond0: left promiscuous mode [ 416.658277][T14074] netdevsim netdevsim1 : left promiscuous mode [ 416.667107][T14074] bond_slave_0: left promiscuous mode [ 416.672595][T14074] bond_slave_1: left promiscuous mode [ 416.678173][T14074] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 416.746542][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.774590][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.786442][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.813127][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.829472][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.845713][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.855771][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.869234][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.880310][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.892692][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.905301][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.916793][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.931036][T13729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.968547][T13729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.978643][T13729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.989217][T13729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.998162][T13729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.063734][T14082] __nla_validate_parse: 2 callbacks suppressed [ 417.063755][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2175'. [ 417.213375][ T6723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.368535][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.391396][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.425356][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.442336][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.451153][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.460119][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.515843][ T6723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.548451][ T6703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.562256][ T6703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.754647][ T6723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.855863][ T6723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.940652][ T6723] bridge_slave_1: left allmulticast mode [ 417.948922][ T6723] bridge_slave_1: left promiscuous mode [ 417.954904][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.968497][ T6723] bridge_slave_0: left allmulticast mode [ 417.975103][ T6723] bridge_slave_0: left promiscuous mode [ 417.980825][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.737026][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.764217][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.800419][ T6723] bond0 (unregistering): Released all slaves [ 418.822339][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.833688][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.842149][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.862375][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.873388][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 418.880953][T14089] lo speed is unknown, defaulting to 1000 [ 418.892581][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.183808][T14096] lo speed is unknown, defaulting to 1000 [ 419.331073][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.348399][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.359246][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.383727][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.394939][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 419.404386][ T6723] hsr_slave_0: left promiscuous mode [ 419.404440][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.417475][ T6723] hsr_slave_1: left promiscuous mode [ 419.425605][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.433588][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.444578][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.460878][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.494968][ T6723] veth1_macvtap: left promiscuous mode [ 419.500549][ T6723] veth0_macvtap: left promiscuous mode [ 419.506251][ T6723] veth1_vlan: left promiscuous mode [ 419.511526][ T6723] veth0_vlan: left promiscuous mode [ 420.103646][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 420.166104][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 420.885333][T14099] lo speed is unknown, defaulting to 1000 [ 420.989288][ T5243] Bluetooth: hci0: command tx timeout [ 421.012225][T14107] delete_channel: no stack [ 421.066366][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.077006][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.080511][T14107] Cannot find add_set index 0 as target [ 421.092681][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.114682][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.123692][T14107] netlink: 'syz.1.2179': attribute type 298 has an invalid length. [ 421.132834][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 421.142916][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.362748][T14108] lo speed is unknown, defaulting to 1000 [ 421.368842][T14096] chnl_net:caif_netlink_parms(): no params data found [ 421.461832][T14118] Bluetooth: MGMT ver 1.23 [ 421.468967][ T5243] Bluetooth: hci1: command tx timeout [ 421.695392][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 421.760664][T14131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2184'. [ 421.861473][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.869258][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.878152][T14096] bridge_slave_0: entered allmulticast mode [ 421.887746][T14096] bridge_slave_0: entered promiscuous mode [ 421.906667][T14099] chnl_net:caif_netlink_parms(): no params data found [ 421.939519][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.963670][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.970980][T14096] bridge_slave_1: entered allmulticast mode [ 421.990039][T14096] bridge_slave_1: entered promiscuous mode [ 422.014554][T14135] netlink: 'syz.2.2183': attribute type 31 has an invalid length. [ 422.097187][ T6723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.293411][ T6723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.322495][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.365236][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.508669][ T6723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.589097][T14155] ip6gretap0: entered promiscuous mode [ 422.600476][T14155] batadv_slave_0: entered promiscuous mode [ 422.614660][T14157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 422.629106][T14157] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2189'. [ 422.638171][T14157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 422.660942][T14157] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2189'. [ 422.689067][T14096] team0: Port device team_slave_0 added [ 422.732662][ T6723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.816784][T14096] team0: Port device team_slave_1 added [ 422.877458][T14099] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.895633][T14099] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.917124][T14099] bridge_slave_0: entered allmulticast mode [ 422.929732][T14099] bridge_slave_0: entered promiscuous mode [ 423.016684][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.024169][T14099] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.031800][T14099] bridge_slave_1: entered allmulticast mode [ 423.040122][T14099] bridge_slave_1: entered promiscuous mode [ 423.062249][ T5243] Bluetooth: hci0: command tx timeout [ 423.085420][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.093752][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.121599][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.134254][T14108] chnl_net:caif_netlink_parms(): no params data found [ 423.181531][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.188911][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.217913][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.229412][ T5243] Bluetooth: hci3: command tx timeout [ 423.264001][T14099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.326809][T14099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.448672][T14096] hsr_slave_0: entered promiscuous mode [ 423.455786][T14096] hsr_slave_1: entered promiscuous mode [ 423.462744][T14096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.470434][T14096] Cannot create hsr debugfs directory [ 423.535156][T14099] team0: Port device team_slave_0 added [ 423.543231][ T5243] Bluetooth: hci1: command tx timeout [ 423.604751][ T6723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.636299][T14180] tipc: Enabled bearer , priority 0 [ 423.661471][T14099] team0: Port device team_slave_1 added [ 423.670284][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 423.757535][T14178] syzkaller0: entered promiscuous mode [ 423.764239][T14178] syzkaller0: entered allmulticast mode [ 423.770452][T14178] tipc: Resetting bearer [ 423.830733][ T6723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.846251][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 423.862362][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2193'. [ 423.884577][T14177] tipc: Resetting bearer [ 424.729278][T13618] tipc: Node number set to 521078257 [ 425.142451][ T5243] Bluetooth: hci0: command tx timeout [ 425.312611][ T5243] Bluetooth: hci3: command tx timeout [ 425.633290][ T5243] Bluetooth: hci1: command tx timeout [ 425.906473][T14177] tipc: Disabling bearer [ 425.919327][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.927751][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.935273][T14108] bridge_slave_0: entered allmulticast mode [ 425.942711][T14108] bridge_slave_0: entered promiscuous mode [ 426.029980][ T6723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.047144][T14196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2195'. [ 426.085868][T14192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.110932][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.122698][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.130018][T14108] bridge_slave_1: entered allmulticast mode [ 426.138601][T14108] bridge_slave_1: entered promiscuous mode [ 426.148419][T14099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.155846][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.184891][T14099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.238902][ T6723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.351704][T14099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.368015][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.399707][T14099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.433939][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.498666][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 426.563018][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.619479][T14099] hsr_slave_0: entered promiscuous mode [ 426.627504][T14099] hsr_slave_1: entered promiscuous mode [ 426.652396][T14099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.660007][T14099] Cannot create hsr debugfs directory [ 426.829523][T14108] team0: Port device team_slave_0 added [ 426.951736][T14108] team0: Port device team_slave_1 added [ 426.958729][T14221] netlink: 'syz.2.2201': attribute type 32 has an invalid length. [ 426.970836][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 427.013495][T14221] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 427.233868][ T5243] Bluetooth: hci0: command tx timeout [ 427.251582][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.259948][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.286354][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.301966][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.310504][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.362866][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.383705][ T5243] Bluetooth: hci3: command tx timeout [ 427.512271][ T6723] bridge_slave_1: left allmulticast mode [ 427.521382][ T6723] bridge_slave_1: left promiscuous mode [ 427.541207][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.555502][ T6723] bridge_slave_0: left allmulticast mode [ 427.561192][ T6723] bridge_slave_0: left promiscuous mode [ 427.572309][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.586459][ T6723] bridge_slave_1: left allmulticast mode [ 427.602148][ T6723] bridge_slave_1: left promiscuous mode [ 427.607919][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.634406][ T6723] bridge_slave_0: left allmulticast mode [ 427.640101][ T6723] bridge_slave_0: left promiscuous mode [ 427.646118][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.712870][ T5243] Bluetooth: hci1: command tx timeout [ 428.277065][T14241] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 428.288385][T14241] __nla_validate_parse: 1 callbacks suppressed [ 428.288403][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 428.759022][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.771782][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.784359][ T6723] bond0 (unregistering): Released all slaves [ 428.921817][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.937930][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.954797][ T6723] bond0 (unregistering): Released all slaves [ 429.178638][T14108] hsr_slave_0: entered promiscuous mode [ 429.208120][T14108] hsr_slave_1: entered promiscuous mode [ 429.230711][T14108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.257778][T14108] Cannot create hsr debugfs directory [ 429.385152][T14253] tipc: Started in network mode [ 429.390157][T14253] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 429.400005][T14253] tipc: Enabled bearer , priority 10 [ 429.416979][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 429.435333][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2210'. [ 429.461315][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 429.479759][ T5243] Bluetooth: hci3: command tx timeout [ 429.545484][T14253] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 429.555117][T14253] bond0: (slave ): Releasing backup interface [ 429.570754][T14253] team0: Port device  added [ 429.841615][T14096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.855043][T14096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.898892][T14271] netlink: 'syz.1.2212': attribute type 29 has an invalid length. [ 429.979247][T14096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.999697][T14096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.062501][T14268] netlink: 'syz.1.2212': attribute type 29 has an invalid length. [ 430.172296][ T6723] hsr_slave_0: left promiscuous mode [ 430.180318][ T6723] hsr_slave_1: left promiscuous mode [ 430.198505][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.211357][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.220670][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.231489][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.250991][ T6723] hsr_slave_0: left promiscuous mode [ 430.257236][ T6723] hsr_slave_1: left promiscuous mode [ 430.266357][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.274042][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.282191][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.289729][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.338685][ T6723] veth1_macvtap: left promiscuous mode [ 430.344614][ T6723] veth0_macvtap: left promiscuous mode [ 430.350282][ T6723] veth1_vlan: left promiscuous mode [ 430.356764][ T6723] veth0_vlan: left promiscuous mode [ 430.363910][ T6723] veth1_macvtap: left promiscuous mode [ 430.369444][ T6723] veth0_macvtap: left promiscuous mode [ 430.376746][ T6723] veth1_vlan: left promiscuous mode [ 430.382229][ T6723] veth0_vlan: left promiscuous mode [ 430.412247][ T5284] tipc: Node number set to 10005162 [ 431.167521][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 431.218177][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 432.191933][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 432.237593][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 432.757201][T14279] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 432.768612][T14279] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 432.780353][T14282] [ 432.782727][T14282] ====================================================== [ 432.789930][T14282] WARNING: possible circular locking dependency detected [ 432.796962][T14282] 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 Not tainted [ 432.804088][T14282] ------------------------------------------------------ [ 432.811113][T14282] syz.2.2213/14282 is trying to acquire lock: [ 432.817184][T14282] ffff88807f1b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 432.826351][T14282] [ 432.826351][T14282] but task is already holding lock: [ 432.833711][T14282] ffff8880612a8d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 432.843387][T14282] [ 432.843387][T14282] which lock already depends on the new lock. [ 432.843387][T14282] [ 432.853792][T14282] [ 432.853792][T14282] the existing dependency chain (in reverse order) is: [ 432.862807][T14282] [ 432.862807][T14282] -> #1 (team->team_lock_key#3){+.+.}-{3:3}: [ 432.870995][T14282] lock_acquire+0x1ed/0x550 [ 432.876037][T14282] __mutex_lock+0x136/0xd70 [ 432.881074][T14282] team_port_change_check+0x51/0x1e0 [ 432.886887][T14282] team_device_event+0x161/0x5b0 [ 432.892356][T14282] notifier_call_chain+0x19f/0x3e0 [ 432.898014][T14282] dev_close_many+0x33c/0x4c0 [ 432.903219][T14282] unregister_netdevice_many_notify+0x50b/0x1c40 [ 432.910070][T14282] macvlan_device_event+0x7e0/0x870 [ 432.915799][T14282] notifier_call_chain+0x19f/0x3e0 [ 432.921441][T14282] unregister_netdevice_many_notify+0xd81/0x1c40 [ 432.928294][T14282] unregister_netdevice_queue+0x303/0x370 [ 432.934550][T14282] _cfg80211_unregister_wdev+0x162/0x560 [ 432.940720][T14282] ieee80211_if_remove+0x25d/0x3a0 [ 432.946372][T14282] ieee80211_del_iface+0x19/0x30 [ 432.951853][T14282] cfg80211_remove_virtual_intf+0x23f/0x410 [ 432.958291][T14282] genl_rcv_msg+0xb14/0xec0 [ 432.963325][T14282] netlink_rcv_skb+0x1e3/0x430 [ 432.968622][T14282] genl_rcv+0x28/0x40 [ 432.973127][T14282] netlink_unicast+0x7f0/0x990 [ 432.978419][T14282] netlink_sendmsg+0x8e4/0xcb0 [ 432.983717][T14282] __sock_sendmsg+0x221/0x270 [ 432.988920][T14282] ____sys_sendmsg+0x525/0x7d0 [ 432.994200][T14282] __sys_sendmsg+0x2b0/0x3a0 [ 432.999306][T14282] do_syscall_64+0xf3/0x230 [ 433.004335][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.010850][T14282] [ 433.010850][T14282] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 433.018590][T14282] validate_chain+0x18e0/0x5900 [ 433.023965][T14282] __lock_acquire+0x137a/0x2040 [ 433.029355][T14282] lock_acquire+0x1ed/0x550 [ 433.034383][T14282] __mutex_lock+0x136/0xd70 [ 433.039416][T14282] ieee80211_open+0xe7/0x200 [ 433.044535][T14282] __dev_open+0x2d3/0x450 [ 433.049401][T14282] dev_open+0xae/0x1b0 [ 433.054009][T14282] team_add_slave+0x9c8/0x2760 [ 433.059295][T14282] do_setlink+0xe70/0x41f0 [ 433.064238][T14282] rtnl_newlink+0x180d/0x20a0 [ 433.069435][T14282] rtnetlink_rcv_msg+0x73f/0xcf0 [ 433.074894][T14282] netlink_rcv_skb+0x1e3/0x430 [ 433.080181][T14282] netlink_unicast+0x7f0/0x990 [ 433.085463][T14282] netlink_sendmsg+0x8e4/0xcb0 [ 433.090748][T14282] __sock_sendmsg+0x221/0x270 [ 433.095949][T14282] ____sys_sendmsg+0x525/0x7d0 [ 433.101231][T14282] __sys_sendmsg+0x2b0/0x3a0 [ 433.106341][T14282] do_syscall_64+0xf3/0x230 [ 433.111370][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.117793][T14282] [ 433.117793][T14282] other info that might help us debug this: [ 433.117793][T14282] [ 433.128019][T14282] Possible unsafe locking scenario: [ 433.128019][T14282] [ 433.135478][T14282] CPU0 CPU1 [ 433.140846][T14282] ---- ---- [ 433.146214][T14282] lock(team->team_lock_key#3); [ 433.151168][T14282] lock(&rdev->wiphy.mtx); [ 433.158193][T14282] lock(team->team_lock_key#3); [ 433.165659][T14282] lock(&rdev->wiphy.mtx); [ 433.170170][T14282] [ 433.170170][T14282] *** DEADLOCK *** [ 433.170170][T14282] [ 433.178311][T14282] 2 locks held by syz.2.2213/14282: [ 433.183589][T14282] #0: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 433.193034][T14282] #1: ffff8880612a8d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 433.203139][T14282] [ 433.203139][T14282] stack backtrace: [ 433.209039][T14282] CPU: 1 UID: 0 PID: 14282 Comm: syz.2.2213 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 433.219798][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 433.229854][T14282] Call Trace: [ 433.233138][T14282] [ 433.236072][T14282] dump_stack_lvl+0x241/0x360 [ 433.240772][T14282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.245980][T14282] ? print_circular_bug+0x130/0x1a0 [ 433.251187][T14282] check_noncircular+0x36a/0x4a0 [ 433.256131][T14282] ? __pfx_check_noncircular+0x10/0x10 [ 433.261592][T14282] ? lockdep_lock+0x123/0x2b0 [ 433.266275][T14282] ? validate_chain+0x11e/0x5900 [ 433.271211][T14282] ? mark_lock+0x9a/0x350 [ 433.275549][T14282] ? _find_first_zero_bit+0xd3/0x100 [ 433.280843][T14282] validate_chain+0x18e0/0x5900 [ 433.285715][T14282] ? __pfx_validate_chain+0x10/0x10 [ 433.290921][T14282] ? mark_lock+0x9a/0x350 [ 433.295263][T14282] ? __pfx_validate_chain+0x10/0x10 [ 433.300461][T14282] ? __pfx_validate_chain+0x10/0x10 [ 433.305680][T14282] ? mark_lock+0x9a/0x350 [ 433.310022][T14282] ? __lock_acquire+0x137a/0x2040 [ 433.315058][T14282] ? mark_lock+0x9a/0x350 [ 433.319402][T14282] __lock_acquire+0x137a/0x2040 [ 433.324273][T14282] lock_acquire+0x1ed/0x550 [ 433.328785][T14282] ? ieee80211_open+0xe7/0x200 [ 433.333557][T14282] ? __pfx_lock_acquire+0x10/0x10 [ 433.338591][T14282] ? __pfx___might_resched+0x10/0x10 [ 433.343881][T14282] ? ib_device_get_by_netdev+0x595/0x5e0 [ 433.349521][T14282] ? ib_device_get_by_netdev+0x85/0x5e0 [ 433.355074][T14282] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 433.361056][T14282] ? net_generic+0x1f/0x240 [ 433.365573][T14282] ? net_generic+0x1f0/0x240 [ 433.370240][T14282] __mutex_lock+0x136/0xd70 [ 433.374774][T14282] ? ieee80211_open+0xe7/0x200 [ 433.379546][T14282] ? rxe_notify+0xef/0x4c0 [ 433.383968][T14282] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 433.389784][T14282] ? __pfx_rxe_notify+0x10/0x10 [ 433.394634][T14282] ? is_hsr_master+0x19/0x70 [ 433.399226][T14282] ? ieee80211_open+0xe7/0x200 [ 433.403995][T14282] ? __pfx___mutex_lock+0x10/0x10 [ 433.409034][T14282] ? ip6_route_dev_notify+0x99/0x600 [ 433.414323][T14282] ieee80211_open+0xe7/0x200 [ 433.418922][T14282] __dev_open+0x2d3/0x450 [ 433.423272][T14282] ? __pfx___dev_open+0x10/0x10 [ 433.428126][T14282] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 433.433592][T14282] dev_open+0xae/0x1b0 [ 433.437669][T14282] ? __pfx_dev_open+0x10/0x10 [ 433.442350][T14282] ? rcu_is_watching+0x15/0xb0 [ 433.447121][T14282] ? team_add_slave+0x69e/0x2760 [ 433.452062][T14282] ? team_add_slave+0x69e/0x2760 [ 433.457005][T14282] ? team_add_slave+0x8b5/0x2760 [ 433.461959][T14282] team_add_slave+0x9c8/0x2760 [ 433.466745][T14282] ? __dev_change_flags+0x515/0x6f0 [ 433.471956][T14282] ? __pfx_team_add_slave+0x10/0x10 [ 433.477164][T14282] ? 0xffffffffa0000950 [ 433.481316][T14282] ? __pfx___dev_change_flags+0x10/0x10 [ 433.486871][T14282] ? is_bpf_text_address+0x285/0x2a0 [ 433.492169][T14282] ? is_bpf_text_address+0x26/0x2a0 [ 433.497376][T14282] ? kernel_text_address+0xa7/0xe0 [ 433.502488][T14282] ? nla_strscpy+0x100/0x180 [ 433.507096][T14282] ? mutex_is_locked+0x12/0x50 [ 433.511873][T14282] do_setlink+0xe70/0x41f0 [ 433.516298][T14282] ? stack_trace_save+0x118/0x1d0 [ 433.521330][T14282] ? __pfx_stack_trace_save+0x10/0x10 [ 433.526709][T14282] ? __pfx_do_setlink+0x10/0x10 [ 433.531570][T14282] ? __nla_validate_parse+0x26ce/0x3090 [ 433.537121][T14282] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 433.542675][T14282] ? rtnl_newlink+0xf2/0x20a0 [ 433.547359][T14282] ? __pfx___nla_validate_parse+0x10/0x10 [ 433.553093][T14282] ? nla_strscpy+0x100/0x180 [ 433.557684][T14282] ? full_name_hash+0x93/0xe0 [ 433.562357][T14282] ? validate_linkmsg+0x71e/0x900 [ 433.567388][T14282] rtnl_newlink+0x180d/0x20a0 [ 433.572067][T14282] ? rtnl_newlink+0x481/0x20a0 [ 433.576845][T14282] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.581870][T14282] ? do_raw_spin_unlock+0x13c/0x8b0 [ 433.587084][T14282] ? __mutex_lock+0x527/0xd70 [ 433.591774][T14282] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.596809][T14282] rtnetlink_rcv_msg+0x73f/0xcf0 [ 433.601749][T14282] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 433.606868][T14282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.612338][T14282] ? ref_tracker_free+0x643/0x7e0 [ 433.617370][T14282] netlink_rcv_skb+0x1e3/0x430 [ 433.622149][T14282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.627624][T14282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.632950][T14282] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.638156][T14282] netlink_unicast+0x7f0/0x990 [ 433.642927][T14282] ? __pfx_netlink_unicast+0x10/0x10 [ 433.648212][T14282] ? __virt_addr_valid+0x183/0x530 [ 433.653326][T14282] ? __check_object_size+0x49c/0x900 [ 433.658616][T14282] ? bpf_lsm_netlink_send+0x9/0x10 [ 433.663739][T14282] netlink_sendmsg+0x8e4/0xcb0 [ 433.668518][T14282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.673816][T14282] ? __import_iovec+0x536/0x820 [ 433.678693][T14282] ? aa_sock_msg_perm+0x91/0x160 [ 433.683651][T14282] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 433.688963][T14282] ? security_socket_sendmsg+0x87/0xb0 [ 433.694429][T14282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.699714][T14282] __sock_sendmsg+0x221/0x270 [ 433.704396][T14282] ____sys_sendmsg+0x525/0x7d0 [ 433.709161][T14282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.714454][T14282] __sys_sendmsg+0x2b0/0x3a0 [ 433.719043][T14282] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.724161][T14282] ? bpf_btf_load+0xcf/0x1a0 [ 433.728775][T14282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.735130][T14282] ? do_syscall_64+0x100/0x230 [ 433.739907][T14282] ? do_syscall_64+0xb6/0x230 [ 433.744591][T14282] do_syscall_64+0xf3/0x230 [ 433.749102][T14282] ? clear_bhb_loop+0x35/0x90 [ 433.753782][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.759685][T14282] RIP: 0033:0x7fdbc29779f9 [ 433.764105][T14282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.783714][T14282] RSP: 002b:00007fdbc37f0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.792146][T14282] RAX: ffffffffffffffda RBX: 00007fdbc2b06058 RCX: 00007fdbc29779f9 [ 433.800120][T14282] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.808092][T14282] RBP: 00007fdbc29e58ee R08: 0000000000000000 R09: 0000000000000000 [ 433.816063][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.824036][T14282] R13: 000000000000006e R14: 00007fdbc2b06058 R15: 00007ffe6eac24f8 [ 433.832031][T14282] [ 433.843587][T14282] team0: Port device wlan1 added [ 435.015557][ T6723] bridge_slave_1: left allmulticast mode [ 435.021324][ T6723] bridge_slave_1: left promiscuous mode [ 435.027992][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.037699][ T6723] bridge_slave_0: left allmulticast mode [ 435.043471][ T6723] bridge_slave_0: left promiscuous mode [ 435.049142][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.058077][ T6723] bridge_slave_1: left allmulticast mode [ 435.063882][ T6723] bridge_slave_1: left promiscuous mode [ 435.069657][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.078786][ T6723] bridge_slave_0: left allmulticast mode [ 435.084576][ T6723] bridge_slave_0: left promiscuous mode [ 435.090316][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.099979][ T6723] bridge_slave_1: left allmulticast mode [ 435.105822][ T6723] bridge_slave_1: left promiscuous mode [ 435.111504][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.120378][ T6723] bridge_slave_0: left allmulticast mode [ 435.126121][ T6723] bridge_slave_0: left promiscuous mode [ 435.131887][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.375774][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.386531][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.396981][ T6723] bond0 (unregistering): Released all slaves [ 435.409549][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.420102][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.429949][ T6723] bond0 (unregistering): Released all slaves [ 435.441259][ T6723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.459289][ T6723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.469173][ T6723] bond0 (unregistering): Released all slaves [ 435.572192][ T6723] hsr_slave_0: left promiscuous mode [ 435.578030][ T6723] hsr_slave_1: left promiscuous mode [ 435.585677][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.593935][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.614599][ T6723] hsr_slave_0: left promiscuous mode [ 435.620395][ T6723] hsr_slave_1: left promiscuous mode [ 435.627520][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.635263][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.646255][ T6723] hsr_slave_0: left promiscuous mode [ 435.654320][ T6723] hsr_slave_1: left promiscuous mode [ 435.660154][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.668334][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.801564][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 435.826813][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 436.050228][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 436.076463][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 436.292129][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 436.317035][ T6723] team0 (unregistering): Port device team_slave_0 removed