last executing test programs: 16.503172878s ago: executing program 0 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 16.392105671s ago: executing program 0 (id=488): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110002000000008004000000ff0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000200)}, 0x20) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0xfffffffc, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYRESDEC=0x0], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x8, 0x1, 0x76, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @remote, {[@noop]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000d00000000000008020000000800000000000002000000000000000008d6a7bc001100000100000000000012050000000e00000001000006040000000d000000010000000600000000000012050000000a000000000000239299bd00010000000d0000000000000904000000002e5f00"], &(0x7f0000000a40)=""/217, 0x88, 0xd9, 0x1, 0x45}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x1, 0x2, 0x6, 0x3, 0x1cf}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xd8, &(0x7f00000004c0)=""/216, 0x41100, 0x30, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x41b8}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000e06d0000000000000000950000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000300010000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_sample={0x4c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x1f, 0x6, "c921471d32dd4c58529090759639a1a4b9292cb8248d6a02d85c81"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x64}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$802154_raw(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x800, 0x3) setsockopt$inet6_int(r8, 0x29, 0xcf, &(0x7f0000000280)=0x10001, 0x4) 16.030503908s ago: executing program 0 (id=495): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x6, 0x3}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x0]}}, 0x0, 0x37, 0x0, 0x1, 0x4}, 0x28) 15.90649603s ago: executing program 0 (id=498): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x21, 0x2, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x90000000}) 15.707950514s ago: executing program 0 (id=500): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf7}]}}}]}, 0x40}}, 0x28000000) 15.636322225s ago: executing program 0 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x4, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x19c, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x714}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x9b\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'rcu_utilization\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.&)\x8f[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "498a2166617afe230c161189a70da2ab07a4881892486e3d0fb39067d72e0d1e33d8c138a534fd0006b321f638f5309442b6013ad58654c8698d29"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "c960a7685783b4cace1bea5229e741e7883f27a2a8a644183796c78bc826ab6079029df7eaf0e4d89f95362b8020fc92c4cd3e16eb8c2c1f8d7c751e0dbbcdef64c51954517cbb603a354664bf6060baaf1444f75339c9bca9968121323d101dd36bccfd644734ad9ad51266acfd5c5c296be92006"}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.155773498s ago: executing program 2 (id=664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r2], 0x9) 1.790818885s ago: executing program 3 (id=669): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1000, 0x0, 0x1d}}]}}]}, 0x14c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r5 = accept4(r3, 0x0, 0x0, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r6, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.232214336s ago: executing program 2 (id=671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1.172410037s ago: executing program 2 (id=672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xaf68a9e589dc002a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1d, 0xf, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.069969908s ago: executing program 1 (id=675): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtfilter={0x1cc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x19c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0xfffffffffffffdfe, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0xa0, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_DATA={0x66, 0x5, "f254ed5b09aa464eb645f402f6fa1ffbc98ad1a46680c8aff9d33aebf56c6141ee0edbdef5afdaf943e69d43a6da2b3ca3a4ce4ee73cc233802a48941790a86b680457f575988e72ab6de738b99e2c19f84ee2fcfcf1082821fb6531eb63526e4e76"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0xfffffffffffffda4, 0x1, {0x7fff}}]}, @TCA_BASIC_EMATCHES={0x4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x3cb}, {0x4, 0x5, 0x800, 0x4, 0x1, 0x2}}}, @TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x2, 0x0, 0x6, 0x5cba}}}, @TCF_EM_CMP={0x0, 0x2, 0x0, 0x0, {{}, {0x738, 0x2, 0x2, 0x2, 0xa, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x6}, {0x6, 0x0, 0x1, "d202d2"}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x1}, {0xffffffffffffffff, 0x6, 0x7}}}, @TCF_EM_CONTAINER={0x0, 0x1, 0x0, 0x0, {{0xfffd, 0x0, 0x3fa1}, "f838103291894aeedc3ede3649ac7e0cbda0dc52a727296b8d8fda5289de0cccd23f18f00497bae3ed973d411b6e525b95e13203bd659d8a772da2e8889b1dad0112e41fd41ef5a09d5e491abe7ddb986e9b8b86fdf46bee3d283acc36ebdd079f10794ddca30a2432de12da409d21a14053b0ac9b6005582a1af4a7ba82b79bb7e7bee56c279bf2cbf0ec025c54fc33fc272e992a859f00bc783b08308027b2d8c5e64250bcb50fb20948e0f31c2541ff1e69211430bc0f153d6a771cd007c5a77918f6d460dddf"}}]}]}, @TCA_BASIC_EMATCHES={0xb0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4}, {0x8, 0x80000001, 0x5, 0x2, 0xe, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1cc}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 976.045181ms ago: executing program 2 (id=677): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1de}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0x7, 0x8, 0x2, 0x1, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000000002000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 952.003381ms ago: executing program 2 (id=678): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 920.213452ms ago: executing program 1 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="070003"], 0x34}}, 0x4008000) 863.203213ms ago: executing program 2 (id=681): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000852b1262fac55aa5e000000000000000f9ffffff00fe00000001000084080000000600000001000000030000000000feffffff2d000000"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}}, 0x20000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c2000003e000701feffffff00000000017c00000400428000000800028004001280000000000000000000009184183f4a223b0adc519226b6092dab417d629b93b16a9f765dcc01e24e48f21f6cf452f6b1cd4bd34deb22646a3bf786ba872c64f37d36e5b418c6d27a66a730487e266f5734bacd5dc9c0764821b595b631b158556c221db6ed5e00fb3368f33874da76df5edb6b9318f488c1f14190312373268f4de553b51640f16459dbc9a183c13075c1fd19c7b014bf0275"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xd}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000053250085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 863.103873ms ago: executing program 4 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 862.484333ms ago: executing program 3 (id=683): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 688.097176ms ago: executing program 3 (id=684): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) 687.809586ms ago: executing program 4 (id=685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x35c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x140, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8589, 0x200, 0x3, 0x6, 0xe5, 0xb4, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x1}, {0x2}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x7}, {0x4}, {0x0, 0x6}, {0x2, 0x3}, {}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x5, 0xc}, {0x4, 0x6}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x3}, {0x2, 0x9}, {0x1, 0x6}, {0x2}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x5, 0x2948, 0x8, 0x2, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x754, 0x100, 0x7, 0x0, 0x4, 0xfffa, 0x2009]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3ff, 0x3fe, 0x8, 0x6, 0x7, 0x97, 0xf6af]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0xffff, 0x5, 0xe, 0x0, 0xf, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x9, 0x0, 0xd2b, 0x8, 0x401]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x7}, {0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x100, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x6}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x5}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x8}, {0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdf6c, 0x5, 0x3, 0x43, 0x5, 0xcd7, 0x103c, 0x6]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x7, 0x2}, {0x4}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x8}, {}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {}, {0x1, 0x4}, {0x2, 0xa}, {0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x8}, {0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x4}, {0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x7}, {0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x0, 0x322, 0x5, 0x6, 0x9, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0x5, 0x7, 0x0, 0x2, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x6000, 0x9, 0x5, 0xf, 0x0, 0x581]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x3, 0xb7, 0x4, 0xb, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffb, 0x6, 0x1ff, 0x3ff, 0x2, 0xc000, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f, 0xf, 0x42, 0x818b, 0x722, 0x0, 0xaf63, 0x57]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6c, 0x0, 0x6, 0xd, 0x2, 0x1, 0xfff1]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x6}, {0x2, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x1}, {0x3, 0x8}, {0x7, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x6}, {0x3}, {0x1}, {0x2, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x1}, {0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x40815}, 0x4000000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x59, 0xff, 0x4, 0x7, 0x0, 0x8d7651735d51b07}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r5) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000020000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 676.755097ms ago: executing program 1 (id=686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="1ab16d32", 0x4}], 0x1, &(0x7f0000003040)=[{0x10, 0x1, 0x85}], 0x10}}], 0x1, 0x4004000) 558.022079ms ago: executing program 32 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x4, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x19c, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x714}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x9b\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'rcu_utilization\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.&)\x8f[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "498a2166617afe230c161189a70da2ab07a4881892486e3d0fb39067d72e0d1e33d8c138a534fd0006b321f638f5309442b6013ad58654c8698d29"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "c960a7685783b4cace1bea5229e741e7883f27a2a8a644183796c78bc826ab6079029df7eaf0e4d89f95362b8020fc92c4cd3e16eb8c2c1f8d7c751e0dbbcdef64c51954517cbb603a354664bf6060baaf1444f75339c9bca9968121323d101dd36bccfd644734ad9ad51266acfd5c5c296be92006"}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 530.424849ms ago: executing program 4 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f00000009c0)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000340)=""/71, 0x47}], 0x9}, 0x4dd}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x102, 0x0) 494.44247ms ago: executing program 1 (id=689): syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ff"}}}}}, 0x0) 493.46027ms ago: executing program 3 (id=690): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10488) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x4040054) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000004c0)="080071e4eb6e578ab9a158750c688b2ea5084a7991527044f722495e625237d48f49fcce10383f5120f82aca5c27", 0x2e}, {&(0x7f0000000300)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x0) 360.157103ms ago: executing program 4 (id=691): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x0, 0x1, 0x3, 0x0, 0x104}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 359.965963ms ago: executing program 3 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x10, 0x0, 0x8, 0x0, 0x73f, 0x3}}, {0x4}}]}]}, 0x58}}, 0x4800) 346.107313ms ago: executing program 1 (id=693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 277.503714ms ago: executing program 4 (id=694): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x1}}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x100}, 0x8) 156.076957ms ago: executing program 3 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) 155.803067ms ago: executing program 1 (id=696): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r6 = epoll_create1(0x80000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = epoll_create1(0x80000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0xa000201e}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0xac, 0x30, 0xb, 0x5, 0x0, {}, [{0x98, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x3, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_ACTION={0x6, 0x3, 0x6}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "14d13dec9dcc5dea7cc3e615eb9b94f3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 0s ago: executing program 4 (id=697): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd4", 0x1e) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$can_bcm(r1, &(0x7f00000011c0), 0x10) write$cgroup_freezer_state(r3, &(0x7f0000000200)='THAWED\x00', 0x7) unshare(0x20040600) sendmsg$nl_generic(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 67.466747][ T4173] cgroup: Unknown subsys name 'net' [ 67.602982][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.118088][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.123976][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 71.133331][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 71.169365][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 71.262861][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 71.279773][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 71.338015][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.345313][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.354033][ T4189] device bridge_slave_0 entered promiscuous mode [ 71.363860][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.371101][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.379283][ T4189] device bridge_slave_1 entered promiscuous mode [ 71.387732][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.394811][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.403032][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.450332][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.458748][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.467811][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.475776][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.483428][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.491498][ T4193] device bridge_slave_0 entered promiscuous mode [ 71.523818][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.531149][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.539304][ T4193] device bridge_slave_1 entered promiscuous mode [ 71.552533][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.592289][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.616188][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.660575][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.672138][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.682278][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.689575][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.698430][ T4195] device bridge_slave_0 entered promiscuous mode [ 71.713188][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.720574][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.731198][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731975][ T4183] device bridge_slave_0 entered promiscuous mode [ 71.738045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.759508][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.769244][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.776989][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.784911][ T4195] device bridge_slave_1 entered promiscuous mode [ 71.794662][ T4189] team0: Port device team_slave_0 added [ 71.801314][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.808793][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.816860][ T4183] device bridge_slave_1 entered promiscuous mode [ 71.862729][ T4189] team0: Port device team_slave_1 added [ 71.880891][ T4184] team0: Port device team_slave_0 added [ 71.890268][ T4184] team0: Port device team_slave_1 added [ 71.898860][ T4193] team0: Port device team_slave_0 added [ 71.915734][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.928862][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.956508][ T4193] team0: Port device team_slave_1 added [ 71.964552][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.004227][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.014315][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.021872][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.050611][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.070868][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.078240][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.106971][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.148524][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.156340][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.183499][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.197170][ T4195] team0: Port device team_slave_0 added [ 72.208381][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.216826][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.243680][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.255560][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.263006][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.290319][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.313168][ T4183] team0: Port device team_slave_0 added [ 72.320417][ T4195] team0: Port device team_slave_1 added [ 72.331202][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.338917][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.365397][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.392270][ T4183] team0: Port device team_slave_1 added [ 72.425255][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.433948][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.462940][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.508752][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.515830][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.543037][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.562595][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.570930][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.581862][ T4193] device hsr_slave_0 entered promiscuous mode [ 72.589408][ T4193] device hsr_slave_1 entered promiscuous mode [ 72.596575][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.604598][ T4193] Cannot create hsr debugfs directory [ 72.624921][ T4189] device hsr_slave_0 entered promiscuous mode [ 72.632281][ T4189] device hsr_slave_1 entered promiscuous mode [ 72.639391][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.651118][ T4189] Cannot create hsr debugfs directory [ 72.657872][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.665100][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.692317][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.692830][ T2304] Bluetooth: hci0: command 0x0409 tx timeout [ 72.709536][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 72.712349][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.723392][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.750538][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.776169][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 72.782415][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 72.789280][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 72.853674][ T4195] device hsr_slave_0 entered promiscuous mode [ 72.860933][ T4195] device hsr_slave_1 entered promiscuous mode [ 72.868140][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.876527][ T4195] Cannot create hsr debugfs directory [ 72.900467][ T4183] device hsr_slave_0 entered promiscuous mode [ 72.907473][ T4183] device hsr_slave_1 entered promiscuous mode [ 72.914778][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.922496][ T4183] Cannot create hsr debugfs directory [ 73.262070][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.282020][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.308059][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.334192][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.356487][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.371253][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.382377][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.411366][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.478335][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.518003][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.548798][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.561784][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.575012][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.595741][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.610014][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.644751][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.653143][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.679468][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.689453][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.710508][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.719951][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.729958][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.737974][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.749194][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.762563][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.783649][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.797527][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.806960][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.818288][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.826045][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.842491][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.853578][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.888283][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.897759][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.907964][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.919130][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.929193][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.939718][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.948320][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.958305][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.968774][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.977363][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.986542][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.008994][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.023124][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.034523][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.044253][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.054928][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.073707][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.087740][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.097103][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.111423][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.119590][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.129065][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.199793][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.210427][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.220943][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.228597][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.238303][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.247816][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.257241][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.266954][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.275848][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.285796][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.296771][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.324227][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.336913][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.358184][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.384776][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.394065][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.410550][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.420136][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.433218][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.468991][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.477931][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.491634][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.501126][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.534255][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.552189][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.602618][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.613188][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.622472][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.629631][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.650960][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.663501][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.672599][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.682608][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.693664][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.700821][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.711345][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.720131][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.743078][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.763314][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.777218][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 74.786126][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 74.789632][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.801380][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.810113][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.819062][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.827540][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.835526][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.844807][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.854419][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 74.860890][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 74.863161][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.867855][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 74.885275][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.922680][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.932594][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.941738][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.949093][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.958337][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.967671][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.977125][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.984345][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.992435][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.002332][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.011697][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.021043][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.028452][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.037356][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.047252][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.056709][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.065715][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.074866][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.084685][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.094025][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.103164][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.111639][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.128077][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.139094][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.148434][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.159963][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.173873][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.191136][ T4195] device veth0_vlan entered promiscuous mode [ 75.227293][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.236640][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.245180][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.255686][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.264379][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.274029][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.283006][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.291992][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.300776][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.309732][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.318406][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.325605][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.334319][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.343599][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.353371][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.362801][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.372083][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.381267][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.393054][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.419588][ T4195] device veth1_vlan entered promiscuous mode [ 75.441249][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.452215][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.462963][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.471715][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.480968][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.490483][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.508469][ T4193] device veth0_vlan entered promiscuous mode [ 75.518644][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.540622][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.549336][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.558858][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.569259][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.579453][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.588731][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.598190][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.612389][ T4193] device veth1_vlan entered promiscuous mode [ 75.645035][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.672058][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.694903][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.722400][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.748036][ T4195] device veth0_macvtap entered promiscuous mode [ 75.768640][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.775794][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.784443][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.794373][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.804632][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.812819][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.821341][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.848895][ T4195] device veth1_macvtap entered promiscuous mode [ 75.887051][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.895631][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.904892][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.912795][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.922419][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.944534][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.968859][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.986303][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.995342][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.007277][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.019281][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.028567][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.037536][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.048405][ T4193] device veth0_macvtap entered promiscuous mode [ 76.067760][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.080736][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.090936][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.099732][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.109477][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.119307][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.128591][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.137860][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.147459][ T4183] device veth0_vlan entered promiscuous mode [ 76.156684][ T4193] device veth1_macvtap entered promiscuous mode [ 76.172873][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.182229][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.190274][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.203634][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.213149][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.222711][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.234792][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255540][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.274892][ T4183] device veth1_vlan entered promiscuous mode [ 76.292935][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.302613][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.314667][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.327825][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.363609][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.375475][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.386825][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.395203][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.405126][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.415192][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.428557][ T4184] device veth0_vlan entered promiscuous mode [ 76.486626][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.511529][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.530054][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.545472][ T4184] device veth1_vlan entered promiscuous mode [ 76.565128][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.575247][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.586899][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.598400][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.612481][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633271][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.646647][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.662951][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.709046][ T4183] device veth0_macvtap entered promiscuous mode [ 76.727613][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.736828][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.745431][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.755099][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.764885][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.790410][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.799449][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.808065][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.818848][ T4183] device veth1_macvtap entered promiscuous mode [ 76.826083][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.852060][ T4184] device veth0_macvtap entered promiscuous mode [ 76.856579][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 76.864675][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 76.870581][ T4184] device veth1_macvtap entered promiscuous mode [ 76.878062][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.887255][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.896441][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.904807][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.925665][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.937268][ T4223] Bluetooth: hci4: command 0x040f tx timeout [ 76.937347][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.943512][ T4223] Bluetooth: hci3: command 0x040f tx timeout [ 76.943767][ T4223] Bluetooth: hci2: command 0x040f tx timeout [ 76.960410][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.977283][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.988926][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.033946][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.051879][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.062826][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.073957][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.084651][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.095607][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.108463][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.121067][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.130853][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.140435][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.150256][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.161756][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.172892][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.183536][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.194419][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.206139][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.224681][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.229203][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.249827][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.256312][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.262542][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.278676][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.288920][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.300487][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.311795][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.321905][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.332085][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.342433][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.351900][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.361939][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.370721][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.379980][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.389368][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.397976][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.408135][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422529][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.431587][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.440481][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466868][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467487][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.475620][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.493329][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.500767][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.500812][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503837][ T4189] device veth0_vlan entered promiscuous mode [ 77.534546][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.575194][ T4189] device veth1_vlan entered promiscuous mode [ 77.726884][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.736499][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.787005][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.797859][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.800825][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.819520][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.842180][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.873981][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.880251][ T4189] device veth0_macvtap entered promiscuous mode [ 77.894580][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.898311][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.904527][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.919338][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.946958][ T4189] device veth1_macvtap entered promiscuous mode [ 78.008426][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.022186][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.067311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 78.105769][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.211172][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.228001][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.309555][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.354681][ T4301] loop2: detected capacity change from 0 to 164 [ 78.441451][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.477147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.486728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.574160][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.585269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.681715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.706815][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.770124][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.887046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.897825][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.925922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.936855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.946057][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.670311][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 79.686158][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 79.692423][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 79.703744][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.732260][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 81.730071][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.747165][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 81.841995][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.945443][ T4301] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 81.978558][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.993391][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.048173][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.130298][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.184191][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.287611][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.331191][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.458967][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.489043][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.986138][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.065661][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.078785][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.092031][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.103630][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.117334][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.132856][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.144773][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.307730][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.467057][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.589718][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.605943][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.534104][ T4343] loop2: detected capacity change from 0 to 1024 [ 85.713841][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.713900][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.715363][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.741218][ T4349] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 85.878852][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.996591][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.020102][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.074845][ T4353] loop1: detected capacity change from 0 to 64 [ 86.115070][ T4355] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.178107][ T1324] cfg80211: failed to load regulatory.db [ 87.820663][ T4364] loop3: detected capacity change from 0 to 64 [ 87.951966][ T4369] loop4: detected capacity change from 0 to 64 [ 87.960824][ T4368] loop2: detected capacity change from 0 to 64 [ 88.096395][ T4371] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.470040][ T4383] loop1: detected capacity change from 0 to 64 [ 91.844454][ T4386] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.535331][ T4400] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 94.584473][ T4411] loop0: detected capacity change from 0 to 64 [ 95.783691][ T4421] loop3: detected capacity change from 0 to 64 [ 96.797080][ T4428] loop4: detected capacity change from 0 to 256 [ 96.816347][ T4427] loop0: detected capacity change from 0 to 64 [ 98.020385][ T4430] sched: RT throttling activated [ 101.878624][ T4467] loop1: detected capacity change from 0 to 512 [ 104.450723][ T4467] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 104.480665][ T4467] EXT4-fs (loop1): DAX unsupported by block device. [ 108.081884][ T4499] loop1: detected capacity change from 0 to 512 [ 108.237572][ T4499] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 108.290325][ T4499] EXT4-fs (loop1): DAX unsupported by block device. [ 110.408819][ T4511] loop3: detected capacity change from 0 to 1024 [ 110.585471][ T4511] loop3: detected capacity change from 0 to 256 [ 111.318219][ T4511] ======================================================= [ 111.318219][ T4511] WARNING: The mand mount option has been deprecated and [ 111.318219][ T4511] and is ignored by this kernel. Remove the mand [ 111.318219][ T4511] option from the mount to silence this warning. [ 111.318219][ T4511] ======================================================= [ 111.408010][ T4511] exfat: Unknown parameter '‰«íå…øIü' [ 115.351359][ T4540] loop0: detected capacity change from 0 to 256 [ 122.625105][ T4557] loop2: detected capacity change from 0 to 256 [ 127.159639][ T4575] loop0: detected capacity change from 0 to 512 [ 127.253628][ T4575] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 127.289495][ T4575] EXT4-fs (loop0): DAX unsupported by block device. [ 131.103708][ T4617] tap0: tun_chr_ioctl cmd 2147767507 [ 131.417106][ T4632] device hsr0 entered promiscuous mode [ 131.447144][ T4634] syz.4.84 uses obsolete (PF_INET,SOCK_PACKET) [ 131.447374][ T4627] device hsr0 left promiscuous mode [ 132.066649][ T4664] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 132.283546][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 132.307425][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 132.322037][ T4675] Zero length message leads to an empty skb [ 132.510401][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.531569][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.546520][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.558474][ T4681] device bridge_slave_0 left promiscuous mode [ 132.567977][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.591960][ T4681] device bridge_slave_1 left promiscuous mode [ 132.604744][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.649768][ T4681] bond0: (slave bond_slave_0): Releasing backup interface [ 132.709171][ T4681] bond0: (slave bond_slave_1): Releasing backup interface [ 132.834375][ T4681] team0: Port device team_slave_0 removed [ 132.864536][ T4681] team0: Port device team_slave_1 removed [ 132.893389][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.916204][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.930021][ T4695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.105'. [ 132.942248][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.958384][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.038059][ T4693] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 133.134567][ T4693] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.180638][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.187242][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.238234][ T4681] syz.4.102 (4681) used greatest stack depth: 19552 bytes left [ 133.440976][ T4713] netlink: set zone limit has 8 unknown bytes [ 133.447592][ T4708] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.803679][ T4728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 133.990715][ T4733] netlink: set zone limit has 8 unknown bytes [ 134.012964][ T4735] tipc: Enabling of bearer rejected, failed to enable media [ 134.410007][ T4753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.604799][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.613098][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.384995][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.408542][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.917092][ T4792] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.926550][ T4792] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.935501][ T4792] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.944533][ T4792] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.196508][ T4827] netlink: 256 bytes leftover after parsing attributes in process `syz.3.157'. [ 138.271778][ T4827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.331458][ T4886] tipc: Started in network mode [ 139.374159][ T4886] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.424039][ T4886] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.455193][ T4886] tipc: Enabled bearer , priority 10 [ 140.567349][ T4817] tipc: Node number set to 1 [ 141.557187][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 141.829968][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 142.447023][ T5054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.778161][ T5071] tipc: Started in network mode [ 142.800527][ T5071] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 142.812210][ T5071] tipc: Enabled bearer , priority 10 [ 143.301508][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 143.343872][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 143.810418][ T5129] IPVS: rr: FWM 3 0x00000003 - no destination available [ 143.820934][ T4255] tipc: Node number set to 4269801494 [ 144.053033][ T5143] bridge0: port 3(syz_tun) entered blocking state [ 144.087871][ T5143] bridge0: port 3(syz_tun) entered disabled state [ 144.142149][ T5143] device syz_tun entered promiscuous mode [ 144.207564][ T5143] bridge0: port 3(syz_tun) entered blocking state [ 144.214406][ T5143] bridge0: port 3(syz_tun) entered forwarding state [ 144.254331][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 144.337867][ T5160] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3839 [ 144.930245][ T5180] device syz_tun entered promiscuous mode [ 144.960764][ T5180] device macsec1 entered promiscuous mode [ 145.045266][ T5180] device syz_tun left promiscuous mode [ 145.534714][ T5207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.283'. [ 145.913056][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 146.145706][ T5244] device bridge1 entered promiscuous mode [ 146.156509][ T5239] device veth1_macvtap left promiscuous mode [ 146.162551][ T5239] device macsec0 entered promiscuous mode [ 146.289888][ T5247] device veth1_macvtap entered promiscuous mode [ 146.346254][ T5247] device macsec0 left promiscuous mode [ 146.465534][ T5240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.521845][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.650128][ T5240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.830403][ T5240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.922230][ T5240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.068600][ T5240] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.092897][ T5240] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.109187][ T5240] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.132425][ T5240] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.513889][ T5305] syz.0.320[5305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.513998][ T5305] syz.0.320[5305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.569499][ T5308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.689889][ T5305] syz.0.320 (5305) used greatest stack depth: 18592 bytes left [ 147.791088][ T5320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 147.918884][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 148.241248][ T5339] device batadv0 entered promiscuous mode [ 148.263008][ T5339] device vlan2 entered promiscuous mode [ 148.486662][ T5352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 149.552108][ T5399] netlink: 348 bytes leftover after parsing attributes in process `syz.1.357'. [ 149.623469][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 149.916082][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 150.253569][ T5423] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 [ 150.279602][ T5424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 150.625721][ T5438] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.198224][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 152.066488][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 152.604032][ T5520] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.801993][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 152.811407][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 152.821835][ T5529] netlink: 2 bytes leftover after parsing attributes in process `syz.3.409'. [ 152.835428][ T5529] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.844780][ T5529] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.853957][ T5529] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.862774][ T5529] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.001984][ T5539] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.826196][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 154.090590][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.124636][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.150814][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.225714][ T5590] bond0: (slave wlan1): Releasing backup interface [ 154.291617][ T5592] team0: Failed to send options change via netlink (err -105) [ 154.309478][ T5592] team0: Mode changed to "loadbalance" [ 154.552977][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 154.579774][ T5607] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.588236][ T5607] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.596494][ T5607] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.604735][ T5607] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.664999][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 154.768504][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 154.842259][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'. [ 154.877376][ T5616] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 155.196894][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 155.724801][ T5661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 155.752713][ T5663] raw_sendmsg: syz.0.455 forgot to set AF_INET. Fix it! [ 155.844446][ T5667] "syz.1.457" (5667) uses obsolete ecb(arc4) skcipher [ 155.951409][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 155.982198][ T5677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.461'. [ 156.003615][ T5672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.028848][ T5677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.461'. [ 156.030472][ T5672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.708044][ T5697] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 156.743866][ T5697] netlink: 'syz.4.463': attribute type 4 has an invalid length. [ 156.792657][ T5681] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 156.810769][ T5681] netlink: 'syz.4.463': attribute type 4 has an invalid length. [ 158.526202][ T5759] infiniband syz2: set down [ 158.536661][ T5759] infiniband syz2: added ipvlan0 [ 158.698046][ T5759] RDS/IB: syz2: added [ 158.702981][ T5759] smc: adding ib device syz2 with port count 1 [ 158.717102][ T5759] smc: ib device syz2 port 1 has pnetid [ 158.948697][ T5799] netlink: 'syz.4.505': attribute type 7 has an invalid length. [ 159.077670][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.551968][ T5817] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.662635][ T5819] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 160.171748][ T5831] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 161.523395][ T5895] __nla_validate_parse: 6 callbacks suppressed [ 161.523411][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 161.641143][ T5901] device hsr0 entered promiscuous mode [ 161.771162][ T5912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.551'. [ 161.798963][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 162.285384][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 162.786722][ T5958] tipc: Started in network mode [ 162.791703][ T5958] tipc: Node identity 080211000001, cluster identity 4711 [ 162.826341][ T5958] tipc: Enabled bearer , priority 0 [ 163.144045][ T5970] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.168668][ T5970] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.201972][ T5970] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.388083][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.417336][ T5980] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 163.837024][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 163.946235][ T4817] tipc: Node number set to 134418688 [ 164.371106][ T6004] infiniband syz0: set active [ 164.381269][ T6004] infiniband syz0: added veth0_vlan [ 164.486855][ T6004] RDS/IB: syz0: added [ 164.491957][ T6004] smc: adding ib device syz0 with port count 1 [ 164.516379][ T6004] smc: ib device syz0 port 1 has pnetid [ 165.156354][ T6040] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 165.732572][ T6050] netlink: 64 bytes leftover after parsing attributes in process `syz.3.601'. [ 165.874723][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 167.027465][ T6083] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 167.080155][ T6083] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.297277][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 167.315420][ T6094] netlink: 'syz.4.620': attribute type 5 has an invalid length. [ 167.334731][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 167.392446][ T6094] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 167.420343][ T6094] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 167.456097][ T6094] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 167.471513][ T6094] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 167.512459][ T6094] device geneve2 entered promiscuous mode [ 167.554580][ T6102] netlink: 216 bytes leftover after parsing attributes in process `syz.1.622'. [ 167.953408][ T6116] netlink: set zone limit has 8 unknown bytes [ 169.603369][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 169.937634][ T6137] smc: net device bond0 applied user defined pnetid SYZ0 [ 169.953130][ T6137] smc: net device bond0 erased user defined pnetid SYZ0 [ 170.244463][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 170.901852][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.643'. [ 170.967927][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 170.996671][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.644'. [ 171.004853][ T6032] Set syz1 is full, maxelem 65536 reached [ 171.008467][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 171.031653][ T6159] netlink: 2 bytes leftover after parsing attributes in process `syz.4.644'. [ 171.351590][ T6172] team0 (unregistering): Port device team_slave_0 removed [ 171.368679][ T6172] team0 (unregistering): Port device team_slave_1 removed [ 171.513817][ T6176] device syzkaller1 entered promiscuous mode [ 172.186294][ T6220] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.470702][ T6227] __nla_validate_parse: 2 callbacks suppressed [ 172.470721][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 172.607492][ T4324] Bluetooth: hci4: command 0x0405 tx timeout [ 172.607508][ T6227] syz.3.669 sent an empty control message without MSG_MORE. [ 173.050265][ T6243] syz.2.672[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.052666][ T6243] syz.2.672[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.157217][ T6249] tipc: Enabling of bearer rejected, failed to enable media [ 173.328083][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.349581][ T6256] device batadv_slave_0 entered promiscuous mode [ 173.376583][ T6256] netlink: 'syz.1.679': attribute type 3 has an invalid length. [ 173.966603][ T6285] sctp: [Deprecated]: syz.4.694 (pid 6285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.966603][ T6285] Use struct sctp_sack_info instead [ 174.116793][ T6288] batman_adv: batadv0: Adding interface: ip6gretap1 [ 174.123676][ T6288] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.161312][ T6288] batman_adv: batadv0: Interface activated: ip6gretap1 [ 174.190751][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 174.216949][ T6289] [ 174.219332][ T6289] ====================================================== [ 174.226455][ T6289] WARNING: possible circular locking dependency detected [ 174.233623][ T6289] syzkaller #0 Not tainted [ 174.238055][ T6289] ------------------------------------------------------ [ 174.245141][ T6289] syz.1.696/6289 is trying to acquire lock: [ 174.251042][ T6289] ffff888076598120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 174.260495][ T6289] [ 174.260495][ T6289] but task is already holding lock: [ 174.267922][ T6289] ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 174.276328][ T6289] [ 174.276328][ T6289] which lock already depends on the new lock. [ 174.276328][ T6289] [ 174.286768][ T6289] [ 174.286768][ T6289] the existing dependency chain (in reverse order) is: [ 174.295802][ T6289] [ 174.295802][ T6289] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 174.303053][ T6289] __mutex_lock_common+0x1eb/0x2390 [ 174.308803][ T6289] mutex_lock_nested+0x17/0x20 [ 174.314097][ T6289] ax25_setsockopt+0x830/0xa40 [ 174.319394][ T6289] __sys_setsockopt+0x2bf/0x3d0 [ 174.324797][ T6289] __x64_sys_setsockopt+0xb1/0xc0 [ 174.330370][ T6289] do_syscall_64+0x4c/0xa0 [ 174.335315][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.341739][ T6289] [ 174.341739][ T6289] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 174.349398][ T6289] __lock_acquire+0x2c33/0x7c60 [ 174.354795][ T6289] lock_acquire+0x197/0x3f0 [ 174.359836][ T6289] lock_sock_nested+0x44/0x100 [ 174.365134][ T6289] ax25_device_event+0x217/0x4f0 [ 174.370625][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 174.376535][ T6289] __dev_notify_flags+0x178/0x2d0 [ 174.382095][ T6289] dev_change_flags+0xe3/0x1a0 [ 174.387389][ T6289] dev_ifsioc+0x147/0xe70 [ 174.392252][ T6289] dev_ioctl+0x55f/0xe50 [ 174.397021][ T6289] sock_do_ioctl+0x222/0x2f0 [ 174.402139][ T6289] sock_ioctl+0x4ed/0x6e0 [ 174.407000][ T6289] __se_sys_ioctl+0xfa/0x170 [ 174.412123][ T6289] do_syscall_64+0x4c/0xa0 [ 174.417170][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.423599][ T6289] [ 174.423599][ T6289] other info that might help us debug this: [ 174.423599][ T6289] [ 174.433920][ T6289] Possible unsafe locking scenario: [ 174.433920][ T6289] [ 174.441401][ T6289] CPU0 CPU1 [ 174.446769][ T6289] ---- ---- [ 174.452177][ T6289] lock(rtnl_mutex); [ 174.456176][ T6289] lock(sk_lock-AF_AX25); [ 174.463115][ T6289] lock(rtnl_mutex); [ 174.469648][ T6289] lock(sk_lock-AF_AX25); [ 174.474066][ T6289] [ 174.474066][ T6289] *** DEADLOCK *** [ 174.474066][ T6289] [ 174.482211][ T6289] 1 lock held by syz.1.696/6289: [ 174.487147][ T6289] #0: ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 174.495872][ T6289] [ 174.495872][ T6289] stack backtrace: [ 174.501860][ T6289] CPU: 1 PID: 6289 Comm: syz.1.696 Not tainted syzkaller #0 [ 174.509236][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.519307][ T6289] Call Trace: [ 174.522592][ T6289] [ 174.525531][ T6289] dump_stack_lvl+0x168/0x230 [ 174.530228][ T6289] ? load_image+0x3b0/0x3b0 [ 174.534739][ T6289] ? show_regs_print_info+0x20/0x20 [ 174.539949][ T6289] ? print_circular_bug+0x12b/0x1a0 [ 174.545165][ T6289] check_noncircular+0x274/0x310 [ 174.550197][ T6289] ? add_chain_block+0x940/0x940 [ 174.555139][ T6289] ? lockdep_lock+0xdc/0x1e0 [ 174.559745][ T6289] ? lockdep_unlock+0x134/0x2d0 [ 174.564606][ T6289] ? mark_lock+0x94/0x320 [ 174.568946][ T6289] __lock_acquire+0x2c33/0x7c60 [ 174.573813][ T6289] ? lock_chain_count+0x20/0x20 [ 174.578672][ T6289] ? mark_lock+0x94/0x320 [ 174.583230][ T6289] ? verify_lock_unused+0x140/0x140 [ 174.588436][ T6289] ? verify_lock_unused+0x140/0x140 [ 174.593643][ T6289] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 174.599635][ T6289] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 174.605626][ T6289] ? __local_bh_enable_ip+0x12a/0x1b0 [ 174.611015][ T6289] ? mark_lock+0x94/0x320 [ 174.615353][ T6289] lock_acquire+0x197/0x3f0 [ 174.619888][ T6289] ? ax25_device_event+0x217/0x4f0 [ 174.625008][ T6289] ? lock_chain_count+0x20/0x20 [ 174.629869][ T6289] ? read_lock_is_recursive+0x10/0x10 [ 174.635248][ T6289] ? __local_bh_enable_ip+0x12a/0x1b0 [ 174.640632][ T6289] ? lockdep_hardirqs_on+0x94/0x140 [ 174.645840][ T6289] ? __local_bh_enable_ip+0x12a/0x1b0 [ 174.651220][ T6289] ? _local_bh_enable+0xa0/0xa0 [ 174.656077][ T6289] lock_sock_nested+0x44/0x100 [ 174.660848][ T6289] ? ax25_device_event+0x217/0x4f0 [ 174.665975][ T6289] ax25_device_event+0x217/0x4f0 [ 174.670930][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 174.676318][ T6289] __dev_notify_flags+0x178/0x2d0 [ 174.681449][ T6289] ? __dev_change_flags+0x6a0/0x6a0 [ 174.686683][ T6289] ? __dev_change_flags+0x4bb/0x6a0 [ 174.691893][ T6289] ? dev_get_flags+0x1c0/0x1c0 [ 174.696669][ T6289] ? dev_ioctl+0x54e/0xe50 [ 174.701101][ T6289] ? dev_ioctl+0x54e/0xe50 [ 174.705555][ T6289] dev_change_flags+0xe3/0x1a0 [ 174.710329][ T6289] dev_ifsioc+0x147/0xe70 [ 174.714667][ T6289] ? dev_ioctl+0xe50/0xe50 [ 174.719090][ T6289] ? apparmor_capable+0x12c/0x190 [ 174.724121][ T6289] ? full_name_hash+0x8e/0xe0 [ 174.728847][ T6289] dev_ioctl+0x55f/0xe50 [ 174.733124][ T6289] ? _copy_from_user+0x111/0x170 [ 174.738078][ T6289] sock_do_ioctl+0x222/0x2f0 [ 174.742676][ T6289] ? sock_show_fdinfo+0xb0/0xb0 [ 174.747539][ T6289] sock_ioctl+0x4ed/0x6e0 [ 174.752221][ T6289] ? sock_poll+0x3f0/0x3f0 [ 174.756651][ T6289] ? bpf_lsm_file_ioctl+0x5/0x10 [ 174.761604][ T6289] ? security_file_ioctl+0x7c/0xa0 [ 174.766730][ T6289] ? sock_poll+0x3f0/0x3f0 [ 174.771270][ T6289] __se_sys_ioctl+0xfa/0x170 [ 174.775874][ T6289] do_syscall_64+0x4c/0xa0 [ 174.780297][ T6289] ? clear_bhb_loop+0x30/0x80 [ 174.784978][ T6289] ? clear_bhb_loop+0x30/0x80 [ 174.789749][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.795660][ T6289] RIP: 0033:0x7fee19bedbe9 [ 174.800084][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.819778][ T6289] RSP: 002b:00007fee17e55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.828271][ T6289] RAX: ffffffffffffffda RBX: 00007fee19e24fa0 RCX: 00007fee19bedbe9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.836252][ T6289] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 174.844316][ T6289] RBP: 00007fee19c70e19 R08: 0000000000000000 R09: 0000000000000000 [ 174.852299][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.860275][ T6289] R13: 00007fee19e25038 R14: 00007fee19e24fa0 R15: 00007ffe32960418 [ 174.868258][ T6289] [ 174.962747][ T6289] ================================================================== [ 174.970874][ T6289] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 174.978635][ T6289] Write of size 4 at addr ffff88801f49a3b8 by task syz.1.696/6289 [ 174.986660][ T6289] [ 174.989004][ T6289] CPU: 0 PID: 6289 Comm: syz.1.696 Not tainted syzkaller #0 [ 174.996408][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.006486][ T6289] Call Trace: [ 175.009785][ T6289] [ 175.012735][ T6289] dump_stack_lvl+0x168/0x230 [ 175.017440][ T6289] ? show_regs_print_info+0x20/0x20 [ 175.022661][ T6289] ? load_image+0x3b0/0x3b0 [ 175.027209][ T6289] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 175.032618][ T6289] print_address_description+0x60/0x2d0 [ 175.038195][ T6289] ? ax25_dev_device_down+0x35e/0x520 [ 175.043600][ T6289] kasan_report+0xdf/0x130 [ 175.048037][ T6289] ? ax25_dev_device_down+0x35e/0x520 [ 175.053430][ T6289] ? kfree+0xef/0x2a0 [ 175.057466][ T6289] kasan_check_range+0x27b/0x290 [ 175.062425][ T6289] ax25_dev_device_down+0x35e/0x520 [ 175.067651][ T6289] ax25_device_event+0x4b4/0x4f0 [ 175.072623][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 175.078021][ T6289] __dev_notify_flags+0x178/0x2d0 [ 175.083090][ T6289] ? __dev_change_flags+0x6a0/0x6a0 [ 175.088318][ T6289] ? __dev_change_flags+0x4bb/0x6a0 [ 175.093545][ T6289] ? dev_get_flags+0x1c0/0x1c0 [ 175.098333][ T6289] ? dev_ioctl+0x54e/0xe50 [ 175.102770][ T6289] ? dev_ioctl+0x54e/0xe50 [ 175.107313][ T6289] dev_change_flags+0xe3/0x1a0 [ 175.112119][ T6289] dev_ifsioc+0x147/0xe70 [ 175.116492][ T6289] ? dev_ioctl+0xe50/0xe50 [ 175.120949][ T6289] ? apparmor_capable+0x12c/0x190 [ 175.125980][ T6289] ? full_name_hash+0x8e/0xe0 [ 175.130673][ T6289] dev_ioctl+0x55f/0xe50 [ 175.134940][ T6289] ? _copy_from_user+0x111/0x170 [ 175.139879][ T6289] sock_do_ioctl+0x222/0x2f0 [ 175.144474][ T6289] ? sock_show_fdinfo+0xb0/0xb0 [ 175.149333][ T6289] sock_ioctl+0x4ed/0x6e0 [ 175.153683][ T6289] ? sock_poll+0x3f0/0x3f0 [ 175.158125][ T6289] ? bpf_lsm_file_ioctl+0x5/0x10 [ 175.163095][ T6289] ? security_file_ioctl+0x7c/0xa0 [ 175.168206][ T6289] ? sock_poll+0x3f0/0x3f0 [ 175.172642][ T6289] __se_sys_ioctl+0xfa/0x170 [ 175.177233][ T6289] do_syscall_64+0x4c/0xa0 [ 175.181653][ T6289] ? clear_bhb_loop+0x30/0x80 [ 175.186436][ T6289] ? clear_bhb_loop+0x30/0x80 [ 175.191129][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.197032][ T6289] RIP: 0033:0x7fee19bedbe9 [ 175.201454][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.221066][ T6289] RSP: 002b:00007fee17e55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.229480][ T6289] RAX: ffffffffffffffda RBX: 00007fee19e24fa0 RCX: 00007fee19bedbe9 [ 175.237453][ T6289] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 175.245428][ T6289] RBP: 00007fee19c70e19 R08: 0000000000000000 R09: 0000000000000000 [ 175.253397][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.261366][ T6289] R13: 00007fee19e25038 R14: 00007fee19e24fa0 R15: 00007ffe32960418 [ 175.269348][ T6289] [ 175.272364][ T6289] [ 175.274682][ T6289] Allocated by task 6289: [ 175.279001][ T6289] __kasan_kmalloc+0xb5/0xf0 [ 175.283596][ T6289] ax25_dev_device_up+0x50/0x580 [ 175.288531][ T6289] ax25_device_event+0x483/0x4f0 [ 175.293520][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 175.298893][ T6289] __dev_notify_flags+0x178/0x2d0 [ 175.303915][ T6289] dev_change_flags+0xe3/0x1a0 [ 175.308691][ T6289] dev_ifsioc+0x147/0xe70 [ 175.313016][ T6289] dev_ioctl+0x55f/0xe50 [ 175.317252][ T6289] sock_do_ioctl+0x222/0x2f0 [ 175.322012][ T6289] sock_ioctl+0x4ed/0x6e0 [ 175.326338][ T6289] __se_sys_ioctl+0xfa/0x170 [ 175.330926][ T6289] do_syscall_64+0x4c/0xa0 [ 175.335336][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.341224][ T6289] [ 175.343544][ T6289] Freed by task 6289: [ 175.347513][ T6289] kasan_set_track+0x4b/0x70 [ 175.352101][ T6289] kasan_set_free_info+0x1f/0x40 [ 175.357033][ T6289] ____kasan_slab_free+0xd5/0x110 [ 175.362091][ T6289] slab_free_freelist_hook+0xea/0x170 [ 175.367471][ T6289] kfree+0xef/0x2a0 [ 175.371284][ T6289] ax25_dev_device_down+0x1c0/0x520 [ 175.376484][ T6289] ax25_device_event+0x4b4/0x4f0 [ 175.381438][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 175.386815][ T6289] __dev_notify_flags+0x178/0x2d0 [ 175.391836][ T6289] dev_change_flags+0xe3/0x1a0 [ 175.396658][ T6289] dev_ifsioc+0x147/0xe70 [ 175.400991][ T6289] dev_ioctl+0x55f/0xe50 [ 175.405248][ T6289] sock_do_ioctl+0x222/0x2f0 [ 175.409838][ T6289] sock_ioctl+0x4ed/0x6e0 [ 175.414166][ T6289] __se_sys_ioctl+0xfa/0x170 [ 175.418754][ T6289] do_syscall_64+0x4c/0xa0 [ 175.423167][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.429145][ T6289] [ 175.431468][ T6289] Last potentially related work creation: [ 175.437299][ T6289] kasan_save_stack+0x35/0x60 [ 175.441978][ T6289] kasan_record_aux_stack+0xb8/0x100 [ 175.447266][ T6289] insert_work+0x54/0x3d0 [ 175.451595][ T6289] __queue_work+0x9c5/0xd50 [ 175.456118][ T6289] queue_work_on+0x11d/0x1d0 [ 175.460705][ T6289] netdevice_event+0x803/0x900 [ 175.465470][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 175.470841][ T6289] unregister_netdevice_many+0xf57/0x18f0 [ 175.476561][ T6289] ip_tunnel_delete_nets+0x318/0x360 [ 175.481862][ T6289] cleanup_net+0x77b/0xb80 [ 175.486273][ T6289] process_one_work+0x863/0x1000 [ 175.491216][ T6289] worker_thread+0xaa8/0x12a0 [ 175.495892][ T6289] kthread+0x436/0x520 [ 175.499968][ T6289] ret_from_fork+0x1f/0x30 [ 175.504381][ T6289] [ 175.506699][ T6289] Second to last potentially related work creation: [ 175.513274][ T6289] kasan_save_stack+0x35/0x60 [ 175.517962][ T6289] kasan_record_aux_stack+0xb8/0x100 [ 175.523249][ T6289] insert_work+0x54/0x3d0 [ 175.527661][ T6289] __queue_work+0x9c5/0xd50 [ 175.532169][ T6289] queue_work_on+0x11d/0x1d0 [ 175.536766][ T6289] netdevice_event+0x803/0x900 [ 175.541531][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 175.547005][ T6289] dev_set_mac_address+0x2c4/0x3d0 [ 175.552133][ T6289] dev_set_mac_address_user+0x2d/0x50 [ 175.557539][ T6289] do_setlink+0x80d/0x3980 [ 175.561956][ T6289] rtnl_newlink+0x1419/0x17d0 [ 175.566749][ T6289] rtnetlink_rcv_msg+0x9b9/0xe60 [ 175.571687][ T6289] netlink_rcv_skb+0x1e0/0x430 [ 175.576447][ T6289] netlink_unicast+0x774/0x920 [ 175.581212][ T6289] netlink_sendmsg+0x8ab/0xbc0 [ 175.586006][ T6289] __sys_sendto+0x423/0x580 [ 175.590508][ T6289] __x64_sys_sendto+0xda/0xf0 [ 175.595182][ T6289] do_syscall_64+0x4c/0xa0 [ 175.599592][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.605481][ T6289] [ 175.607797][ T6289] The buggy address belongs to the object at ffff88801f49a300 [ 175.607797][ T6289] which belongs to the cache kmalloc-192 of size 192 [ 175.621853][ T6289] The buggy address is located 184 bytes inside of [ 175.621853][ T6289] 192-byte region [ffff88801f49a300, ffff88801f49a3c0) [ 175.635124][ T6289] The buggy address belongs to the page: [ 175.640765][ T6289] page:ffffea00007d2680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f49a [ 175.651195][ T6289] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 175.658876][ T6289] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016841a00 [ 175.667479][ T6289] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 175.676172][ T6289] page dumped because: kasan: bad access detected [ 175.682673][ T6289] page_owner tracks the page as allocated [ 175.688553][ T6289] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1324, ts 16508704527, free_ts 9261830688 [ 175.704356][ T6289] get_page_from_freelist+0x1b77/0x1c60 [ 175.709914][ T6289] __alloc_pages+0x1e1/0x470 [ 175.714509][ T6289] new_slab+0xc0/0x4b0 [ 175.718578][ T6289] ___slab_alloc+0x81e/0xdf0 [ 175.723166][ T6289] __kmalloc+0x1cd/0x330 [ 175.727429][ T6289] usb_alloc_urb+0x3f/0x140 [ 175.731933][ T6289] usb_control_msg+0x115/0x3e0 [ 175.736694][ T6289] hub_ext_port_status+0x103/0x6d0 [ 175.741821][ T6289] hub_activate+0x6e9/0x1a30 [ 175.746454][ T6289] process_one_work+0x863/0x1000 [ 175.751390][ T6289] worker_thread+0xaa8/0x12a0 [ 175.756079][ T6289] kthread+0x436/0x520 [ 175.760318][ T6289] ret_from_fork+0x1f/0x30 [ 175.764736][ T6289] page last free stack trace: [ 175.769628][ T6289] free_unref_page_prepare+0x637/0x6c0 [ 175.775092][ T6289] free_unref_page+0x94/0x280 [ 175.779785][ T6289] __mmdrop+0xaa/0x3e0 [ 175.783988][ T6289] free_bprm+0x141/0x300 [ 175.788230][ T6289] kernel_execve+0x380/0x900 [ 175.792816][ T6289] call_usermodehelper_exec_async+0x207/0x350 [ 175.798886][ T6289] ret_from_fork+0x1f/0x30 [ 175.803334][ T6289] [ 175.805658][ T6289] Memory state around the buggy address: [ 175.811280][ T6289] ffff88801f49a280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 175.819343][ T6289] ffff88801f49a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.827421][ T6289] >ffff88801f49a380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 175.835561][ T6289] ^ [ 175.841447][ T6289] ffff88801f49a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.849592][ T6289] ffff88801f49a480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 175.857735][ T6289] ================================================================== [ 175.884646][ T6289] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.892262][ T6289] CPU: 1 PID: 6289 Comm: syz.1.696 Tainted: G B syzkaller #0 [ 175.900935][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.911061][ T6289] Call Trace: [ 175.914363][ T6289] [ 175.917384][ T6289] dump_stack_lvl+0x168/0x230 [ 175.922180][ T6289] ? show_regs_print_info+0x20/0x20 [ 175.927384][ T6289] ? load_image+0x3b0/0x3b0 [ 175.931896][ T6289] panic+0x2c9/0x7f0 [ 175.935887][ T6289] ? bpf_jit_dump+0xd0/0xd0 [ 175.940404][ T6289] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 175.946321][ T6289] ? _raw_spin_unlock+0x40/0x40 [ 175.951193][ T6289] ? ax25_dev_device_down+0x35e/0x520 [ 175.956595][ T6289] check_panic_on_warn+0x80/0xa0 [ 175.961536][ T6289] ? ax25_dev_device_down+0x35e/0x520 [ 175.967184][ T6289] end_report+0x6d/0xf0 [ 175.971886][ T6289] kasan_report+0x102/0x130 [ 175.976408][ T6289] ? ax25_dev_device_down+0x35e/0x520 [ 175.981781][ T6289] ? kfree+0xef/0x2a0 [ 175.985761][ T6289] kasan_check_range+0x27b/0x290 [ 175.990826][ T6289] ax25_dev_device_down+0x35e/0x520 [ 175.996137][ T6289] ax25_device_event+0x4b4/0x4f0 [ 176.001086][ T6289] raw_notifier_call_chain+0xcb/0x160 [ 176.006468][ T6289] __dev_notify_flags+0x178/0x2d0 [ 176.011715][ T6289] ? __dev_change_flags+0x6a0/0x6a0 [ 176.017007][ T6289] ? __dev_change_flags+0x4bb/0x6a0 [ 176.022213][ T6289] ? dev_get_flags+0x1c0/0x1c0 [ 176.027016][ T6289] ? dev_ioctl+0x54e/0xe50 [ 176.031450][ T6289] ? dev_ioctl+0x54e/0xe50 [ 176.035914][ T6289] dev_change_flags+0xe3/0x1a0 [ 176.040870][ T6289] dev_ifsioc+0x147/0xe70 [ 176.045210][ T6289] ? dev_ioctl+0xe50/0xe50 [ 176.049664][ T6289] ? apparmor_capable+0x12c/0x190 [ 176.054691][ T6289] ? full_name_hash+0x8e/0xe0 [ 176.059379][ T6289] dev_ioctl+0x55f/0xe50 [ 176.063628][ T6289] ? _copy_from_user+0x111/0x170 [ 176.068566][ T6289] sock_do_ioctl+0x222/0x2f0 [ 176.073170][ T6289] ? sock_show_fdinfo+0xb0/0xb0 [ 176.078059][ T6289] sock_ioctl+0x4ed/0x6e0 [ 176.082389][ T6289] ? sock_poll+0x3f0/0x3f0 [ 176.086904][ T6289] ? bpf_lsm_file_ioctl+0x5/0x10 [ 176.091848][ T6289] ? security_file_ioctl+0x7c/0xa0 [ 176.096963][ T6289] ? sock_poll+0x3f0/0x3f0 [ 176.101383][ T6289] __se_sys_ioctl+0xfa/0x170 [ 176.105982][ T6289] do_syscall_64+0x4c/0xa0 [ 176.110405][ T6289] ? clear_bhb_loop+0x30/0x80 [ 176.115165][ T6289] ? clear_bhb_loop+0x30/0x80 [ 176.119841][ T6289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.125733][ T6289] RIP: 0033:0x7fee19bedbe9 [ 176.130165][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.149773][ T6289] RSP: 002b:00007fee17e55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.158191][ T6289] RAX: ffffffffffffffda RBX: 00007fee19e24fa0 RCX: 00007fee19bedbe9 [ 176.166164][ T6289] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 176.174138][ T6289] RBP: 00007fee19c70e19 R08: 0000000000000000 R09: 0000000000000000 [ 176.182111][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.190164][ T6289] R13: 00007fee19e25038 R14: 00007fee19e24fa0 R15: 00007ffe32960418 [ 176.198300][ T6289] [ 176.201583][ T6289] Kernel Offset: disabled [ 176.206075][ T6289] Rebooting in 86400 seconds..