last executing test programs: 1m29.464605545s ago: executing program 2 (id=6090): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 1m27.454347359s ago: executing program 2 (id=6095): syz_emit_ethernet(0x3b3, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37d, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1m27.304530682s ago: executing program 2 (id=6098): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) 1m27.180752705s ago: executing program 2 (id=6100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x84}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r6}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r7, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) close(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x18, 0xb75}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, &(0x7f0000000280)="30b7c8", 0x3, 0x40000, &(0x7f0000000340)={0x11, 0x6, r10, 0x1, 0x2, 0x6, @local}, 0x14) 1m26.766109534s ago: executing program 2 (id=6103): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0x80, 0x5, 0x9, 0x10, 0x5, 0x7, 0xc7db, 0x1, 0x0, 0x3, 0xcf30, 0x8000, 0x3, 0x2a, 0x2, 0x2, 0x3, 0x7, 0x100, 0x80000001, 0x63e, 0x1008, 0xcf1, 0x2, 0x10, 0x8, 0xa, 0x2, 0x0, 0x4, 0x8, 0x6, 0x10000, 0x3bff, 0x8, 0xff, 0x7, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x7, 0xd885, 0x78, 0x7fffffff, 0x9, 0x6, 0xffff, 0xfffffffc, 0x2, 0x1, 0x8ee3, 0x1, 0x6000000, 0x4, 0x3ff, 0xffffffff, 0xa0, 0x7ff, 0x829, 0x943, 0x78a8, 0x7fff, 0x967, 0xfffffffe, 0x4, 0x7, 0xff, 0x7fff, 0x7, 0x2, 0x80, 0xd8d, 0x10001, 0x4, 0x3b95, 0xfffffff8, 0x5c26, 0x3ff, 0x1, 0x2, 0x4, 0x2, 0x4c08, 0x7ff, 0x3, 0x8, 0xfffffff9, 0x200020, 0xc83, 0x8, 0xffffffff, 0x80000001, 0x7, 0x2, 0xfffffffb, 0x80000001, 0xffff, 0x3, 0x80, 0x7fffffff, 0x4, 0xfff, 0x3, 0x2, 0x5, 0x4, 0x80000000, 0xe3, 0x6, 0x8, 0x9, 0x8, 0x7, 0x5, 0x326, 0x3, 0xfff, 0xe, 0xd, 0x200, 0x4ab800, 0x8, 0x4, 0x4, 0x9, 0x8, 0x2, 0xfffffffa, 0xc, 0x2, 0xd, 0x5, 0x10001, 0x80000000, 0xb, 0x2, 0xae6b, 0x6, 0x4, 0xf5e, 0x80000000, 0x3, 0x4, 0x6ede, 0x3, 0x1, 0x203800, 0x5, 0x0, 0x5, 0x3, 0x3, 0x80000001, 0x1000, 0xfffffffe, 0xfffffff1, 0x606, 0x9, 0x8, 0x0, 0x0, 0x9, 0x78, 0x8, 0xe9, 0xfb2, 0xa3c, 0x5, 0x7, 0x7, 0x5331, 0x4, 0x7fff, 0xa, 0x0, 0x6, 0xe8, 0x1, 0xf, 0x9, 0x1000, 0x1, 0x27, 0xffffff42, 0x4, 0x8, 0x7, 0x9, 0x6, 0x7, 0xfffffff9, 0x8, 0x7, 0x101, 0x3, 0x6, 0x0, 0x8000, 0x1, 0x3, 0x2, 0x7, 0x1000, 0xffffffff, 0x23db, 0xfffff800, 0x9, 0x6, 0x9, 0x0, 0x856, 0xfffeffff, 0xfffff896, 0x14f9, 0x7, 0x59, 0x3, 0xa, 0x60, 0x8df, 0x0, 0x1, 0x939e, 0x4, 0x4, 0x5, 0x7, 0x1, 0x0, 0x723, 0x80000001, 0x1, 0xc1a, 0x8, 0x0, 0x2, 0x9, 0x41e, 0x3, 0x6, 0x9, 0x9, 0x8001, 0x1d23, 0x8, 0xa73, 0x7516, 0x1, 0x1, 0x9, 0x6, 0x88]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0xd5}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}]}}]}, 0x45c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x4000}, {&(0x7f00000000c0)=""/236, 0xec}], 0x2}, 0xfffffff8}], 0x1, 0x100, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e22, @private=0xa010101}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) 11.758756414s ago: executing program 2 (id=6111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000030000000320000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000280), &(0x7f00000006c0)=r2}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.000906464s ago: executing program 0 (id=6507): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, 0x0, r4}}, [@algo_auth={0x11a, 0x1, {{'blake2s-128-x86\x00'}, 0x690, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0xdec, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd5, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r5}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0xdec}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[@ANYBLOB="30000000514ce4ba9ad323e2eed72ef247b7e20cdb88ca56ac5191d8b2306acc6e9a2878ff94a6576e", @ANYRES16, @ANYBLOB="010000000000000000001c0000000a0004007770616e33000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x73}}}], 0x40}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 7.982403076s ago: executing program 0 (id=6510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x84}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r7}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r8, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc16}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r7], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) close(r1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x18, 0xb75}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000280)="30b7c8", 0x3, 0x40000, &(0x7f0000000340)={0x11, 0x6, r11, 0x1, 0x2, 0x6, @local}, 0x14) 7.729674432s ago: executing program 3 (id=6513): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c00028008400400ffff0000050027"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 7.393738599s ago: executing program 3 (id=6514): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 7.295766611s ago: executing program 0 (id=6515): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) readv(r0, &(0x7f00000022c0)=[{0x0}], 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 6.980108648s ago: executing program 1 (id=6516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.861521492s ago: executing program 4 (id=6517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 5.803273024s ago: executing program 4 (id=6518): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$unix(0x1, 0x5, 0x0) 4.188033799s ago: executing program 0 (id=6519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000740)=ANY=[@ANYBLOB="0000a8946f"]) 4.187550629s ago: executing program 4 (id=6520): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x1237d09}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 4.11308018s ago: executing program 1 (id=6521): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, 0x0, r4}}, [@algo_auth={0x11a, 0x1, {{'blake2s-128-x86\x00'}, 0x690, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0xdec, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd5, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r5}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0xdec}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[@ANYBLOB="30000000514ce4ba9ad323e2eed72ef247b7e20cdb88ca56ac5191d8b2306acc6e9a2878ff94a6576e", @ANYRES16=r6, @ANYBLOB="010000000000000000001c0000000a0004007770616e33000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x73}}}], 0x40}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 4.090589951s ago: executing program 3 (id=6522): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000000400000004000000eeff", @ANYBLOB], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x46, 0x46, 0x3, [@ptr={0xb, 0x0, 0x0, 0x2, 0x4}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @datasec={0x1, 0x0, 0x0, 0xf, 0x2, [], ']3'}]}, {0x0, [0x2e]}}, &(0x7f0000000840)=""/137, 0x63, 0x89, 0x0, 0x3}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x20, &(0x7f0000001ac0)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/239, 0xef}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="6f00000100000000b702000000000000850000009f000000c1690100040000e693990008060000000d7bc0ff010000001800000000e572e9c050a10101000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000240), 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xd, 0xfff, 0x6018}, 0x10, r2, 0x0, 0x8, &(0x7f0000001b40), &(0x7f00000003c0)=[{0x2, 0x1, 0xe, 0x4}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x4, 0x2, 0x1}, {0x1, 0x4, 0xf}, {0x2, 0x1, 0x4, 0xa}, {0x5, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xc}, {0x2, 0x4, 0xd}], 0x10, 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r3, 0x8b2c, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 3.940236514s ago: executing program 0 (id=6523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x84}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r6}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r7, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc16}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000540)='syzkaller\x00', 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) close(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) 3.940021934s ago: executing program 4 (id=6524): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000b60100007b1af8ff00000000bfa100000000000007010000f8ffff", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) 3.808040137s ago: executing program 3 (id=6525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x84}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r7}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r8, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc16}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r7], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) close(r1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x18, 0xb75}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000280)="30b7c8", 0x3, 0x40000, &(0x7f0000000340)={0x11, 0x6, r11, 0x1, 0x2, 0x6, @local}, 0x14) 3.725532038s ago: executing program 1 (id=6526): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="82490000ca0107001c0037800b00010067726574617000000c00028008400400ffff0000050027"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 3.644921331s ago: executing program 4 (id=6527): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xf0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x71, 0x1, "4408f68929288a702e0d1e114b27da16f370d1a42a8da44e69a708ee6b22e232133067ecf78199c904c0b6cef741cfc867f1c061e3002a13d8420da3a53e8a882c89cb7832ade488b834ca1eb9e34a04b727da9a8cc4b28a5de8aececcfecf4f36b201c58b35aecbe86a4e8e18"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9e02f13dd87731e4}}}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000280)=@ctrl_frame=@cts={{}, {0x654d}, @broadcast}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa244}], 0x1, 0x40000000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000140001002bbd7000fadbdf250a0801ff", @ANYBLOB="14000200ff010000090000000000000000000001080008002504"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) sendmsg$IEEE802154_ADD_IFACE(r5, 0x0, 0x4000040) 3.240349189s ago: executing program 1 (id=6528): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5760, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6, 0x186, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc6ee}}, 0x2, 0x7, 0x4, 0x6, 0xd4, 0x7, 0x1}, 0x9c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.076890232s ago: executing program 0 (id=6529): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) readv(r0, &(0x7f00000022c0)=[{0x0}], 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 3.047180843s ago: executing program 3 (id=6530): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500002e08000000852000002afc"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.865648267s ago: executing program 3 (id=6531): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.695223691s ago: executing program 4 (id=6532): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x3, 0x300) 124.915417ms ago: executing program 1 (id=6533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) close(0x3) 0s ago: executing program 1 (id=6534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 7505][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.996577][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.004778][T14329] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.3294'. [ 508.045756][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.292340][T14340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.313230][T14379] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 510.695968][T14366] device syzkaller0 entered promiscuous mode [ 511.612044][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.624320][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.638919][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.647020][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.655267][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.662799][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.682223][T14401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.185034][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 513.717274][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 513.898887][T14424] device syzkaller0 entered promiscuous mode [ 513.937466][T14426] device syzkaller0 entered promiscuous mode [ 514.058556][T14402] chnl_net:caif_netlink_parms(): no params data found [ 514.239369][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3326'. [ 514.574379][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.615782][T14422] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.807215][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 516.277480][T14402] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.293967][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.306381][T14402] device bridge_slave_0 entered promiscuous mode [ 516.459074][T14402] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.470885][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.485790][T14402] device bridge_slave_1 entered promiscuous mode [ 517.881341][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 519.074889][T14402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.119918][T14402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.200752][T14402] team0: Port device team_slave_0 added [ 519.224812][T14402] team0: Port device team_slave_1 added [ 519.306967][T14402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.338909][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3337'. [ 519.348321][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.386733][T14402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.465636][T14402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.485792][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.582653][T14402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.752379][T14509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.967321][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 522.335527][T14503] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 522.385567][T14402] device hsr_slave_0 entered promiscuous mode [ 522.394902][T14402] device hsr_slave_1 entered promiscuous mode [ 522.402449][T14402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.411413][T14402] Cannot create hsr debugfs directory [ 524.711274][T14402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.730684][T14402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.776952][T14533] device syzkaller0 entered promiscuous mode [ 526.688775][T14402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.700633][T14402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.856615][T14546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 526.898572][T14402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.937209][T14402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.061038][T14553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.137196][T14402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.147919][T14402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.763943][T14550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 529.782736][T14402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 529.810067][T14402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.839963][T14402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.907948][T14402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.036720][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3364'. [ 530.102165][T14402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.148039][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.174903][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.208025][T14402] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.230162][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.241165][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.250424][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.257634][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.296376][T14607] device syzkaller0 entered promiscuous mode [ 530.321750][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.331121][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.341845][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.350853][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.358053][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.369591][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.387430][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.419590][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.430756][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.441553][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.451336][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.564102][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.584610][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.626435][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.645493][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.664949][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.719206][T14402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 530.832804][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.628478][T14618] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 531.812188][T14640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3375'. [ 534.283325][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 535.333306][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.355100][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.401266][T14402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.629937][T14675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.796384][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3385'. [ 536.528586][T14679] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 538.758104][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.777456][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 539.108743][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3396'. [ 539.266095][T14741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.035857][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.079432][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.120656][T14402] device veth0_vlan entered promiscuous mode [ 541.148920][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.179490][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.223824][T14402] device veth1_vlan entered promiscuous mode [ 541.318311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.327784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.350560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.371460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.405592][T14402] device veth0_macvtap entered promiscuous mode [ 541.453425][T14402] device veth1_macvtap entered promiscuous mode [ 541.956960][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3407'. [ 542.370254][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.003539][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.014689][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.025987][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.042944][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.053249][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.065587][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.075988][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.086772][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.096674][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.108584][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.120451][T14402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.139105][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 544.157929][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 544.166363][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.175756][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.229338][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.250253][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.270736][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.286706][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.296937][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.310023][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.327299][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.354126][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.367968][T14402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.395190][T14402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.410540][T14402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.420354][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.435577][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.470408][T14402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.487185][T14402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.504588][T14402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.514359][T14402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.973890][T14804] device syzkaller0 entered promiscuous mode [ 545.145820][T14821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3418'. [ 545.398815][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.297865][T12563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.315998][T12563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.335842][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 547.443378][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.463865][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.650872][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.807622][T14867] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.3308'. [ 550.070759][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 550.117902][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.425001][T14887] device syzkaller0 entered promiscuous mode [ 552.610296][T14909] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.3440'. [ 553.217805][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 553.627358][T14944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.089768][T14974] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3454'. [ 556.291075][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 556.481673][T14989] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 556.631745][T14996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.135082][T15042] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3471'. [ 561.303494][T15044] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 561.342181][T15044] netlink: 'syz.3.3472': attribute type 1 has an invalid length. [ 561.630726][T15056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.919911][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926287][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.984599][T15064] device syzkaller0 entered promiscuous mode [ 565.977871][T15099] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3486'. [ 566.402130][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.667660][T15133] device syzkaller0 entered promiscuous mode [ 570.121661][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 571.348768][T15173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.901062][T15210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.984227][T15225] device syzkaller0 entered promiscuous mode [ 577.899211][T15230] device syzkaller0 entered promiscuous mode [ 578.421078][T15257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.224007][T15287] device syzkaller0 entered promiscuous mode [ 585.497871][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.392997][T15372] device syzkaller0 entered promiscuous mode [ 588.642539][T15389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.844175][T15382] device syzkaller0 entered promiscuous mode [ 591.698082][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.950179][T15443] device syzkaller0 entered promiscuous mode [ 593.959474][T15457] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3589'. [ 596.705767][T15496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.780386][T15504] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3603'. [ 599.881722][T15534] device syzkaller0 entered promiscuous mode [ 601.939179][T15563] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3615'. [ 602.187359][T15577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.398105][T15606] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3629'. [ 605.515134][T15615] device syzkaller0 entered promiscuous mode [ 607.590636][T15654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.450308][T15674] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3646'. [ 610.910681][T15703] device syzkaller0 entered promiscuous mode [ 610.975341][T15710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.431730][T15733] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3662'. [ 616.217430][T15781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.309636][T15783] device syzkaller0 entered promiscuous mode [ 618.682507][T15802] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3678'. [ 619.334939][T15826] device syzkaller0 entered promiscuous mode [ 619.767193][T15850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.924750][T15856] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3694'. [ 620.203732][T15858] device syzkaller0 entered promiscuous mode [ 623.560842][T15930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.576812][T15931] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3706'. [ 624.359606][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.365974][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.418005][T15946] device syzkaller0 entered promiscuous mode [ 626.487549][T15971] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3720'. [ 626.937308][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.721658][T16022] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3733'. [ 629.800635][T16013] device syzkaller0 entered promiscuous mode [ 632.285032][T16065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.716409][T16077] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3746'. [ 635.396703][T16098] device syzkaller0 entered promiscuous mode [ 636.690966][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 636.832432][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.011094][T16175] device syzkaller0 entered promiscuous mode [ 641.242888][T16195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.609967][T16202] device syzkaller0 entered promiscuous mode [ 644.515250][T16240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.515700][T16276] device syzkaller0 entered promiscuous mode [ 647.751478][T16295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.290674][ T47] device hsr_slave_0 left promiscuous mode [ 651.327312][ T47] device hsr_slave_1 left promiscuous mode [ 651.337919][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.367475][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.443901][T16356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.676969][ T47] team0 (unregistering): Port device team_slave_1 removed [ 652.726234][ T47] team0 (unregistering): Port device team_slave_0 removed [ 652.780724][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.812856][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.282841][ T47] bond0 (unregistering): Released all slaves [ 656.104244][T16402] device syzkaller0 entered promiscuous mode [ 656.112326][T16432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.475415][T16443] IPv6: addrconf: prefix option has invalid lifetime [ 656.487799][T16441] device syzkaller0 entered promiscuous mode [ 657.505373][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3860'. [ 659.458593][T16477] device syzkaller0 entered promiscuous mode [ 659.500791][T16482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.859199][T16480] device syzkaller0 entered promiscuous mode [ 659.898362][T16495] IPv6: addrconf: prefix option has invalid lifetime [ 660.226650][T16504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'. [ 662.695297][T16531] device syzkaller0 entered promiscuous mode [ 662.845027][T16538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.897350][T16537] device syzkaller0 entered promiscuous mode [ 663.234613][T16544] device syzkaller0 entered promiscuous mode [ 663.290803][T16546] IPv6: addrconf: prefix option has invalid lifetime [ 663.441245][T16553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3889'. [ 663.659754][T16560] device syzkaller0 entered promiscuous mode [ 665.242483][T16603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.503108][T16589] device syzkaller0 entered promiscuous mode [ 666.709227][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3904'. [ 669.034704][T16636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.058021][T16639] IPv6: addrconf: prefix option has invalid lifetime [ 669.099775][T16643] IPv6: addrconf: prefix option has invalid lifetime [ 669.579269][T16658] device syzkaller0 entered promiscuous mode [ 669.981613][T16671] IPv6: addrconf: prefix option has invalid lifetime [ 669.999041][T16672] device syzkaller0 entered promiscuous mode [ 670.485292][T16686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.428189][T16787] IPv6: addrconf: prefix option has invalid lifetime [ 672.728537][T16697] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.736129][T16697] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.296155][T16697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.354440][T16697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.841198][T16697] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.850288][T16697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.859623][T16697] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.868611][T16697] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.322035][T16805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.784441][T16825] IPv6: addrconf: prefix option has invalid lifetime [ 676.457752][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.512279][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.985831][T16833] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.995135][T16833] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.004484][T16833] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.014760][T16833] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.752785][T16880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.962375][T16886] device syzkaller0 entered promiscuous mode [ 677.991407][T16892] device syzkaller0 entered promiscuous mode [ 679.277703][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.285213][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.919770][T16901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.974775][T16901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.457865][T16901] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.466802][T16901] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.475881][T16901] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.485245][T16901] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.789210][T16934] device syzkaller0 entered promiscuous mode [ 680.819170][T16942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.896317][T16946] device syzkaller0 entered promiscuous mode [ 683.711149][T16990] device syzkaller0 entered promiscuous mode [ 683.830691][T16998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.106118][T17008] device syzkaller0 entered promiscuous mode [ 685.216289][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.223909][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.799064][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805476][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.980558][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.032819][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.509711][T17013] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.518710][T17013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.527683][T17013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.537241][T17013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.813343][T17052] device syzkaller0 entered promiscuous mode [ 687.059506][T17074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.913038][T17123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.073643][T17129] device syzkaller0 entered promiscuous mode [ 690.234926][T17134] device syzkaller0 entered promiscuous mode [ 690.983680][T17161] device syzkaller0 entered promiscuous mode [ 691.419898][T17179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.498737][T17177] device syzkaller0 entered promiscuous mode [ 691.940742][T17202] device syzkaller0 entered promiscuous mode [ 692.803172][T17209] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.811220][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.374354][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.400377][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.945410][T17209] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.954484][T17209] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.963882][T17209] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.972880][T17209] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.297532][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4105'. [ 694.355132][T17229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.421082][T17240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.646795][T17244] device syzkaller0 entered promiscuous mode [ 695.034979][T17253] device syzkaller0 entered promiscuous mode [ 697.457991][T17291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.837609][T17304] device syzkaller0 entered promiscuous mode [ 698.418995][T17329] device syzkaller0 entered promiscuous mode [ 698.909217][T17346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.084194][T17354] device syzkaller0 entered promiscuous mode [ 699.779661][T17372] device syzkaller0 entered promiscuous mode [ 700.134420][T17385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.610619][T17394] device syzkaller0 entered promiscuous mode [ 700.858684][T17408] device syzkaller0 entered promiscuous mode [ 701.527670][T17430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.883052][T17440] device syzkaller0 entered promiscuous mode [ 702.345825][T17450] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 702.381548][T17449] device syzkaller0 entered promiscuous mode [ 702.906580][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 702.907842][T17469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.405860][T17492] device syzkaller0 entered promiscuous mode [ 703.501756][T17493] device syzkaller0 entered promiscuous mode [ 704.506949][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.584407][T17529] device syzkaller0 entered promiscuous mode [ 705.036725][T17544] device syzkaller0 entered promiscuous mode [ 705.788951][T17568] device syzkaller0 entered promiscuous mode [ 705.819932][T17571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.193411][T17575] device syzkaller0 entered promiscuous mode [ 706.296634][T17584] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 706.368307][T17584] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 709.345546][T17625] device syzkaller0 entered promiscuous mode [ 709.477617][T17647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.108242][T17691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.529333][T17701] device syzkaller0 entered promiscuous mode [ 713.081612][T17717] device syzkaller0 entered promiscuous mode [ 713.560813][T17742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.573652][T17740] device syzkaller0 entered promiscuous mode [ 714.405814][T17772] device syzkaller0 entered promiscuous mode [ 714.714219][T17773] device syzkaller0 entered promiscuous mode [ 715.127448][T17795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.453284][T17808] device syzkaller0 entered promiscuous mode [ 715.877186][ T4276] Bluetooth: hci3: command 0x0c76 tx timeout [ 716.197327][T17828] device syzkaller0 entered promiscuous mode [ 716.732989][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.785258][T17845] device syzkaller0 entered promiscuous mode [ 717.167559][T17856] device syzkaller0 entered promiscuous mode [ 718.260750][T17890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.325095][T17883] device syzkaller0 entered promiscuous mode [ 718.555452][T17888] device syzkaller0 entered promiscuous mode [ 721.307630][T17936] device syzkaller0 entered promiscuous mode [ 721.396401][T17940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.973544][T17960] device syzkaller0 entered promiscuous mode [ 722.897827][T17997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.915703][T17993] device syzkaller0 entered promiscuous mode [ 723.345393][T18009] device syzkaller0 entered promiscuous mode [ 724.026499][T18036] device syzkaller0 entered promiscuous mode [ 724.223039][T18041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.401860][T18047] device syzkaller0 entered promiscuous mode [ 725.357401][T18083] device syzkaller0 entered promiscuous mode [ 725.568918][T18089] device syzkaller0 entered promiscuous mode [ 725.827199][T18096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.265466][T18115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4447'. [ 726.631906][T18127] device syzkaller0 entered promiscuous mode [ 726.843440][T18135] device syzkaller0 entered promiscuous mode [ 727.303462][T18157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.824413][T18173] device syzkaller0 entered promiscuous mode [ 728.247358][T18183] device syzkaller0 entered promiscuous mode [ 728.764668][T18207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.990041][T18216] device syzkaller0 entered promiscuous mode [ 729.553835][T18238] device syzkaller0 entered promiscuous mode [ 730.110542][T18254] device syzkaller0 entered promiscuous mode [ 730.488746][T18267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.807340][T18282] device syzkaller0 entered promiscuous mode [ 731.217616][T18293] device syzkaller0 entered promiscuous mode [ 731.781825][T18318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.974893][T18324] device syzkaller0 entered promiscuous mode [ 732.396555][T18332] device syzkaller0 entered promiscuous mode [ 733.083469][T18363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.165275][T18357] device syzkaller0 entered promiscuous mode [ 733.452653][T18373] device syzkaller0 entered promiscuous mode [ 734.496860][T18409] device syzkaller0 entered promiscuous mode [ 734.736808][T18422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.012385][T18408] device syzkaller0 entered promiscuous mode [ 737.540685][T18466] device syzkaller0 entered promiscuous mode [ 737.641384][T18471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.143427][T18488] device syzkaller0 entered promiscuous mode [ 738.926799][T18509] device syzkaller0 entered promiscuous mode [ 739.145694][T18521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.180520][T18523] device syzkaller0 entered promiscuous mode [ 740.036799][T18556] device syzkaller0 entered promiscuous mode [ 740.203682][T18561] device syzkaller0 entered promiscuous mode [ 740.747407][T18579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.235212][T18596] device syzkaller0 entered promiscuous mode [ 741.594390][T18595] device syzkaller0 entered promiscuous mode [ 743.877610][T18638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.041026][T18647] device syzkaller0 entered promiscuous mode [ 744.582758][T18665] device syzkaller0 entered promiscuous mode [ 745.316942][T18693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.360612][T18687] device syzkaller0 entered promiscuous mode [ 746.473513][T18733] device syzkaller0 entered promiscuous mode [ 746.963777][T18749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.240438][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.247182][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.898361][T18779] device syzkaller0 entered promiscuous mode [ 748.461490][T18805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.182702][T18832] device syzkaller0 entered promiscuous mode [ 749.853502][T18857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.184180][T18873] device syzkaller0 entered promiscuous mode [ 751.117280][T18906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.672817][T18920] device syzkaller0 entered promiscuous mode [ 752.295984][T18948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.215180][T18980] device syzkaller0 entered promiscuous mode [ 753.775382][T19004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.813867][T19041] device syzkaller0 entered promiscuous mode [ 755.464249][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.394948][T19101] device syzkaller0 entered promiscuous mode [ 757.124231][T19126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.336166][T19138] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.807240][T19147] device syzkaller0 entered promiscuous mode [ 758.310417][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'. [ 758.606226][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.343095][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4881'. [ 759.428801][T19213] device syzkaller0 entered promiscuous mode [ 759.668337][T19227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4886'. [ 759.998106][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4890'. [ 760.028228][T19237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.475888][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4898'. [ 761.573719][T19280] device syzkaller0 entered promiscuous mode [ 761.853387][T19305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.400914][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4924'. [ 762.494876][T19332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4924'. [ 763.131614][T19339] device syzkaller0 entered promiscuous mode [ 763.820127][T19372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.626562][T19399] device syzkaller0 entered promiscuous mode [ 764.944748][T19410] device syzkaller0 entered promiscuous mode [ 765.309058][T19433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.897887][T19465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.974745][T19472] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.998464][T19472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4976'. [ 768.114765][T19475] device syzkaller0 entered promiscuous mode [ 768.984015][T19502] IPv6: NLM_F_CREATE should be specified when creating new route [ 769.055925][T19502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4988'. [ 769.322472][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4995'. [ 769.334005][T19522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.611606][T19507] device syzkaller0 entered promiscuous mode [ 770.299540][T19551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5006'. [ 770.458314][T19556] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.531718][T19556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5010'. [ 770.967252][T19584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.066059][T19570] device syzkaller0 entered promiscuous mode [ 771.365201][T19594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5021'. [ 771.813569][T19606] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.866604][T19606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5026'. [ 772.213511][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5035'. [ 772.429484][T19627] device syzkaller0 entered promiscuous mode [ 772.735130][T19642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.210913][T19659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5047'. [ 773.230316][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5046'. [ 773.832752][T19683] device syzkaller0 entered promiscuous mode [ 774.263603][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5061'. [ 774.370809][T19697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.105137][T19721] device syzkaller0 entered promiscuous mode [ 775.674066][T19747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.131247][T19764] device syzkaller0 entered promiscuous mode [ 776.583141][T19779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.598231][T19779] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 777.050862][T19793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.076684][T19797] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5106'. [ 778.016231][T19824] device syzkaller0 entered promiscuous mode [ 778.227590][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5118'. [ 778.757878][T19857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.880987][T19866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5127'. [ 778.934079][T19866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5127'. [ 778.968453][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 779.703428][T19886] device syzkaller0 entered promiscuous mode [ 780.127369][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 780.355486][T19910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 780.377279][T19913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.408777][T19910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5145'. [ 780.877884][T19934] device syzkaller0 entered promiscuous mode [ 781.733588][T19959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.179333][T19974] device syzkaller0 entered promiscuous mode [ 782.949844][T20005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.326660][T20016] device syzkaller0 entered promiscuous mode [ 783.681651][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5196'. [ 784.428651][T20057] device syzkaller0 entered promiscuous mode [ 784.531365][T20060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.837671][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 785.264577][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5220'. [ 785.292998][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5219'. [ 785.743627][T20094] device syzkaller0 entered promiscuous mode [ 785.850076][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5227'. [ 786.088829][T20113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.185252][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 786.725584][T20136] device syzkaller1 entered promiscuous mode [ 786.982461][T20138] device syzkaller0 entered promiscuous mode [ 787.232678][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5246'. [ 787.529696][T20162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.763704][T20175] device vlan0 entered promiscuous mode [ 788.043850][T20178] device syzkaller0 entered promiscuous mode [ 788.277356][ T4276] Bluetooth: hci1: command 0x0405 tx timeout [ 788.896582][T20214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.039414][T20223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5277'. [ 789.211120][T20212] device syzkaller0 entered promiscuous mode [ 789.705519][T20246] netlink: 'syz.3.5286': attribute type 1 has an invalid length. [ 789.717108][T20246] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5286'. [ 789.905462][T20252] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5288'. [ 790.508290][T20265] device syzkaller0 entered promiscuous mode [ 790.522875][T20277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.014199][T20294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5304'. [ 791.609656][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5315'. [ 791.762137][T20318] device syzkaller0 entered promiscuous mode [ 791.770838][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 792.215428][T20335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.626620][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5326'. [ 792.680177][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 793.195891][T20368] device syzkaller0 entered promiscuous mode [ 793.704994][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5340'. [ 793.954638][T20389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.007456][T20391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'. [ 794.402101][T20404] device syzkaller0 entered promiscuous mode [ 794.727183][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5352'. [ 795.442722][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5358'. [ 795.793796][T20438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.867115][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5364'. [ 796.475285][T20453] device syzkaller0 entered promiscuous mode [ 797.204635][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5373'. [ 797.384341][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5377'. [ 797.608864][T20494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.042805][T20502] device syzkaller0 entered promiscuous mode [ 798.754709][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'. [ 799.111594][T20537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.132675][T20350] Set syz1 is full, maxelem 65536 reached [ 799.493496][T20548] device syzkaller0 entered promiscuous mode [ 799.944296][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5405'. [ 800.372811][T20580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.707325][T20588] device syzkaller0 entered promiscuous mode [ 801.029476][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5422'. [ 801.658505][T20631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.951144][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5436'. [ 801.960925][T20636] device syzkaller0 entered promiscuous mode [ 803.187344][T20690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.480620][T20697] device syzkaller0 entered promiscuous mode [ 804.068514][T20724] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5467'. [ 804.474194][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5474'. [ 804.635500][T20748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.658595][T20742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5474'. [ 804.876844][T20756] device syzkaller0 entered promiscuous mode [ 805.248103][T20764] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5481'. [ 806.152845][T20810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.217178][T20809] device syzkaller0 entered promiscuous mode [ 806.684345][T20820] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5500'. [ 807.809200][T20839] device syzkaller0 entered promiscuous mode [ 807.961682][T20869] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5514'. [ 807.992637][T20874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.682663][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.689385][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.914723][T20918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.017846][T20916] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5529'. [ 811.063676][T20923] device syzkaller0 entered promiscuous mode [ 811.124522][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 811.890208][T20958] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5546'. [ 812.089016][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 812.709879][T20970] No such timeout policy "syz1" [ 812.797753][T20978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.884711][T20985] device syzkaller0 entered promiscuous mode [ 813.197205][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 813.514534][T21006] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.5565'. [ 813.701015][T21017] No such timeout policy "syz1" [ 814.452737][T21037] device syzkaller0 entered promiscuous mode [ 814.502499][T21044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.911895][T21064] No such timeout policy "syz1" [ 815.683983][T21093] device syzkaller0 entered promiscuous mode [ 816.746328][T21128] No such timeout policy "syz1" [ 816.852103][T21138] device macsec0 entered promiscuous mode [ 816.866277][T21138] batman_adv: batadv0: Adding interface: macsec0 [ 816.872924][T21138] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.899197][T21138] batman_adv: batadv0: Interface activated: macsec0 [ 817.042147][T21147] device syzkaller0 entered promiscuous mode [ 818.446030][T21082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.866540][T21195] No such timeout policy "syz1" [ 819.110204][T21193] device syzkaller0 entered promiscuous mode [ 819.805833][T21228] netlink: 'syz.4.5635': attribute type 10 has an invalid length. [ 819.824399][T21228] team0: Port device dummy0 added [ 821.375504][T21250] device syzkaller0 entered promiscuous mode [ 822.660254][T21215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.919809][T21281] device syzkaller1 entered promiscuous mode [ 823.175094][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5655'. [ 823.185240][T21295] device syzkaller0 entered promiscuous mode [ 823.513544][T21305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.867560][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'. [ 824.019304][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'. [ 824.375226][T21336] device syzkaller1 entered promiscuous mode [ 824.851539][T21342] device syzkaller0 entered promiscuous mode [ 826.575189][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5678'. [ 826.724773][T16765] device hsr_slave_0 left promiscuous mode [ 826.761639][T21314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.761770][T16765] device hsr_slave_1 left promiscuous mode [ 826.809315][T16765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.832986][T16765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.845161][T21367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.874396][T16765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.889787][T16765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.953870][T16765] device veth1_macvtap left promiscuous mode [ 826.976581][T16765] device veth0_macvtap left promiscuous mode [ 827.010819][T16765] device veth1_vlan left promiscuous mode [ 827.032896][T16765] device veth0_vlan left promiscuous mode [ 828.144443][T21324] Set syz1 is full, maxelem 65536 reached [ 828.483010][T16765] team0 (unregistering): Port device team_slave_1 removed [ 828.530062][T16765] team0 (unregistering): Port device team_slave_0 removed [ 828.573961][T16765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.610364][T16765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.954975][T16765] bond0 (unregistering): Released all slaves [ 829.003887][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5683'. [ 829.058459][T21382] device syzkaller1 entered promiscuous mode [ 829.382394][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5689'. [ 829.485987][T21418] netlink: 'syz.2.5691': attribute type 11 has an invalid length. [ 829.511296][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5691'. [ 830.044774][T21434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.350487][T21446] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 830.370190][T21446] batman_adv: batadv0: Adding interface: gretap1 [ 830.376799][T21446] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.413367][T21446] batman_adv: batadv0: Interface activated: gretap1 [ 830.918313][T21460] device syzkaller0 entered promiscuous mode [ 830.925468][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5703'. [ 831.325868][T21467] device syzkaller1 entered promiscuous mode [ 831.628259][T21483] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 831.696506][T21483] batman_adv: batadv0: Adding interface: gretap1 [ 831.721805][T21483] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.804515][T21483] batman_adv: batadv0: Interface activated: gretap1 [ 832.017299][T21496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.290020][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 832.687268][T21509] device syzkaller0 entered promiscuous mode [ 833.262405][T21529] device syzkaller1 entered promiscuous mode [ 833.307838][T21514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5722'. [ 833.627645][T21527] device syzkaller0 entered promiscuous mode [ 834.069516][T21541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 834.104870][T21541] batman_adv: batadv0: Adding interface: gretap1 [ 834.111876][T21541] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.162304][T21541] batman_adv: batadv0: Interface activated: gretap1 [ 834.373276][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5729'. [ 834.698863][T21557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.805828][T21437] Set syz1 is full, maxelem 65536 reached [ 835.082520][T21567] device syzkaller0 entered promiscuous mode [ 835.438034][T21580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 835.460857][T21578] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.5753'. [ 835.471869][T21580] batman_adv: batadv0: Adding interface: gretap1 [ 835.496738][T21580] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.576052][T21580] batman_adv: batadv0: Interface activated: gretap1 [ 835.594055][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'. [ 835.964152][T21606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.569639][T21625] device syzkaller0 entered promiscuous mode [ 836.807840][T21628] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5762'. [ 836.829572][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5763'. [ 837.589125][T21647] device syzkaller0 entered promiscuous mode [ 837.609333][T21658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.017159][T21664] device syzkaller0 entered promiscuous mode [ 838.182476][T21666] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5775'. [ 838.436445][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5776'. [ 838.646544][T21678] device syzkaller1 entered promiscuous mode [ 839.439127][T21696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.727054][T21702] device syzkaller0 entered promiscuous mode [ 839.830179][T21605] Set syz1 is full, maxelem 65536 reached [ 840.035144][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 840.805320][T21724] device syzkaller1 entered promiscuous mode [ 841.158894][T21739] device syzkaller0 entered promiscuous mode [ 841.550461][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5806'. [ 841.572654][T21750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.083888][T21775] device syzkaller1 entered promiscuous mode [ 842.244930][T21773] device syzkaller0 entered promiscuous mode [ 842.386688][T21780] device syzkaller0 entered promiscuous mode [ 842.656182][T21793] batman_adv: batadv0: Interface deactivated: gretap1 [ 843.058931][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.464582][T21824] batman_adv: batadv0: Interface deactivated: macsec0 [ 843.632146][T21831] device syzkaller0 entered promiscuous mode [ 844.509178][T21853] batman_adv: batadv0: Interface deactivated: gretap1 [ 844.527819][T21855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 844.537873][T21855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 844.546261][T21855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 844.555408][T21855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 844.565149][T21855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 844.573011][T21855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.673811][T21860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.455348][T21854] chnl_net:caif_netlink_parms(): no params data found [ 845.495156][T21873] device syzkaller0 entered promiscuous mode [ 845.640003][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5859'. [ 846.277790][T21854] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.284984][T21854] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.362626][T21854] device bridge_slave_0 entered promiscuous mode [ 846.449325][T21854] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.456521][T21854] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.477302][T21919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.498017][T21854] device bridge_slave_1 entered promiscuous mode [ 846.597796][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 846.935015][T21854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.029957][T21854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.039647][T21918] device syzkaller0 entered promiscuous mode [ 847.132229][T21854] team0: Port device team_slave_0 added [ 847.153022][T21854] team0: Port device team_slave_1 added [ 847.490807][T21945] device syzkaller0 entered promiscuous mode [ 847.501926][T21854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.510932][T21854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.544267][T21854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.634322][T21854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.654435][T21854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.726571][T21854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.001118][T21854] device hsr_slave_0 entered promiscuous mode [ 848.023654][T21854] device hsr_slave_1 entered promiscuous mode [ 848.641347][T21991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.677319][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 848.961513][T16769] device hsr_slave_0 left promiscuous mode [ 848.998352][T16769] device hsr_slave_1 left promiscuous mode [ 849.006652][T16769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.031795][T16769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.053688][T16769] batman_adv: batadv0: Removing interface: macsec0 [ 849.798462][T16769] team0 (unregistering): Port device team_slave_1 removed [ 849.843457][T16769] team0 (unregistering): Port device team_slave_0 removed [ 849.886052][T16769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.933815][T16769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.289903][T16769] bond0 (unregistering): Released all slaves [ 850.757226][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 851.240566][T21854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 851.341704][T21854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 851.379348][T22048] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.5902'. [ 851.389408][T21854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 851.777584][T21854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.020602][T21854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.056617][T21854] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.102003][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.126724][T22074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.146325][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.160083][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 852.182621][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 852.194724][T16765] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.201957][T16765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.222251][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 852.242436][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 852.263637][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.293173][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.300392][T16775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.372568][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 852.388888][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 852.403067][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 852.416373][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 852.425931][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.453933][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.485868][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.531462][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.563188][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.592929][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.640999][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.682891][T21854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.837170][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 853.157527][T22089] device syzkaller0 entered promiscuous mode [ 853.196432][T22108] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.5905'. [ 853.373979][T22100] device syzkaller0 entered promiscuous mode [ 854.171993][T22130] device syzkaller0 entered promiscuous mode [ 854.195328][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 854.211295][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.220879][ T3933] device veth1_vlan left promiscuous mode [ 854.251467][T21854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.401326][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.422926][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 854.506846][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 854.524410][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.565119][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.586857][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 854.616430][T21854] device veth0_vlan entered promiscuous mode [ 854.654335][T21854] device veth1_vlan entered promiscuous mode [ 854.748106][T22152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.762612][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 854.771917][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 854.780939][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 854.790639][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 854.810379][T21854] device veth0_macvtap entered promiscuous mode [ 854.834786][T21854] device veth1_macvtap entered promiscuous mode [ 854.878296][T21854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.886222][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 854.901359][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 854.910335][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.920201][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.932957][T21854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.945411][T21854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.954576][T21854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.963587][T21854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.974281][T21854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.004324][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 855.015029][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 855.143478][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.151676][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.161082][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 855.290783][T16769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.299838][T16769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.324128][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 856.980474][T22235] netlink: 'syz.3.5927': attribute type 72 has an invalid length. [ 857.113499][T22202] device syzkaller0 entered promiscuous mode [ 857.420883][T22244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.824071][T22257] device syzkaller0 entered promiscuous mode [ 857.889914][T22274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5935'. [ 858.256835][T22285] netlink: 'syz.1.5941': attribute type 72 has an invalid length. [ 859.279797][T22331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.307796][T22293] device syzkaller0 entered promiscuous mode [ 861.759278][T22362] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5956'. [ 861.768845][T22362] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 862.592804][T22345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.865164][T22397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.576117][T22419] device syzkaller0 entered promiscuous mode [ 864.000892][T22436] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5972'. [ 865.622914][T22498] device syzkaller0 entered promiscuous mode [ 867.227602][T22453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.158477][T22542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.230204][T22548] device syzkaller0 entered promiscuous mode [ 868.490319][T22554] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5999'. [ 869.039473][T22550] syz.2.5997 (22550) used greatest stack depth: 18128 bytes left [ 869.112554][T22571] device syzkaller0 entered promiscuous mode [ 869.744788][T21855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.757108][T21855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.766475][T21855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.776245][T21855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.784469][T21855] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 869.792381][T21855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 870.071439][T22582] chnl_net:caif_netlink_parms(): no params data found [ 870.119735][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.126170][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.165496][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.172880][T22582] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.181502][T22582] device bridge_slave_0 entered promiscuous mode [ 870.223102][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.230638][T22582] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.239865][T22582] device bridge_slave_1 entered promiscuous mode [ 870.266657][T22582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.279953][T22582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.312801][T22582] team0: Port device team_slave_0 added [ 870.322540][T22582] team0: Port device team_slave_1 added [ 870.372180][T22582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.379723][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.405974][T22582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.460429][T22582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.471398][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.499755][T22582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.567164][T22582] device hsr_slave_0 entered promiscuous mode [ 870.581196][T22582] device hsr_slave_1 entered promiscuous mode [ 870.593728][T22582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.601880][T22582] Cannot create hsr debugfs directory [ 871.103551][T16777] batman_adv: batadv0: Removing interface: gretap1 [ 871.449204][T16777] device hsr_slave_0 left promiscuous mode [ 871.455721][T16777] device hsr_slave_1 left promiscuous mode [ 871.462696][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.471393][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.479753][T16777] device bridge_slave_1 left promiscuous mode [ 871.486061][T16777] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.495612][T16777] device bridge_slave_0 left promiscuous mode [ 871.502141][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.662877][T22562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.887081][T21855] Bluetooth: hci5: command 0x0409 tx timeout [ 871.983690][T22603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.448104][T16777] team0 (unregistering): Port device team_slave_1 removed [ 872.505280][T16777] team0 (unregistering): Port device team_slave_0 removed [ 872.557645][T16777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.616223][T16777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.911917][T16777] bond0 (unregistering): Released all slaves [ 873.067557][T22582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 873.097310][T22582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 873.133032][T22582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 873.201172][T22582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 873.714620][T22582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.965406][T21855] Bluetooth: hci5: command 0x041b tx timeout [ 874.156477][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 874.170090][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 874.210615][T22582] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.281678][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 874.301339][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 874.347857][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.355061][T16767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.404006][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 874.456028][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 874.495710][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 874.525372][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.532622][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.572939][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 874.643457][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 874.657629][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.671779][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.689704][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.718955][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.785932][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.838445][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.861423][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.905932][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.955148][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.990259][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 875.097105][T22669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.387178][T22677] device syzkaller0 entered promiscuous mode [ 875.422262][T22681] device syzkaller0 entered promiscuous mode [ 875.720987][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.741287][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.767608][T22582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.855884][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 875.872397][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 875.919092][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 875.940621][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 875.965731][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.991588][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.014513][T22582] device veth0_vlan entered promiscuous mode [ 876.038724][T21855] Bluetooth: hci5: command 0x040f tx timeout [ 876.066418][T22582] device veth1_vlan entered promiscuous mode [ 876.187195][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 876.195684][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 876.234802][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 876.246787][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 876.263185][T22582] device veth0_macvtap entered promiscuous mode [ 876.279342][T22582] device veth1_macvtap entered promiscuous mode [ 876.303197][T22582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.314153][T22582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.327081][T22582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.341151][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 876.363575][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 876.375862][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 876.416893][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 876.449379][T22582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.486994][T22582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.518740][T22582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.526644][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 876.544723][T16769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 876.584651][T22582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.622805][T22582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.667857][T22582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.690785][T22582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.928525][T16767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.955974][T16767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.999364][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.050530][T16771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.062317][T16771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.073707][T16767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 878.017809][T22754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.117094][T21855] Bluetooth: hci5: command 0x0419 tx timeout [ 878.232755][T22763] device syzkaller0 entered promiscuous mode [ 878.468091][T22771] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 880.027129][T22833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.045451][T22825] device syzkaller0 entered promiscuous mode [ 880.070694][T22814] device syzkaller0 entered promiscuous mode [ 880.278752][T22841] device syzkaller0 entered promiscuous mode [ 880.337589][T22841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6059'. [ 880.372092][T22841] unsupported nlmsg_type 40 [ 880.622460][T22855] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 881.887340][T22903] device syzkaller0 entered promiscuous mode [ 881.920148][T22903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6073'. [ 881.947810][T22905] device syzkaller0 entered promiscuous mode [ 882.159580][T22913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.531288][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 883.099220][T22951] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 883.720106][T22973] device syzkaller0 entered promiscuous mode [ 883.999202][T22988] device syzkaller0 entered promiscuous mode [ 884.018762][T22988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6091'. [ 884.308467][T22998] device syzkaller0 entered promiscuous mode [ 885.781558][T22946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.397070][T23035] netlink: 'syz.1.6101': attribute type 1 has an invalid length. [ 886.414919][T23036] device syzkaller0 entered promiscuous mode [ 886.633953][T23049] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 886.836792][T23058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.311200][T23064] device syzkaller0 entered promiscuous mode [ 887.347854][T23064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6107'. [ 888.181686][T23087] device syzkaller0 entered promiscuous mode [ 888.231923][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.253054][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.263337][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.281927][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.289794][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 888.297903][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.520560][T23098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6120'. [ 888.537140][T23100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.582220][T23103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6120'. [ 888.815817][T23098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6120'. [ 888.973600][T23103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6120'. [ 889.866215][T23091] chnl_net:caif_netlink_parms(): no params data found [ 890.367173][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 890.378175][T23091] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.405721][T23091] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.472298][T23091] device bridge_slave_0 entered promiscuous mode [ 890.617353][T23091] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.637030][T23091] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.656158][T23091] device bridge_slave_1 entered promiscuous mode [ 890.743526][T23091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.779992][T23176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.801315][T23091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.919626][T23091] team0: Port device team_slave_0 added [ 890.938857][T23091] team0: Port device team_slave_1 added [ 891.001033][T23171] device syzkaller0 entered promiscuous mode [ 891.014981][T16773] batman_adv: batadv0: Interface deactivated: gretap1 [ 891.086625][T16773] batman_adv: batadv0: Removing interface: gretap1 [ 891.148848][T23091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.155875][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.182395][T23091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.400077][T23091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.407597][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.442610][T23091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.585451][T23192] device syzkaller1 entered promiscuous mode [ 892.060782][T23091] device hsr_slave_0 entered promiscuous mode [ 892.080737][T23091] device hsr_slave_1 entered promiscuous mode [ 892.092634][T23091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.111448][T23091] Cannot create hsr debugfs directory [ 892.437254][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 892.487677][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.520547][T16773] device hsr_slave_0 left promiscuous mode [ 892.547712][T16773] device hsr_slave_1 left promiscuous mode [ 892.574717][T16773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.634173][T16773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.654308][T16773] device bridge_slave_1 left promiscuous mode [ 892.661973][T16773] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.681899][T16773] device bridge_slave_0 left promiscuous mode [ 892.696419][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.656274][T16773] team0 (unregistering): Port device team_slave_1 removed [ 893.696683][T16773] team0 (unregistering): Port device team_slave_0 removed [ 893.738202][T16773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.780823][T16773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.106074][T16773] bond0 (unregistering): Released all slaves [ 894.522797][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 894.601107][T23268] device syzkaller1 entered promiscuous mode [ 895.235344][T23296] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6156'. [ 895.685964][T23304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.763571][T23091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.804196][T23091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.846138][T23310] netlink: 'syz.1.6161': attribute type 1 has an invalid length. [ 895.926369][T23311] device bond1 entered promiscuous mode [ 895.973344][T23311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 895.985046][T23091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.033414][T23091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.463569][T23091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.525448][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.541547][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 896.556836][T23091] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.597046][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 896.610672][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 896.636104][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.644872][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.652053][T16775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.675444][T23317] device syzkaller0 entered promiscuous mode [ 896.693878][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 896.709981][T23323] device syzkaller1 entered promiscuous mode [ 896.960669][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 896.977958][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 896.996849][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.004066][T16771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.115577][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 897.139053][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 897.196534][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 897.223894][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 897.252445][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 897.285103][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 897.363569][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 897.428874][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 897.449509][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 897.492717][T23091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.533791][T23091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 897.569006][T23365] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6174'. [ 897.599505][T23365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 897.621814][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 897.642763][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 897.661910][T23375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.709443][T23369] device syzkaller0 entered promiscuous mode [ 898.317692][T23399] device syzkaller1 entered promiscuous mode [ 898.356718][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 898.375319][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 898.460664][T23091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.534359][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 898.547950][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 898.613960][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 898.647689][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 898.667769][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 898.707444][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 898.755069][T23091] device veth0_vlan entered promiscuous mode [ 898.875452][T23407] device syzkaller0 entered promiscuous mode [ 898.920769][T23091] device veth1_vlan entered promiscuous mode [ 899.075042][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 899.123654][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 899.147903][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 899.174328][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.207988][T23091] device veth0_macvtap entered promiscuous mode [ 899.242105][T23091] device veth1_macvtap entered promiscuous mode [ 899.279086][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.295643][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.314880][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.339543][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.357050][T23091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.365708][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 899.381825][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 899.393832][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.416778][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.435578][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.449088][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.464171][T23091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.476168][T23091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.492803][T23091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.518558][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.538643][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.570419][T23091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.598588][T23091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.623382][T23091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.642913][T23091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.899290][T16775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.962048][T16775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.002341][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 900.049128][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.077377][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.135292][T23451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.327711][T23453] device syzkaller1 entered promiscuous mode [ 900.981904][T23469] device syzkaller0 entered promiscuous mode [ 901.655513][T23505] device syzkaller1 entered promiscuous mode [ 901.746517][T23498] device syzkaller0 entered promiscuous mode [ 902.274766][T23522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.946597][T23540] device syzkaller0 entered promiscuous mode [ 902.983523][T23547] device syzkaller1 entered promiscuous mode [ 904.049788][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.165765][T23576] device syzkaller1 entered promiscuous mode [ 904.580828][T23578] device syzkaller0 entered promiscuous mode [ 905.147874][T23598] device syzkaller1 entered promiscuous mode [ 905.442273][T23612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.618605][T23617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6240'. [ 905.631340][T23617] netlink: 'syz.4.6240': attribute type 10 has an invalid length. [ 905.641392][T23617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.651847][T23617] team0: Port device batadv0 added [ 905.682926][T23618] device syzkaller0 entered promiscuous mode [ 905.858812][T23621] device syzkaller0 entered promiscuous mode [ 906.489722][T23632] device syzkaller0 entered promiscuous mode [ 906.798003][T23641] device syzkaller1 entered promiscuous mode [ 907.070067][T23652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 907.097070][T23654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.122276][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6253'. [ 908.008468][T23671] device syzkaller0 entered promiscuous mode [ 908.187588][T23672] device syzkaller1 entered promiscuous mode [ 908.962859][T23700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.995129][T23700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6269'. [ 909.401382][T23710] device syzkaller0 entered promiscuous mode [ 909.422535][T23714] device syzkaller1 entered promiscuous mode [ 910.977150][T23753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.049799][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6288'. [ 911.060465][T23755] device syzkaller0 entered promiscuous mode [ 911.202716][T23757] device syzkaller1 entered promiscuous mode [ 912.374304][T23784] device syzkaller0 entered promiscuous mode [ 912.524125][T23786] device syzkaller1 entered promiscuous mode [ 912.968402][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6302'. [ 914.385234][T23761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.151151][T23813] device syzkaller1 entered promiscuous mode [ 915.431173][T23811] device syzkaller0 entered promiscuous mode [ 915.556488][T23826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.571937][T23826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6314'. [ 918.544983][T23828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.832853][ T4584] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 919.048773][T23859] device syzkaller1 entered promiscuous mode [ 919.144714][T23861] tipc: Invalid UDP bearer configuration [ 919.144760][T23861] tipc: Enabling of bearer rejected, failed to enable media [ 919.450705][T23872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.544734][T23870] device syzkaller0 entered promiscuous mode [ 919.561840][T23872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6328'. [ 922.623786][T23879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.887421][T23908] device syzkaller1 entered promiscuous mode [ 923.037072][T23918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.136262][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6343'. [ 923.154158][T23907] device syzkaller0 entered promiscuous mode [ 923.535338][T23925] device syzkaller0 entered promiscuous mode [ 923.922271][T16773] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 924.242885][T23951] device syzkaller1 entered promiscuous mode [ 924.436759][T23953] device syzkaller0 entered promiscuous mode [ 924.693341][T23965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.712705][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6360'. [ 928.022892][T23991] device syzkaller1 entered promiscuous mode [ 928.038631][T23974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.268803][T23994] device macvlan0 entered promiscuous mode [ 928.274820][T23994] netlink: 'syz.4.6370': attribute type 1 has an invalid length. [ 928.313614][T23994] netlink: 'syz.4.6370': attribute type 2 has an invalid length. [ 928.338030][T23995] device syzkaller1 entered promiscuous mode [ 928.376805][T16765] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 928.560145][T24001] device syzkaller0 entered promiscuous mode [ 928.745344][T24015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.784869][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6375'. [ 929.126464][T24028] device syzkaller0 entered promiscuous mode [ 929.629856][T24041] device macvlan0 entered promiscuous mode [ 929.636177][T24041] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 929.651136][T24041] netlink: 'syz.0.6383': attribute type 2 has an invalid length. [ 930.081362][T24056] device syzkaller0 entered promiscuous mode [ 930.608097][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6391'. [ 931.559378][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.565800][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.776840][T24043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.203301][T24089] device macvlan0 entered promiscuous mode [ 934.220770][T24089] netlink: 'syz.1.6397': attribute type 1 has an invalid length. [ 934.240490][T24089] netlink: 'syz.1.6397': attribute type 2 has an invalid length. [ 934.448258][T24099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.551169][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 934.590025][T24102] device syzkaller0 entered promiscuous mode [ 937.507278][T24104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.975583][T24133] device syzkaller0 entered promiscuous mode [ 938.392875][T24147] device syzkaller0 entered promiscuous mode [ 938.527406][T24149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.568020][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 939.525375][T24171] device syzkaller0 entered promiscuous mode [ 940.060884][T24180] device syzkaller0 entered promiscuous mode [ 941.744023][T24156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.031600][T24193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.041635][T24209] device syzkaller0 entered promiscuous mode [ 946.025266][T24211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.496524][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.589002][T24232] device syzkaller0 entered promiscuous mode [ 947.309251][T24259] device syzkaller0 entered promiscuous mode [ 948.850336][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.861177][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.871349][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.879497][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.890493][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 948.899959][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.044221][T24271] chnl_net:caif_netlink_parms(): no params data found [ 949.086353][T16777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.134959][T24271] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.142329][T24271] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.155546][T24271] device bridge_slave_0 entered promiscuous mode [ 949.182755][T16777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.199197][T24271] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.206416][T24271] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.215213][T24271] device bridge_slave_1 entered promiscuous mode [ 949.241437][T24271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.255356][T24271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.174529][T24257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.997368][T21855] Bluetooth: hci2: command 0x0409 tx timeout [ 951.688955][T16777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.738403][T24271] team0: Port device team_slave_0 added [ 951.770354][T24271] team0: Port device team_slave_1 added [ 951.852294][T24271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.866551][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.902803][T24271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.941318][T24305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.966147][T16777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.986360][T24271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.004293][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.031873][T24271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.193718][T24271] device hsr_slave_0 entered promiscuous mode [ 952.204066][T24271] device hsr_slave_1 entered promiscuous mode [ 952.212272][T24271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 952.221360][T24271] Cannot create hsr debugfs directory [ 952.341696][T24310] device syzkaller0 entered promiscuous mode [ 953.077233][T21855] Bluetooth: hci2: command 0x041b tx timeout [ 953.370745][T16777] device hsr_slave_0 left promiscuous mode [ 953.377569][T16777] device hsr_slave_1 left promiscuous mode [ 953.384226][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.391883][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.408166][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.415673][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.423670][T16777] device bridge_slave_1 left promiscuous mode [ 953.430121][T16777] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.440699][T16777] device bridge_slave_0 left promiscuous mode [ 953.447029][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.475698][T16777] device veth1_macvtap left promiscuous mode [ 953.481946][T16777] device veth0_macvtap left promiscuous mode [ 953.488410][T16777] device veth1_vlan left promiscuous mode [ 953.494263][T16777] device veth0_vlan left promiscuous mode [ 954.048711][T16777] team0 (unregistering): Port device team_slave_1 removed [ 954.089866][T16777] team0 (unregistering): Port device team_slave_0 removed [ 954.136268][T16777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.182003][T16777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.492083][T16777] bond0 (unregistering): Released all slaves [ 954.942265][T24308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.979287][T24271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 955.019158][T24271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 955.052296][T24271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 955.102105][T24271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 955.157458][T21855] Bluetooth: hci2: command 0x040f tx timeout [ 955.409276][T24271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.465914][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.503451][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.534170][T24271] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.549969][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.571367][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.586381][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.593623][T16773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.625168][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.674858][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.688873][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.700408][T16765] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.707719][T16765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.718618][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.805428][T24348] device syzkaller0 entered promiscuous mode [ 955.817706][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.834984][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.848328][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.863473][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.042896][T24362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.150234][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.184874][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.194836][T24353] device syzkaller0 entered promiscuous mode [ 956.267712][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.282823][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.306536][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.328979][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.350956][T24271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 957.044155][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.054990][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 957.089303][T24271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.155519][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 957.171964][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 957.211937][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 957.225918][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 957.237398][T21855] Bluetooth: hci2: command 0x0419 tx timeout [ 957.258138][T24271] device veth0_vlan entered promiscuous mode [ 957.270614][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 957.281438][T16771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 957.300262][T24271] device veth1_vlan entered promiscuous mode [ 957.352740][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 957.362017][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 957.377948][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 957.393064][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 957.406152][T24271] device veth0_macvtap entered promiscuous mode [ 957.425053][T24271] device veth1_macvtap entered promiscuous mode [ 957.454036][T24271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.470590][T24271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.482148][T24271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.498857][T24271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.515027][T24271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.530473][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 957.542608][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 957.555438][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 957.571870][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 957.585384][T24271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.602414][T24271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.614126][T24271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.632154][T24271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.654338][T24271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.665879][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 957.681222][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 957.696098][T24271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.711927][T24271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.721649][T24271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.736496][T24271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.752227][T24383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.956742][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.123890][T24423] device syzkaller0 entered promiscuous mode [ 961.697939][ T4584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.981823][ T4584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.066642][ T4584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.108016][T21855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 962.117963][T21855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 962.126488][T21855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 962.134584][T21855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 962.142730][T21855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 962.151727][T21855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 962.176987][ T4584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.474373][T24457] chnl_net:caif_netlink_parms(): no params data found [ 962.550868][T24457] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.558345][T24457] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.566400][T24457] device bridge_slave_0 entered promiscuous mode [ 962.591016][T24457] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.602062][T24457] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.611270][T24457] device bridge_slave_1 entered promiscuous mode [ 962.657957][T24457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.670592][T24457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.733322][T24457] team0: Port device team_slave_0 added [ 962.742933][T24457] team0: Port device team_slave_1 added [ 962.788065][T24457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.795179][T24457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.821730][T24457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.834560][T24457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.842687][T24457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.869084][T24457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.924089][T24457] device hsr_slave_0 entered promiscuous mode [ 962.931145][T24457] device hsr_slave_1 entered promiscuous mode [ 962.938503][T24457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.946337][T24457] Cannot create hsr debugfs directory [ 963.206029][ T4584] device hsr_slave_0 left promiscuous mode [ 963.214747][ T4584] device hsr_slave_1 left promiscuous mode [ 963.222803][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.230668][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.242233][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.250358][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.258631][ T4584] device bridge_slave_1 left promiscuous mode [ 963.265062][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.275493][ T4584] device bridge_slave_0 left promiscuous mode [ 963.282292][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.313631][ T4584] device veth1_macvtap left promiscuous mode [ 963.319927][ T4584] device veth0_macvtap left promiscuous mode [ 963.326039][ T4584] device veth1_vlan left promiscuous mode [ 963.333183][ T4584] device veth0_vlan left promiscuous mode [ 963.923004][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 963.969275][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 964.016498][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.066137][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.188969][T24441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.198163][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 965.101793][ T4584] bond0 (unregistering): Released all slaves [ 965.745967][T24514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.763326][T24507] device syzkaller0 entered promiscuous mode [ 965.782451][T24510] device macvlan0 entered promiscuous mode [ 965.790081][T24510] netlink: 'syz.3.6513': attribute type 1 has an invalid length. [ 965.798897][T24510] netlink: 'syz.3.6513': attribute type 2 has an invalid length. [ 966.000364][T24457] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 966.028258][T24457] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 966.059131][T24457] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 966.092352][T24457] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 966.277186][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 968.357056][T21855] Bluetooth: hci2: command 0x040f tx timeout [ 969.023835][T24518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 969.317491][T24457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.349268][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 969.368552][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.404138][T24457] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.460139][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 969.477020][T21855] Bluetooth: hci4: command 0x0406 tx timeout [ 969.488059][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 969.552594][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.559812][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.571958][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.621494][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 969.638064][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.658445][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.665609][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.707419][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 969.725638][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 969.828307][T24578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.935911][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 969.950759][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 969.963580][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 969.972808][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 969.985811][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 969.994687][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 970.008054][T24573] netlink: 'syz.1.6526': attribute type 1 has an invalid length. [ 970.016387][T24573] netlink: 'syz.1.6526': attribute type 2 has an invalid length. [ 970.024849][T24577] device syzkaller0 entered promiscuous mode [ 970.042039][T24578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6527'. [ 970.070541][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 970.136812][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.150274][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 970.162531][T24457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 970.449253][T21855] Bluetooth: hci2: command 0x0419 tx timeout [ 970.572214][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 970.580061][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 970.606417][T24457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.632831][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 970.648877][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 970.676407][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 970.699066][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 970.711082][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 970.719931][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 970.737838][T24457] device veth0_vlan entered promiscuous mode [ 970.753097][T24457] device veth1_vlan entered promiscuous mode [ 970.780157][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 970.790351][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 970.802835][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 970.812191][T16777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 970.829574][T24457] device veth0_macvtap entered promiscuous mode [ 970.840874][T24457] device veth1_macvtap entered promiscuous mode [ 970.859790][T24457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.870548][T24457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.881539][T24457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.892433][T24457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.904587][T24457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.914341][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 970.924124][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 970.933606][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 970.943071][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.957138][T24457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.968127][T24457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.979464][T24457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.990164][T24457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.002189][T24457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.010576][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 971.022062][T16765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 971.035338][T24457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.045564][T24457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.055126][T24457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.064769][T24457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.306487][T24606] [ 973.309194][T24606] ============================= [ 973.315044][T24606] WARNING: suspicious RCU usage [ 973.320246][T24606] syzkaller #0 Not tainted [ 973.325070][T24606] ----------------------------- [ 973.330390][T24606] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 973.339083][T24606] [ 973.339083][T24606] other info that might help us debug this: [ 973.339083][T24606] [ 973.346187][T24590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.349433][T24606] [ 973.349433][T24606] rcu_scheduler_active = 2, debug_locks = 1 [ 973.349465][T24606] 1 lock held by syz.1.6534/24606: [ 973.349479][T24606] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 973.382017][T24606] [ 973.382017][T24606] stack backtrace: [ 973.388024][T24606] CPU: 1 PID: 24606 Comm: syz.1.6534 Not tainted syzkaller #0 [ 973.395571][T24606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 973.405690][T24606] Call Trace: [ 973.409066][T24606] [ 973.412094][T24606] dump_stack_lvl+0x188/0x24e [ 973.416891][T24606] ? show_regs_print_info+0x12/0x12 [ 973.422135][T24606] ? load_image+0x410/0x410 [ 973.426715][T24606] ? __lock_acquire+0x138a/0x7c40 [ 973.431833][T24606] lockdep_rcu_suspicious+0x1dd/0x300 [ 973.437251][T24606] get_callchain_entry+0x2a5/0x3b0 [ 973.442489][T24606] get_perf_callchain+0xc4/0x490 [ 973.447468][T24606] ? put_callchain_entry+0xb0/0xb0 [ 973.452629][T24606] ? plist_add+0x3d7/0x490 [ 973.457119][T24606] ? verify_lock_unused+0x140/0x140 [ 973.462359][T24606] __bpf_get_stack+0x2de/0x520 [ 973.467239][T24606] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 973.473458][T24606] ? __cant_sleep+0x220/0x220 [ 973.478216][T24606] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 973.483894][T24606] bpf_get_stack_raw_tp+0x189/0x1c0 [ 973.489231][T24606] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 973.494732][T24606] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 973.500159][T24606] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 973.505848][T24606] ? sock_gen_cookie+0x60/0x60 [ 973.510658][T24606] ? sock_gen_cookie+0x60/0x60 [ 973.515497][T24606] bpf_prog_test_run+0x31c/0x390 [ 973.520554][T24606] __sys_bpf+0x62b/0x780 [ 973.524861][T24606] ? bpf_link_show_fdinfo+0x380/0x380 [ 973.530291][T24606] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 973.536288][T24606] ? lock_chain_count+0x20/0x20 [ 973.541181][T24606] __x64_sys_bpf+0x78/0x90 [ 973.545637][T24606] do_syscall_64+0x4c/0xa0 [ 973.550115][T24606] ? clear_bhb_loop+0x60/0xb0 [ 973.554879][T24606] ? clear_bhb_loop+0x60/0xb0 [ 973.559591][T24606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.565529][T24606] RIP: 0033:0x7ff68ff9e0d9 [ 973.570024][T24606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.589709][T24606] RSP: 002b:00007ff690eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.598204][T24606] RAX: ffffffffffffffda RBX: 00007ff690225fa0 RCX: 00007ff68ff9e0d9 [ 973.606210][T24606] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 973.614211][T24606] RBP: 00007ff690035024 R08: 0000000000000000 R09: 0000000000000000 [ 973.622212][T24606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.630235][T24606] R13: 00007ff690226038 R14: 00007ff690225fa0 R15: 00007fffbccb30b8 [ 973.638247][T24606] [ 973.718777][T16765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.734733][T16765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.778658][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 973.853943][T16765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.862271][T16765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.870488][T16775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready