last executing test programs: 1m19.019955981s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 1m11.799476541s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 1m3.717039992s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 58.06123978s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 48.832016884s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 40.871174975s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 35.267604097s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 29.467720163s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 22.595088016s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 17.029108263s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 9.948360694s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x600048d1}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000c0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) 4.955863219s ago: executing program 2 (id=343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000008c0)={0x0, 'wlan0\x00', {0xffd}, 0x80}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x401}, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 3.766672618s ago: executing program 3 (id=1168): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x4c, 0x0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 3.482147942s ago: executing program 0 (id=1170): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xe0000001}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0c02, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000002c0)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, 0x0) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1f"], 0xffdd) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 2.820277814s ago: executing program 3 (id=1172): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x4e, r0, 0x0, 0x1c000000007400}, 0x38) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12000, 0x0) 2.688005306s ago: executing program 0 (id=1173): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) read$alg(r0, &(0x7f0000000000)=""/17, 0x11) clock_gettime(0x0, &(0x7f0000002e40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/25, 0x19}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/61, 0x3d}], 0xa, &(0x7f0000001680)=""/113, 0x71}}, {{&(0x7f0000001700)=@qipcrtr, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001780)=""/254, 0xfe}, {&(0x7f0000001880)=""/194, 0xc2}, {&(0x7f0000001980)=""/222, 0xde}, {&(0x7f0000001a80)=""/205, 0xcd}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/180, 0xb4}], 0x7, &(0x7f0000002d00)=""/165, 0xa5}, 0x800}], 0x2, 0x40000001, &(0x7f0000002e80)={r1, r2+10000000}) sendmsg$alg(r3, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002ec0)="4d32820b414de92b9c95ecd5aeca3fd66e9415b4b723648229fa4e88b3a1179739aceeb5aeaaea8fcfb666c41590cd4b64f7918ae87ed0a1f93559d35c9637499c2ec7ef5b89a6021e", 0x49}, {&(0x7f0000002f40)="d36d2439e4fe73ff0afea87267b80df2359d880525346c1c45a36d22e970de730e1b5601f79794e407f5713f709965acabd8d59aad54872d742508c02c58551a3a1ce97b5dc8e78a7dc71e44ff4088e98294bc841931cf9c000b94bfaaae039a4d21e9063972edc6cc648dc6a0b9b1e58e37ae07931141770e699658fa99a72e26e25d00c54384ae0780cf5d8fdfb3c791dc06f40b34a487501ee666a2c564ad7b16fc7ca515c15988fa22fc9d0db5d8c9ff2f80efc7a87473750ffbd915651960c21e0c", 0xc4}, {&(0x7f0000003040)="76e23740f8c015dcefd2ed602f615173ec833bfb80b4f3082882356c3298f4a09f7f71d3f5897760abeaac5baed859499ef1b22769745b0eb5b57db95645badc968adb9b35c3fdf38ec5d11953f222714fd618e8c8ab909bb668be749458f0bb23d0eae252ba990349832be9393c04683a5fbd06d9ac163dab7578752614addde7066c8e1c739dfab5c7784de5a5f8e876dff7d72b57eb5f6ac3bcbcbf8606b1fcdd", 0xa2}, {&(0x7f0000003100)="70963a759e4af69c31373d1a5169721edb8263154a8d650f4638f2604ecb324b4b61517944f31bab0267747147195c5bfee87320510edbacd11dc61f55b38d8860b0a137143a47d9d31e", 0x4a}, {&(0x7f0000003180)="d91882783726262faae3c0bdbc6f99e66cab509b26dc40190d3b3d0b3ed364495915b9b38d2e92a1f681a6a3ce05bcbb17e1c115c99c2e301affa6026261784a49f39605446a6ae699e24f48862afedb8a059c05599575139fc70789c7c61ee4740638cbb0d3a15904a888e808d629733a9a11c2fa194f577f56ad4047a66acebb79b209205d19da51774e30cd8e50b92f5eff0f05ea9941adc11154dc9d3870ad6eac411d62cd23ebb232e419f8f37487693ee464dd94084cc1e2f4f222f69f4a21adbb4f0a4890f44cee33c61b440fc3a8e3b7402e0eee1f281364ce666685568c5ea4a17c8c952d6e7873eaf1f139665d", 0xf2}], 0x5, &(0x7f0000003300)=[@assoc={0x18, 0x117, 0x4, 0xfffff801}, @iv={0x40, 0x117, 0x2, 0x2b, "ea723837644bef58fd40814bc0e504fa7f9fb83c2a1cb55edeb177d1ff347e027dc5a5ea43550322760e00"}], 0x58, 0x14004844}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000033c0)={r3, 0x6, 0x6, 0x8000}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000003400)={'geneve1\x00', @broadcast}) sendmmsg$sock(r3, &(0x7f0000003440), 0x0, 0xc000104) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000003480)={0x0, 'batadv_slave_1\x00', {0x4}, 0x6}) ioctl$sock_proto_private(r4, 0x89ed, &(0x7f00000034c0)="e332aa34ac279f3c3fa454") bind$netlink(r4, &(0x7f0000003500)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, r4, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003640)={r6, 0x58, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000003680), &(0x7f00000036c0)=0x4) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000003700)=0x9, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003900)={r6, &(0x7f0000003740)="3427b18b518c066ac3f35aaec38bf0bec8cbe14cde4cd6d78e8689e10a1e3c22058eaa8c02746fb862509087026cde20557b3b409c1060d7d8df18af71462fd118a1f953b6836ab4510359316fd038b64793d4b3e0a88548d6d278470b087c9e2cef94cf3fde038dcf9350579b1b44afe27ed6062c47c428ad2a7fdc09a66e120fe8cf72c5aa292161791ae4ae5a34a6fda4d873dfecc85f5581edbaaa6014ac5ae48e2d5148769a195e79251a41c1b51e5f6c7a2fb614f72d694fd558524e76192490f9e27354c10c1e863de1e79cef32d9ba6ade863ecd38d3ceeaf916", &(0x7f0000003840)=""/187}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003a80)={r4, &(0x7f0000003940)="b695fb59e73b99519d103c5f013cb46240325c646793957ca161427f170989920d522ba8f7542e62442ce9e580402b90c4a8d6c2048c5ecfc326655a92cd021174f0484e2b74a0b9117786aa3baae8879c3b202e35f451efcab54b90b83d804d2826780cee", &(0x7f00000039c0)=""/181}, 0x20) r10 = socket(0x8, 0xa, 0x3) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c00), r10) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) r12 = syz_genetlink_get_family_id$team(&(0x7f0000003d40), r4) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000003d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000003dc0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003e00)={'veth0_vlan\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004b00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004ac0)={&(0x7f00000040c0)={0x9e0, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x18980}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r7}, {0x274, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb72c}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x5, 0xff, 0x4}, {0x2, 0x2, 0x0, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0x9e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.618230199s ago: executing program 0 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r3, @ANYBLOB="000000002000010020001280080001004d726500140002"], 0x40}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x1, {{0x2, 0x4e20, @broadcast}}}, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f00000001c0)=0x28) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000010) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r7, 0x40049409, r7) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2.49764294s ago: executing program 3 (id=1175): r0 = socket$kcm(0x21, 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) socketpair(0x3, 0x1, 0x7f, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xc6b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x1}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xc6b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) socket(0x2, 0xa, 0x8001) (async) r6 = socket(0x2, 0xa, 0x8001) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x18, 0x0, &(0x7f0000000040)) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48, 0x24004091}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48, 0x24004091}, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x57, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0}}], 0x58}, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 2.321281044s ago: executing program 3 (id=1177): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001240)="1e", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x8}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x1, 0xffffffff}, {0x2, 0x95}, {0x5, 0x9}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0xffffffff, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e010600bf"], 0xffdd) 1.990812892s ago: executing program 0 (id=1180): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x48, {0x2, 0x0, @empty}, 'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000240)={r0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pselect6(0x40, &(0x7f0000000040)={0x8, 0x7, 0x3, 0x0, 0xfa61, 0x7, 0xf, 0x4}, &(0x7f00000000c0)={0x8755, 0x5c84, 0x8ee, 0x2, 0x3fd7f528, 0x7, 0x40, 0xde2d}, &(0x7f0000000280)={0xf, 0x0, 0x8, 0x5, 0xfffffffffffff6ab, 0xb8, 0x2, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x7]}, 0x8}) 1.988560008s ago: executing program 3 (id=1181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 1.854072331s ago: executing program 1 (id=1182): socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x390, 0x238, 0x238, 0x390, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x0, 0x6}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x0, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 1.821998963s ago: executing program 3 (id=1183): unshare(0x40000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x80000000101, 0x6) 1.680112383s ago: executing program 1 (id=1184): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/14, 0xe, 0x0, &(0x7f0000000080)=""/104, 0x68}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000300)=""/118, 0x76, 0x0, &(0x7f0000000400)=""/136, 0x88}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x9, 0x5, 0x7, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x66, 0x0, 0xd, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5cc3634f}, {@multicast2}]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x28, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0x5, "ae6911"}, {0x2, 0x2}, {0x2, 0x5, "b95b71"}]}, @timestamp={0x44, 0x18, 0xcb, 0x0, 0x6, [0x5, 0x800, 0x8dcc, 0x0, 0x82]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xab, 0x0, 0x7, [0x0]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0x3d, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0xa, 0x5}, {0xb, 0x5}, {0x2, 0x1}, {0xc, 0x1}, {0x7, 0x3}, {0x8, 0x4}, {0x2, 0x2}]}, @fwd={0x6}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000740)=""/195, 0x84, 0xc3, 0x0, 0xd15, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000400000007110ad000000000095", @ANYRES32=0x0, @ANYBLOB="26c6207441", @ANYRES16=r0, @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000840)=0x14) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000d4cb325100000000000004"], 0x48) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0xc}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) socketpair(0xa, 0x1, 0x6, &(0x7f0000000240)) 1.678911998s ago: executing program 0 (id=1185): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x93) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@alu={0x7, 0xdaffe28c0abbf66, 0x1, 0x5, 0x6, 0x14c, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x4, 0x84}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf4, 0x75, &(0x7f0000000080)="82a661129389f4d6dc3bfeb266d56ba064bfc72d486bf811baff8a50e027bc9c945a854bcfe9a0da2299481f46542ef092f62a32d6804307ea2019d2d4a9f637958d3c030a0baa0fe3db912cd8c4bc43e71b02a7ddcea5996b0b5863dd81ab59ecba118327ec8349d8fcd9684303ddf6afef732b76b7b965360b78c096b88b531fb6bfc2f5d97ba0bb0209fad7b483e39fbe0528a761219aa201812f464310c718fe023bdb5df8abc1e5e09103de3630b1ba3bac350f46f34d342083d366799b1020c09389cc3e0eaa57aed6a1b6f09087b8a5c1f682537866d9092468ae5dfc1c9ae12575cb2b69c329fdb95f1b8fd4ffad4c2c", &(0x7f0000000180)=""/117, 0x9a, 0x0, 0x8a, 0xfa, &(0x7f0000000200)="6d2f075742358a55bbdd0aa9d8702034aa32bca0a46df8d1b5a7766fb35bc59db05644dea20bc511579102832cbc7f9c5087a359defaa390ff007ad556016e67bca76be0e8809f56b89feefb87052a75b7fb2a331e5a217508ef19ac04665a7404907a7ab4cf5b2af79c762bf4da1cc382ec544d33ea3f287db3101afa02da2fbc86a1651447ea37774c", &(0x7f00000002c0)="360d1badd5a9546a18a59f665e403b9503dd9bfad535cf9d0b6eed62d2805bf46a2418f22985fed6c67cc97b55cebb0ade16311b05704e30977b62597614a733de47c34993970457cd2883e324a3f176a72bf3cc8f5472debf7eb2ff83a4e7e0ce770558821491de3573af32dcb9f1c42ce1a7b62e37d1cd1d6ef976a3762b35b263a71d7477655397d4e6c174ce26b5f01a01513f522aa58206a7da6c74fd72b2bd9148bec67c3783282d1a857f8a2fb4a886396d2c11f1145b403215760c22b964bd7f4d0c4576625574525c44d4a191faac1b190ebebd1230feb106a180826f07bf34cbbec2e5ace0152a81ec5752b176b01d07382436d4c4", 0x2, 0x0, 0xa}, 0x50) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x2, 0xfa97b32f7c5fa303, 0x84) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x8, 0x0) r10 = socket(0x1, 0x803, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000600)={&(0x7f0000000800)=""/77, 0x4d, 0x0, &(0x7f0000000880)=""/106, 0x6a}}, 0x10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000640)={&(0x7f0000000600)}, 0x1, 0x0, 0x0, 0x10}, 0x4c045) 1.634911756s ago: executing program 1 (id=1186): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="89000000120081ae08060cdc03a6000000000008000000006ee2ffca1b1f0000000004c00e72010000000000000019bf9ed720000000d4e747033a0093b837dc6cc0", 0x42}], 0x1}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18411}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000440)=ANY=[], 0xffdd) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000040)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/31, 0x1f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000000)=0xffff, 0x4) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESHEX=r8, @ANYRESDEC=r3, @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 404.094511ms ago: executing program 1 (id=1187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f000076c000/0x4000)=nil, 0x4000, 0x13, 0x810, r0, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000e4ff0000f5ff00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet(0xa, 0x3, 0x7) listen(r2, 0xfffffffd) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1400000031001fffffff00000000000003"], 0x114}], 0x1}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000868000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x94}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040052000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000005640)=0x1, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0103000000000000000000000000200000000b0a01030000000000000000020000000900010073797a300000000014"], 0x5c}}, 0x0) 388.14491ms ago: executing program 0 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000faf170299494a668a2bfaf74b3ecf55d00000671fc156291cd35dc00000000"], 0x48) r1 = socket$inet(0x2, 0x3, 0x8d) getsockname$inet(r1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/47, 0x2f}, 0x10000004}], 0x1, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x27) 227.099775ms ago: executing program 1 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400010400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe"], 0x2c}}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async) shutdown(r7, 0x1) (async) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async) accept4(r6, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) (async, rerun: 32) r9 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$inet_int(r9, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) setsockopt$inet_int(r9, 0x0, 0xa, 0x0, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r9, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$TUNSETLINK(r8, 0x400454cd, 0x200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000140)="5f52aad539dd8e9f17059144c588b168833a0fa00557e0841808512f93b8921d467e92dea58dc0012eec1624dc6bdc38dbbf09f3488ce3a1e876d7822ba815a02886d87d976482269cdde3c86424eebcc81ccd97b3e7ef4cbdb8dfe580681bff5a5a0132341fe8e17a65aac60ccb109ebed0f4f5f5cbd70fd2757d960d829d41de3dd27445f016e9bff61937a2d3a674e9e5f6cb665d6027a2371ff256f8d4b0ea541c99dd77", &(0x7f0000000000)=""/23, &(0x7f0000000080)="72c4e54856eef09ff75d2447725d08403ff8ffcf6384e583b24e4279b6224e0e1d13a8ff9ae3cd8b8d56b2b0da7392c0c1430363eae9b08c81c182e5ec909b7daaec80a1f29bc66741ddcb1597750de8260a58b62d2a", &(0x7f0000000200)="34c25def1b6bacc0708271d316a2c2abd37d5ed4cbbd5456280997159d2cc995732768026d7d185846a32f0fbd5d7abe305e29c8d81e86ecb19b7cbe2252632075bd46dc284a20ec2f003fb20de13197f3aeafb1120dbeb22bd8d43a12f817982e93e224261fd4beff59f52ee784", 0x8, 0x1}, 0x38) 0s ago: executing program 1 (id=1190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e184a7fc1d", 0x5, 0x8000, &(0x7f0000000240)={0xa, 0x4e23, 0x8, @local, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000000)={r6, r8}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r1}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x16}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYRES64=r12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): mode [ 121.441733][ T8251] bond_slave_0: entered promiscuous mode [ 121.447480][ T8251] bond_slave_1: entered promiscuous mode [ 121.498123][ T8251] vlan2: entered promiscuous mode [ 121.517298][ T8251] bond0: entered promiscuous mode [ 121.568317][ T8251] bond0: left promiscuous mode [ 121.584693][ T8251] bond_slave_0: left promiscuous mode [ 121.590238][ T8251] bond_slave_1: left promiscuous mode [ 122.028264][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 122.030876][ T8271] netlink: 'syz.3.617': attribute type 32 has an invalid length. [ 122.144177][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 122.173039][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 122.182344][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 122.302826][ T8266] ip6gre1: entered allmulticast mode [ 122.425514][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 122.456947][ T8288] macvtap3: entered promiscuous mode [ 122.486380][ T8288] macvtap3: entered allmulticast mode [ 122.513369][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.621'. [ 122.627487][ T54] Bluetooth: hci2: command tx timeout [ 122.653652][ C1] Unknown status report in ack skb [ 122.660522][ C1] Unknown status report in ack skb [ 122.661465][ T8018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.677044][ T8291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.623'. [ 122.714971][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 122.742789][ T8018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.792300][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 122.802722][ T8018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.859526][ T8018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.926988][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 122.966895][ T8313] netlink: 'syz.4.629': attribute type 32 has an invalid length. [ 123.186500][ T8323] x_tables: duplicate underflow at hook 2 [ 123.205625][ T8318] FAULT_INJECTION: forcing a failure. [ 123.205625][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 123.223108][ T8318] CPU: 0 UID: 0 PID: 8318 Comm: syz.4.630 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 123.233748][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.243835][ T8318] Call Trace: [ 123.247129][ T8318] [ 123.250082][ T8318] dump_stack_lvl+0x241/0x360 [ 123.254798][ T8318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.260030][ T8318] ? __pfx__printk+0x10/0x10 [ 123.264656][ T8318] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 123.270143][ T8318] ? __pfx___might_resched+0x10/0x10 [ 123.275466][ T8318] should_fail_ex+0x3b0/0x4e0 [ 123.280188][ T8318] should_failslab+0xac/0x100 [ 123.284891][ T8318] ? rtnl_newlink+0x107/0x1550 [ 123.289678][ T8318] __kmalloc_cache_noprof+0x6c/0x2c0 [ 123.294980][ T8318] ? __mutex_lock+0x9a1/0xd70 [ 123.299676][ T8318] rtnl_newlink+0x107/0x1550 [ 123.304302][ T8318] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.309616][ T8318] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.314663][ T8318] ? __mutex_lock+0x9ab/0xd70 [ 123.319411][ T8318] ? __mutex_lock+0x52a/0xd70 [ 123.324116][ T8318] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 123.329258][ T8318] ? __pfx___mutex_lock+0x10/0x10 [ 123.334378][ T8318] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.339423][ T8318] rtnetlink_rcv_msg+0x73f/0xcf0 [ 123.344387][ T8318] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 123.349521][ T8318] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.354975][ T8318] ? ref_tracker_free+0x643/0x7e0 [ 123.359998][ T8318] netlink_rcv_skb+0x1e3/0x430 [ 123.364772][ T8318] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.370246][ T8318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.375540][ T8318] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.380754][ T8318] netlink_unicast+0x7f6/0x990 [ 123.385539][ T8318] ? __pfx_netlink_unicast+0x10/0x10 [ 123.390819][ T8318] ? __virt_addr_valid+0x183/0x530 [ 123.395923][ T8318] ? __check_object_size+0x48e/0x900 [ 123.401259][ T8318] netlink_sendmsg+0x8e4/0xcb0 [ 123.406032][ T8318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.411315][ T8318] ? aa_sock_msg_perm+0x91/0x160 [ 123.416246][ T8318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.421527][ T8318] __sock_sendmsg+0x221/0x270 [ 123.426203][ T8318] ____sys_sendmsg+0x52a/0x7e0 [ 123.430987][ T8318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.436310][ T8318] __sys_sendmsg+0x292/0x380 [ 123.440911][ T8318] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.446020][ T8318] ? __pfx_vfs_write+0x10/0x10 [ 123.450821][ T8318] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.457178][ T8318] ? do_syscall_64+0x100/0x230 [ 123.461959][ T8318] ? do_syscall_64+0xb6/0x230 [ 123.466628][ T8318] do_syscall_64+0xf3/0x230 [ 123.471135][ T8318] ? clear_bhb_loop+0x35/0x90 [ 123.475812][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.481709][ T8318] RIP: 0033:0x7f567db7e719 [ 123.486124][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.505753][ T8318] RSP: 002b:00007f567e8ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.514203][ T8318] RAX: ffffffffffffffda RBX: 00007f567dd36058 RCX: 00007f567db7e719 [ 123.522186][ T8318] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000b [ 123.530183][ T8318] RBP: 00007f567e8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 123.538166][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.546143][ T8318] R13: 0000000000000000 R14: 00007f567dd36058 R15: 00007ffc28a1e0b8 [ 123.554126][ T8318] [ 123.785545][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.851685][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.893561][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.900737][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.962789][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.969984][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.169665][ T8347] pim6reg1: entered promiscuous mode [ 124.175282][ T8347] pim6reg1: entered allmulticast mode [ 124.283234][ T8365] netlink: 'syz.1.642': attribute type 32 has an invalid length. [ 124.524067][ T8376] x_tables: duplicate underflow at hook 2 [ 124.850587][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.924007][ T8394] syz_tun: entered promiscuous mode [ 124.938493][ T8394] macvtap1: entered promiscuous mode [ 124.952643][ T8394] macvtap1: entered allmulticast mode [ 124.977594][ T8394] syz_tun: entered allmulticast mode [ 125.061520][ T8018] veth0_vlan: entered promiscuous mode [ 125.128716][ T8018] veth1_vlan: entered promiscuous mode [ 125.216286][ T8018] veth0_macvtap: entered promiscuous mode [ 125.244064][ T8018] veth1_macvtap: entered promiscuous mode [ 125.480903][ T8416] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 125.529412][ T8416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.647070][ T8420] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 125.732563][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.765143][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.796374][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.817463][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.847239][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.878001][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.890278][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.932248][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.957195][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.977192][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.003972][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.030859][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.215570][ T8018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.244960][ T8018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.290933][ T8018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.309561][ T8018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.410897][ T8450] macvtap2: entered promiscuous mode [ 126.436928][ T8450] macvtap2: entered allmulticast mode [ 126.832914][ T8471] macvtap0: entered promiscuous mode [ 126.852968][ T8471] macvtap0: entered allmulticast mode [ 126.913435][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.935204][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.022087][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.048698][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.385464][ T8484] __nla_validate_parse: 8 callbacks suppressed [ 127.385484][ T8484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.661'. [ 127.519117][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'. [ 127.811408][ T3515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.949765][ T3515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.213096][ T8501] netlink: 168 bytes leftover after parsing attributes in process `syz.0.662'. [ 128.243539][ T8501] netlink: 'syz.0.662': attribute type 32 has an invalid length. [ 128.257596][ T8503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.292495][ T8503] batadv_slave_1: entered promiscuous mode [ 128.457569][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.467624][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.479905][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.556094][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.563906][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.735778][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.792904][ T3515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.592514][ T8531] netlink: 'syz.3.672': attribute type 2 has an invalid length. [ 130.009490][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 130.108199][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.674'. [ 130.130523][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 130.244588][ T8556] x_tables: duplicate underflow at hook 3 [ 130.257429][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.271047][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.281661][ T8506] bridge_slave_0: entered allmulticast mode [ 130.292617][ T8506] bridge_slave_0: entered promiscuous mode [ 130.453699][ T3515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.476912][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.484832][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.492234][ T8506] bridge_slave_1: entered allmulticast mode [ 130.499304][ T8506] bridge_slave_1: entered promiscuous mode [ 130.661309][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.684962][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.691062][ T8571] raw_sendmsg: syz.3.683 forgot to set AF_INET. Fix it! [ 130.706753][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 130.734238][ T8506] team0: Port device team_slave_0 added [ 130.744785][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 130.762829][ T8506] team0: Port device team_slave_1 added [ 130.788328][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 130.788358][ T5855] Bluetooth: hci2: command tx timeout [ 130.864094][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.901265][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.927560][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.940139][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.947600][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.973751][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.167860][ T8506] hsr_slave_0: entered promiscuous mode [ 131.182699][ T8506] hsr_slave_1: entered promiscuous mode [ 131.190107][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.198907][ T8506] Cannot create hsr debugfs directory [ 131.215906][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.684'. [ 131.225364][ T3515] bridge_slave_1: left allmulticast mode [ 131.231385][ T3515] bridge_slave_1: left promiscuous mode [ 131.237164][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.246819][ T3515] bridge_slave_0: left allmulticast mode [ 131.252877][ T3515] bridge_slave_0: left promiscuous mode [ 131.258785][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.278135][ T8582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.687'. [ 131.596233][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.613629][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.625222][ T3515] bond0 (unregistering): Released all slaves [ 131.900904][ T8600] tls_set_device_offload_rx: netdev not found [ 131.939043][ T8592] netlink: 'syz.4.689': attribute type 2 has an invalid length. [ 132.238462][ T3515] hsr_slave_0: left promiscuous mode [ 132.321662][ T3515] hsr_slave_1: left promiscuous mode [ 132.367861][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.401904][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.438437][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.460558][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.515150][ T3515] veth1_macvtap: left promiscuous mode [ 132.524747][ T3515] veth0_macvtap: left promiscuous mode [ 132.532381][ T3515] veth1_vlan: left promiscuous mode [ 132.543330][ T3515] veth0_vlan: left promiscuous mode [ 132.867487][ T5855] Bluetooth: hci2: command tx timeout [ 133.030984][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.037570][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.191787][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 133.231471][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 133.683608][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 134.948101][ T5855] Bluetooth: hci2: command tx timeout [ 135.219244][ T8506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.310674][ T25] hid-generic 0005:0B57:FFF9.0001: item fetching failed at offset 0/1 [ 135.317883][ T8506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.350320][ T25] hid-generic 0005:0B57:FFF9.0001: probe with driver hid-generic failed with error -22 [ 135.371398][ T8506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.500840][ T8506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.524764][ T8702] netlink: 256 bytes leftover after parsing attributes in process `syz.4.710'. [ 135.664088][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'. [ 135.794911][ T5844] syz_tun (unregistering): left allmulticast mode [ 135.923704][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 136.348618][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 136.371230][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.455578][ T8732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.502522][ T8732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.519296][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.579450][ T8745] syzkaller1: entered promiscuous mode [ 136.586236][ T8745] syzkaller1: entered allmulticast mode [ 136.626633][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.688594][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.697846][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.698896][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.721654][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.731985][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.744635][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.752916][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.856638][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.980707][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.005211][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.012352][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.035121][ T5855] Bluetooth: hci2: command tx timeout [ 137.056390][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.063584][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.105969][ T8761] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 137.212325][ T8761] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 137.269597][ T53] bridge_slave_1: left allmulticast mode [ 137.275292][ T53] bridge_slave_1: left promiscuous mode [ 137.289477][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.324106][ T53] bridge_slave_0: left allmulticast mode [ 137.346315][ T53] bridge_slave_0: left promiscuous mode [ 137.365874][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.808720][ T53] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 138.080208][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.091262][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.102813][ T53] bond0 (unregistering): Released all slaves [ 138.224381][ T53] bond1 (unregistering): Released all slaves [ 138.246197][ T8506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.257410][ T8506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.787669][ T5855] Bluetooth: hci1: command tx timeout [ 138.836093][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 139.113071][ T53] hsr_slave_0: left promiscuous mode [ 139.148668][ T53] hsr_slave_1: left promiscuous mode [ 139.228461][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.264656][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.417832][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.543900][ T53] batadv0: left allmulticast mode [ 139.549200][ T53] batadv0: left promiscuous mode [ 139.554513][ T53] veth1_macvtap: left promiscuous mode [ 139.560125][ T53] veth0_macvtap: left promiscuous mode [ 139.565706][ T53] veth1_vlan: left promiscuous mode [ 139.571000][ T53] veth0_vlan: left promiscuous mode [ 139.985740][ T53] team0 (unregistering): Port device team_slave_1 removed [ 140.024512][ T53] team0 (unregistering): Port device team_slave_0 removed [ 140.377681][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.552768][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.573600][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.581201][ T8747] bridge_slave_0: entered allmulticast mode [ 140.595035][ T8747] bridge_slave_0: entered promiscuous mode [ 140.605298][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.618541][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.625949][ T8747] bridge_slave_1: entered allmulticast mode [ 140.634012][ T8747] bridge_slave_1: entered promiscuous mode [ 140.686274][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.726612][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.827065][ T8747] team0: Port device team_slave_0 added [ 140.849652][ T8747] team0: Port device team_slave_1 added [ 140.870691][ T5855] Bluetooth: hci1: command tx timeout [ 140.875958][ T8506] veth0_vlan: entered promiscuous mode [ 140.946261][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.957304][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.004558][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.061860][ T8506] veth1_vlan: entered promiscuous mode [ 141.095104][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.120615][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.190941][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.310938][ T8747] hsr_slave_0: entered promiscuous mode [ 141.332964][ T8747] hsr_slave_1: entered promiscuous mode [ 141.349063][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 141.632389][ T8506] veth0_macvtap: entered promiscuous mode [ 141.680678][ T8506] veth1_macvtap: entered promiscuous mode [ 141.780447][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.794373][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809910][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.824320][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.838737][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.915373][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.940322][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.959009][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.969885][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.982571][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.044459][ T8506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.061741][ T8506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.073496][ T8506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.084999][ T8506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.183562][ T8932] IPVS: Scheduler module ip_vs_sip not found [ 142.623481][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.664462][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.750710][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.787842][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.972468][ T5855] Bluetooth: hci1: command tx timeout [ 143.026077][ T8747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.063950][ T8747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.093654][ T8747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.161070][ T8747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.314381][ T6390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.476402][ T6390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.609683][ T6390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.686945][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.733194][ T6390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.760243][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.783884][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.791064][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.821869][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.829052][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.958533][ T6390] bridge_slave_1: left allmulticast mode [ 143.974311][ T6390] bridge_slave_1: left promiscuous mode [ 143.994653][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.065217][ T9007] netlink: 'syz.1.768': attribute type 32 has an invalid length. [ 144.078561][ T6390] bridge_slave_0: left allmulticast mode [ 144.084247][ T6390] bridge_slave_0: left promiscuous mode [ 144.097623][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.384095][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.395231][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.406308][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.416211][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.424052][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.437408][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.629883][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.647921][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.661140][ T6390] bond0 (unregistering): Released all slaves [ 144.821686][ T9026] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 144.832619][ T9027] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 144.837431][ T9023] openvswitch: netlink: Message has -1 unknown bytes. [ 145.027474][ T5855] Bluetooth: hci1: command tx timeout [ 145.149783][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.398965][ T6390] hsr_slave_0: left promiscuous mode [ 145.461315][ T6390] hsr_slave_1: left promiscuous mode [ 145.492381][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.507463][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.522067][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.539974][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.576019][ T6390] veth1_macvtap: left promiscuous mode [ 145.587727][ T6390] veth0_macvtap: left promiscuous mode [ 145.593400][ T6390] veth1_vlan: left promiscuous mode [ 145.607378][ T6390] veth0_vlan: left promiscuous mode [ 146.038050][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 146.089903][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 146.479016][ T5855] Bluetooth: hci2: command tx timeout [ 146.503852][ T9061] ipvlan2: entered promiscuous mode [ 146.559375][ T9017] chnl_net:caif_netlink_parms(): no params data found [ 146.824611][ T9088] delete_channel: no stack [ 146.859247][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.866572][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.875335][ T9017] bridge_slave_0: entered allmulticast mode [ 146.882635][ T9017] bridge_slave_0: entered promiscuous mode [ 146.901602][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 146.916132][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.924841][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.944511][ T9017] bridge_slave_1: entered allmulticast mode [ 146.970305][ T9017] bridge_slave_1: entered promiscuous mode [ 147.074062][ T9017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.113258][ T9017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.125385][ T9099] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 147.174275][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 147.228194][ T9099] wireguard0: entered promiscuous mode [ 147.247900][ T9099] wireguard0: entered allmulticast mode [ 147.334086][ T9017] team0: Port device team_slave_0 added [ 147.344415][ T9111] netlink: 'syz.1.788': attribute type 32 has an invalid length. [ 147.380501][ T9017] team0: Port device team_slave_1 added [ 147.454955][ T8747] veth0_vlan: entered promiscuous mode [ 147.486478][ T9017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.503350][ T9017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.538953][ T9017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.556463][ T8747] veth1_vlan: entered promiscuous mode [ 147.583659][ T9017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.614003][ T9017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.676732][ T9017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.774599][ T9120] netlink: 'syz.3.790': attribute type 12 has an invalid length. [ 147.909692][ T9017] hsr_slave_0: entered promiscuous mode [ 147.928019][ T9017] hsr_slave_1: entered promiscuous mode [ 147.947450][ T9017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.973040][ T9017] Cannot create hsr debugfs directory [ 148.060293][ T8747] veth0_macvtap: entered promiscuous mode [ 148.086608][ T8747] veth1_macvtap: entered promiscuous mode [ 148.212630][ T9140] syzkaller0: entered promiscuous mode [ 148.247276][ T9140] syzkaller0: entered allmulticast mode [ 148.550347][ T5855] Bluetooth: hci2: command tx timeout [ 150.050342][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.062834][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.073139][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.083635][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.094807][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.104896][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.115710][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.126076][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.137061][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.148826][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.264376][ T8747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.273451][ T8747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.282264][ T8747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.291092][ T8747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.412970][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 150.423344][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 150.630648][ T5855] Bluetooth: hci2: command tx timeout [ 150.685620][ T9188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.801'. [ 150.701577][ T6406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.723560][ T6406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.811822][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.844452][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.051726][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 151.152984][ T9017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.173620][ T9017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.206008][ T9017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.226089][ T9017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.362415][ T9017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.454935][ T6390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.524171][ T9017] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.554634][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.561826][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.599284][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.606431][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.654113][ T9213] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.663585][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.681046][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.691396][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.700754][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.710083][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.828056][ T9218] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 151.894801][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.910863][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.928808][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.939261][ T6390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.951460][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.959605][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.966901][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.040783][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 152.213981][ T6390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.343953][ T6390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.373333][ T9248] netlink: 'syz.0.811': attribute type 39 has an invalid length. [ 152.649988][ T9017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.711622][ T5855] Bluetooth: hci2: command tx timeout [ 152.770926][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 152.892974][ T9276] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 152.908150][ T9276] bridge0: port 3(team0) entered disabled state [ 152.915763][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.923288][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.988935][ T9276] bridge0: port 3(team0) entered blocking state [ 152.995362][ T9276] bridge0: port 3(team0) entered forwarding state [ 153.002085][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.009296][ T9276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.016742][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.023953][ T9276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.043981][ T9276] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.064581][ T6390] bridge_slave_1: left allmulticast mode [ 153.075306][ T6390] bridge_slave_1: left promiscuous mode [ 153.085254][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.109386][ T6390] bridge_slave_0: left allmulticast mode [ 153.126553][ T6390] bridge_slave_0: left promiscuous mode [ 153.136084][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.188074][ T9287] Cannot find del_set index 3 as target [ 153.747051][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.761842][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.772482][ T6390] bond0 (unregistering): Released all slaves [ 154.003331][ T9306] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 154.018801][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 154.051108][ T9306] bond1: entered promiscuous mode [ 154.067693][ T5855] Bluetooth: hci1: command tx timeout [ 154.180865][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.189445][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.196788][ T9222] bridge_slave_0: entered allmulticast mode [ 154.204228][ T9222] bridge_slave_0: entered promiscuous mode [ 154.228208][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.251987][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.260169][ T9222] bridge_slave_1: entered allmulticast mode [ 154.275014][ T9222] bridge_slave_1: entered promiscuous mode [ 154.362583][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.390830][ T9017] veth0_vlan: entered promiscuous mode [ 154.414411][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.549951][ T6390] hsr_slave_0: left promiscuous mode [ 154.579625][ T6390] hsr_slave_1: left promiscuous mode [ 154.595446][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.617606][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.635966][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.650741][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.694324][ T6390] veth1_macvtap: left promiscuous mode [ 154.700236][ T6390] veth0_macvtap: left promiscuous mode [ 154.705846][ T6390] veth1_vlan: left promiscuous mode [ 154.712953][ T6390] veth0_vlan: left promiscuous mode [ 155.193788][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 155.236059][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 155.666625][ T9336] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 155.678916][ T9336] netlink: 112 bytes leftover after parsing attributes in process `syz.1.822'. [ 155.690492][ T9017] veth1_vlan: entered promiscuous mode [ 155.749754][ T9222] team0: Port device team_slave_0 added [ 155.771127][ T9017] veth0_macvtap: entered promiscuous mode [ 155.802079][ T9017] veth1_macvtap: entered promiscuous mode [ 155.813295][ T9222] team0: Port device team_slave_1 added [ 155.824304][ T9346] netlink: 468 bytes leftover after parsing attributes in process `syz.0.824'. [ 155.844646][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.824'. [ 155.852074][ T9017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.867962][ T9017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.879259][ T9017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.890421][ T9017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.905166][ T9017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.934769][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.947879][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.015883][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.053545][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.072460][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.122846][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.148546][ T5855] Bluetooth: hci1: command tx timeout [ 156.190388][ T9017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.201923][ T9017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.212354][ T9017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.224436][ T9017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.236636][ T9017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.255368][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 156.296735][ T9017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.306581][ T9017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.315771][ T9017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.325350][ T9017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.353247][ T9222] hsr_slave_0: entered promiscuous mode [ 156.361720][ T9222] hsr_slave_1: entered promiscuous mode [ 156.569244][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.588859][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.644670][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.653151][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.022074][ T6390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.180582][ T6390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.252557][ T6390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.276686][ T9222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.303327][ T6390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.317043][ T9222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.326237][ T9222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.336342][ T9222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.482062][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.524819][ T6390] bridge_slave_1: left allmulticast mode [ 157.534364][ T6390] bridge_slave_1: left promiscuous mode [ 157.543588][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.561605][ T6390] bridge_slave_0: left allmulticast mode [ 157.577694][ T6390] bridge_slave_0: left promiscuous mode [ 157.583480][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.005960][ T9419] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.173090][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 158.244018][ T5855] Bluetooth: hci1: command tx timeout [ 158.260429][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.275869][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.297552][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.318567][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.336095][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.344074][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.446551][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.459533][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.473357][ T6390] bond0 (unregistering): Released all slaves [ 158.494926][ T9415] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 158.503141][ T9415] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 158.514150][ T9415] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 158.522407][ T9415] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 158.538067][ T9415] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 158.549215][ T9415] team0: Failed to send options change via netlink (err -105) [ 158.556713][ T9415] team0: Port device netdevsim0 added [ 158.564348][ T9416] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 158.600184][ T9416] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 158.607665][ T9416] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 158.618818][ T9416] team0: Failed to send options change via netlink (err -105) [ 158.626506][ T9416] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 158.643161][ T9416] team0: Port device netdevsim0 removed [ 158.656479][ T9416] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 158.666219][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 158.895391][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.992706][ T9462] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 159.044989][ T9465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.836'. [ 159.156484][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.163669][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.235006][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.242211][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.312269][ T6390] hsr_slave_0: left promiscuous mode [ 159.332811][ T6390] hsr_slave_1: left promiscuous mode [ 159.349803][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.363373][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.395055][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.419306][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.486442][ T6390] veth1_macvtap: left promiscuous mode [ 159.509286][ T6390] veth0_macvtap: left promiscuous mode [ 159.515246][ T6390] veth1_vlan: left promiscuous mode [ 159.520828][ T6390] veth0_vlan: left promiscuous mode [ 159.801502][ T9498] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 159.886766][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'. [ 160.307451][ T5855] Bluetooth: hci1: command tx timeout [ 160.387560][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 160.397380][ T5855] Bluetooth: hci2: command tx timeout [ 160.432853][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 160.905536][ T9222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.940443][ T9222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.175740][ T9522] sctp: [Deprecated]: syz.1.849 (pid 9522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.175740][ T9522] Use struct sctp_sack_info instead [ 161.256330][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 161.294750][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.357069][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 161.566894][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 161.575989][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.852'. [ 161.752578][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.812978][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.841478][ T9432] bridge_slave_0: entered allmulticast mode [ 161.869156][ T9432] bridge_slave_0: entered promiscuous mode [ 161.889357][ T9568] Unknown status report in ack skb [ 161.893765][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 162.029581][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.057249][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.070671][ T9432] bridge_slave_1: entered allmulticast mode [ 162.094204][ T9432] bridge_slave_1: entered promiscuous mode [ 162.115518][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 162.194874][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.235431][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.349529][ T9432] team0: Port device team_slave_0 added [ 162.370524][ T9432] team0: Port device team_slave_1 added [ 162.446620][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.466157][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.492473][ T5855] Bluetooth: hci2: command tx timeout [ 162.510812][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.531196][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.543295][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.575220][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.604442][ T9222] veth0_vlan: entered promiscuous mode [ 162.679943][ T9222] veth1_vlan: entered promiscuous mode [ 162.696817][ T9432] hsr_slave_0: entered promiscuous mode [ 162.705184][ T9432] hsr_slave_1: entered promiscuous mode [ 162.720660][ T9432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.732211][ T9432] Cannot create hsr debugfs directory [ 163.102813][ T9222] veth0_macvtap: entered promiscuous mode [ 163.145166][ T9222] veth1_macvtap: entered promiscuous mode [ 163.168386][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 163.202577][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'. [ 163.232493][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.262168][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.287202][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.308007][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.332860][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.363538][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.386195][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.412374][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.426693][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.445033][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.565380][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 163.576417][ T9222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.597356][ T9222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.606104][ T9222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.616095][ T9222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.548153][ T5855] Bluetooth: hci2: command tx timeout [ 165.265213][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 165.441985][ T9638] vlan0: entered promiscuous mode [ 165.451158][ T9638] bridge0: entered promiscuous mode [ 165.473242][ T9638] team0: Port device vlan0 added [ 165.479372][ T9432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.495006][ T9432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.540548][ T9432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.598054][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.605914][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.642143][ T9432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.696945][ T6405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.725761][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.892367][ T9668] sctp: [Deprecated]: syz.0.886 (pid 9668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.892367][ T9668] Use struct sctp_sack_info instead [ 165.895453][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.114139][ T9668] gretap0: left promiscuous mode [ 166.553894][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.577759][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.589809][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.598459][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.607891][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.615393][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.630750][ T54] Bluetooth: hci2: command tx timeout [ 166.651532][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.666391][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.712441][ T9668] hsr0: left promiscuous mode [ 166.797010][ T9668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.806430][ T9668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.815809][ T9668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.829791][ T9668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.864465][ T9668] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 166.874385][ T9668] bond0: left promiscuous mode [ 166.880069][ T9668] bond_slave_0: left promiscuous mode [ 166.885612][ T9668] bond_slave_1: left promiscuous mode [ 166.891386][ T9668] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 166.898915][ T9668] macvlan2: left promiscuous mode [ 166.905992][ T9668] macvtap1: left promiscuous mode [ 166.912287][ T9668] macvtap1: left allmulticast mode [ 166.920119][ T9668] macvtap2: left promiscuous mode [ 166.925262][ T9668] macvtap2: left allmulticast mode [ 166.932377][ T9668] macvtap3: left promiscuous mode [ 166.937582][ T9668] macvtap3: left allmulticast mode [ 166.944203][ T9668] vlan3: left promiscuous mode [ 166.950252][ T9668] macvtap4: left promiscuous mode [ 166.955301][ T9668] macvtap4: left allmulticast mode [ 166.963481][ T9668] syz_tun: left allmulticast mode [ 166.969051][ T9668] macvtap0: left promiscuous mode [ 166.974146][ T9668] macvtap0: left allmulticast mode [ 167.005349][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.059576][ T963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.089723][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.888'. [ 167.179075][ T963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.224401][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.231591][ T6390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.259801][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.266925][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.326562][ T963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.502297][ T963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.582691][ T9432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.600901][ T9432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.133963][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 168.256517][ T9706] ip6t_rpfilter: unknown options [ 168.286843][ T9708] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.894'. [ 168.720764][ T54] Bluetooth: hci1: command tx timeout [ 169.486947][ T9725] netlink: 'syz.0.898': attribute type 3 has an invalid length. [ 169.525101][ T9725] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 169.533396][ T9725] netlink: 'syz.0.898': attribute type 2 has an invalid length. [ 169.571831][ T963] bridge_slave_1: left allmulticast mode [ 169.602544][ T963] bridge_slave_1: left promiscuous mode [ 169.614438][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.644517][ T963] bridge_slave_0: left allmulticast mode [ 169.653437][ T963] bridge_slave_0: left promiscuous mode [ 169.666029][ T9733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.902'. [ 169.672642][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.092514][ T963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.103591][ T963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.115118][ T963] bond0 (unregistering): Released all slaves [ 170.173938][ T9684] chnl_net:caif_netlink_parms(): no params data found [ 170.351835][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 170.435663][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.558802][ T9757] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 170.578161][ T9757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.906'. [ 170.642147][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.661208][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.669439][ T9684] bridge_slave_0: entered allmulticast mode [ 170.676476][ T9684] bridge_slave_0: entered promiscuous mode [ 170.684974][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.692143][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.699525][ T9684] bridge_slave_1: entered allmulticast mode [ 170.706445][ T9684] bridge_slave_1: entered promiscuous mode [ 170.766041][ T9775] netlink: 'syz.3.910': attribute type 32 has an invalid length. [ 170.780350][ T963] hsr_slave_0: left promiscuous mode [ 170.786807][ T963] hsr_slave_1: left promiscuous mode [ 170.787683][ T54] Bluetooth: hci1: command tx timeout [ 170.798824][ T963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.812084][ T963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.843400][ T963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.852874][ T963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.880702][ T963] veth1_macvtap: left promiscuous mode [ 170.886918][ T963] veth0_macvtap: left promiscuous mode [ 170.901824][ T963] veth1_vlan: left promiscuous mode [ 171.000176][ T963] veth0_vlan: left promiscuous mode [ 171.665822][ T9753] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 172.056295][ T963] team0 (unregistering): Port device team_slave_1 removed [ 172.106813][ T963] team0 (unregistering): Port device team_slave_0 removed [ 172.475362][ T9684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.490132][ T9778] netlink: 'syz.1.912': attribute type 12 has an invalid length. [ 172.498176][ T9778] netlink: 'syz.1.912': attribute type 29 has an invalid length. [ 172.505952][ T9778] netlink: 148 bytes leftover after parsing attributes in process `syz.1.912'. [ 172.518441][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 172.568994][ T9684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.605429][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 172.722950][ T9684] team0: Port device team_slave_0 added [ 172.762000][ T9432] veth0_vlan: entered promiscuous mode [ 172.786391][ T9684] team0: Port device team_slave_1 added [ 172.867898][ T54] Bluetooth: hci1: command tx timeout [ 172.871965][ T9432] veth1_vlan: entered promiscuous mode [ 172.923058][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.935462][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.962655][ T9684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.981868][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.990245][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.019878][ T9684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.111767][ T9684] hsr_slave_0: entered promiscuous mode [ 173.125437][ T9684] hsr_slave_1: entered promiscuous mode [ 173.172152][ T9432] veth0_macvtap: entered promiscuous mode [ 173.242331][ T9432] veth1_macvtap: entered promiscuous mode [ 173.295403][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 173.341222][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.358720][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.376472][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.418497][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.432404][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.452918][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.484127][ T9432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.495366][ T9432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.504346][ T9432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.517669][ T9432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.613334][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.623987][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.683861][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.705196][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.820130][ T9684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.830699][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.844848][ T9684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.858046][ T9684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.882066][ T9684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.931014][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 173.963136][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 174.068026][ T9896] vlan2: entered promiscuous mode [ 174.082736][ T9896] vlan2: entered allmulticast mode [ 174.089092][ T9896] team0: Port device vlan2 added [ 174.113858][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.123547][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.206816][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.246642][ T6409] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.318542][ T9684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.352221][ T6409] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.377588][ T9684] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.388792][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.395899][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.410734][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.417897][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.443057][ T6409] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.518663][ T6409] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.602776][ T9684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.739550][ T6409] bridge_slave_1: left allmulticast mode [ 174.745260][ T6409] bridge_slave_1: left promiscuous mode [ 174.752794][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.764182][ T6409] bridge_slave_0: left allmulticast mode [ 174.772362][ T6409] bridge_slave_0: left promiscuous mode [ 174.778187][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.873060][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.881236][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.958876][ T54] Bluetooth: hci1: command tx timeout [ 174.964407][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.185006][ T9920] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 175.195328][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 175.216642][ C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 175.255189][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.274812][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.288043][ T6409] bond0 (unregistering): Released all slaves [ 175.311899][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 175.370612][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.384571][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.392932][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.402288][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.412529][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.426444][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.491172][ T9931] xt_TCPMSS: Only works on TCP SYN packets [ 175.584572][ T9684] veth0_vlan: entered promiscuous mode [ 175.610135][ T9684] veth1_vlan: entered promiscuous mode [ 175.662427][ T6409] hsr_slave_0: left promiscuous mode [ 175.671189][ T6409] hsr_slave_1: left promiscuous mode [ 175.679168][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.686714][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.694672][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.702347][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.724850][ T6409] veth1_macvtap: left promiscuous mode [ 175.730639][ T6409] veth0_macvtap: left promiscuous mode [ 175.736276][ T6409] veth1_vlan: left promiscuous mode [ 175.742286][ T6409] veth0_vlan: left promiscuous mode [ 176.341284][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 176.352239][ T6409] team0 (unregistering): Port device team_slave_1 removed [ 176.437639][ T6409] team0 (unregistering): Port device team_slave_0 removed [ 176.829482][ T9946] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 176.875942][ T9946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.896193][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 176.908317][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 176.926125][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.946'. [ 176.954272][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 177.054475][ T9973] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 177.109451][ T9684] veth0_macvtap: entered promiscuous mode [ 177.116270][ T9973] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 177.136834][ T9973] netlink: 55 bytes leftover after parsing attributes in process `syz.3.951'. [ 177.226812][ T9684] veth1_macvtap: entered promiscuous mode [ 177.363240][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.389791][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.404763][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.424598][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 177.507618][ T54] Bluetooth: hci2: command tx timeout [ 177.513455][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.537432][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.550483][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.663553][ T9684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.675724][ T9684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.684693][ T9684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.693976][ T9684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.717020][ T9990] netlink: 'syz.1.956': attribute type 7 has an invalid length. [ 177.727584][ T9990] netlink: 'syz.1.956': attribute type 8 has an invalid length. [ 177.814111][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.836535][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.838490][T10008] delete_channel: no stack [ 177.848829][ T9926] bridge_slave_0: entered allmulticast mode [ 177.868388][ T9926] bridge_slave_0: entered promiscuous mode [ 177.888684][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.906641][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.923123][ T9926] bridge_slave_1: entered allmulticast mode [ 177.945408][ T9926] bridge_slave_1: entered promiscuous mode [ 178.106729][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.118235][T10019] netlink: 'syz.1.964': attribute type 16 has an invalid length. [ 178.125986][T10019] netlink: 'syz.1.964': attribute type 17 has an invalid length. [ 178.188867][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.306061][ T9926] team0: Port device team_slave_0 added [ 178.322918][ T9926] team0: Port device team_slave_1 added [ 178.430587][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.444371][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.473724][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.485350][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.513573][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.538595][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.563184][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.592424][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.614397][ T963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.623849][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.646286][ T9926] hsr_slave_0: entered promiscuous mode [ 178.661986][ T9926] hsr_slave_1: entered promiscuous mode [ 178.673876][ T9926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.688367][ T9926] Cannot create hsr debugfs directory [ 179.537559][T10044] __nla_validate_parse: 3 callbacks suppressed [ 179.537581][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 179.595103][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 179.890487][ T6405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.173920][ T6405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.212902][ T9926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.224284][ T9926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.248458][ T6405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.261924][ T9926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.270817][ T9926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.316953][ T6405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.374543][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.454178][ T9926] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.457561][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 180.484851][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.492082][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.609800][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.616929][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.787531][ T6405] bridge_slave_1: left allmulticast mode [ 180.810949][ T6405] bridge_slave_1: left promiscuous mode [ 180.838018][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.853029][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.864132][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.873557][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.898584][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.906404][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.912135][ T6405] bridge_slave_0: left allmulticast mode [ 180.919612][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.936313][ T6405] bridge_slave_0: left promiscuous mode [ 180.957966][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.371727][T10106] xt_CT: No such helper "snmp" [ 181.500784][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.513226][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.526452][ T6405] bond0 (unregistering): Released all slaves [ 181.557461][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.984'. [ 181.617478][T10101] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 181.636774][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.984'. [ 181.670573][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 181.675422][T10111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.985'. [ 181.709033][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 181.722924][T10111] netlink: 43 bytes leftover after parsing attributes in process `syz.1.985'. [ 181.732397][T10111] netlink: 'syz.1.985': attribute type 2 has an invalid length. [ 181.740235][T10111] netlink: 43 bytes leftover after parsing attributes in process `syz.1.985'. [ 181.772848][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.120247][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 182.259757][ T6405] hsr_slave_0: left promiscuous mode [ 182.272472][ T6405] hsr_slave_1: left promiscuous mode [ 182.279099][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.286584][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.294738][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.302412][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.321192][ T6405] veth1_macvtap: left promiscuous mode [ 182.326737][ T6405] veth0_macvtap: left promiscuous mode [ 182.332550][ T6405] veth1_vlan: left promiscuous mode [ 182.338613][ T6405] veth0_vlan: left promiscuous mode [ 182.809984][ T6405] team0 (unregistering): Port device team_slave_1 removed [ 182.853374][ T6405] team0 (unregistering): Port device team_slave_0 removed [ 182.957488][ T54] Bluetooth: hci1: command tx timeout [ 183.371887][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.418044][T10141] vlan3: entered promiscuous mode [ 183.507712][T10080] chnl_net:caif_netlink_parms(): no params data found [ 183.538288][ T9926] veth0_vlan: entered promiscuous mode [ 183.582907][ T9926] veth1_vlan: entered promiscuous mode [ 183.689429][T10146] lo speed is unknown, defaulting to 1000 [ 183.714813][T10147] nr0: entered promiscuous mode [ 183.732789][T10146] lo speed is unknown, defaulting to 1000 [ 183.747738][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 183.800283][T10146] lo speed is unknown, defaulting to 1000 [ 183.810155][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.835532][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.854716][T10080] bridge_slave_0: entered allmulticast mode [ 183.868005][T10080] bridge_slave_0: entered promiscuous mode [ 183.893163][ T9926] veth0_macvtap: entered promiscuous mode [ 183.915462][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.929858][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.947527][T10080] bridge_slave_1: entered allmulticast mode [ 183.954464][T10080] bridge_slave_1: entered promiscuous mode [ 183.956474][T10146] infiniband syz0: set active [ 183.965604][T10146] infiniband syz0: added lo [ 183.976397][T10152] netlink: 5 bytes leftover after parsing attributes in process `syz.3.995'. [ 183.996628][T10152] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 184.010650][T10146] RDS/IB: syz0: added [ 184.016973][T10146] smc: adding ib device syz0 with port count 1 [ 184.024895][T10152] 0ªX¹¦Dö»: entered allmulticast mode [ 184.029435][T10146] smc: ib device syz0 port 1 has pnetid [ 184.051414][ T9926] veth1_macvtap: entered promiscuous mode [ 184.059725][ T5926] lo speed is unknown, defaulting to 1000 [ 184.085744][ T25] lo speed is unknown, defaulting to 1000 [ 184.088516][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.126063][T10146] lo speed is unknown, defaulting to 1000 [ 184.133532][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.186418][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.216928][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.235884][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.298759][T10080] team0: Port device team_slave_0 added [ 184.319410][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.331095][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.342485][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.359158][T10146] lo speed is unknown, defaulting to 1000 [ 184.361109][ T9926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.379256][ T9926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.390737][ T9926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.403279][ T9926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.421526][T10080] team0: Port device team_slave_1 added [ 184.509900][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.517062][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.553045][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.579840][T10146] lo speed is unknown, defaulting to 1000 [ 184.592071][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.617278][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.665533][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.834846][T10184] __nla_validate_parse: 3 callbacks suppressed [ 184.834859][T10184] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1004'. [ 184.856875][T10146] lo speed is unknown, defaulting to 1000 [ 184.872384][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.900164][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.943641][T10080] hsr_slave_0: entered promiscuous mode [ 184.960084][T10080] hsr_slave_1: entered promiscuous mode [ 185.037659][ T54] Bluetooth: hci1: command tx timeout [ 185.069569][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.078844][T10178] lo speed is unknown, defaulting to 1000 [ 185.120432][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.357364][T10185] lo speed is unknown, defaulting to 1000 [ 185.413501][T10177] delete_channel: no stack [ 185.666854][T10146] lo speed is unknown, defaulting to 1000 [ 185.954086][T10080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.981132][T10080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.011389][T10080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.036672][T10080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.251056][T10080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.307371][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 186.330983][T10080] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.390678][ T3441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.435932][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.443125][ T6387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.452374][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.459543][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.510745][ T3441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.619172][T10227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1007'. [ 186.625477][T10080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.657143][T10080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.785955][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.804567][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.816314][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.848435][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.856498][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.864059][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.866587][ T3441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.921534][T10239] veth0_to_hsr: entered promiscuous mode [ 186.935527][T10235] lo speed is unknown, defaulting to 1000 [ 187.021179][ T3441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.058177][T10239] hsr0: entered promiscuous mode [ 187.117684][ T54] Bluetooth: hci1: command tx timeout [ 187.241849][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.535779][ T3441] bridge_slave_1: left allmulticast mode [ 187.541812][ T3441] bridge_slave_1: left promiscuous mode [ 187.553925][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.563772][ T3441] bridge_slave_0: left allmulticast mode [ 187.572454][ T3441] bridge_slave_0: left promiscuous mode [ 187.581680][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.083390][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.095781][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.106626][ T3441] bond0 (unregistering): Released all slaves [ 188.160458][T10281] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 188.196381][T10281] vlan2: entered promiscuous mode [ 188.311854][T10285] syz_tun (unregistering): left allmulticast mode [ 188.374250][T10293] xt_CT: No such helper "snmp" [ 188.403355][T10285] vlan2 (unregistering): left allmulticast mode [ 188.412389][T10285] team0: Port device vlan2 removed [ 188.463193][T10291] bridge0: entered promiscuous mode [ 188.468938][T10291] bridge0: entered allmulticast mode [ 188.489057][T10291] team0: Port device bridge0 added [ 188.506886][T10295] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 188.534780][T10301] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 188.552476][T10235] chnl_net:caif_netlink_parms(): no params data found [ 188.795274][T10303] netlink: 'syz.3.1025': attribute type 29 has an invalid length. [ 188.947246][ T54] Bluetooth: hci2: command tx timeout [ 188.978959][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.011311][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.046035][T10235] bridge_slave_0: entered allmulticast mode [ 189.057110][T10235] bridge_slave_0: entered promiscuous mode [ 189.100618][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.131927][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.177814][T10235] bridge_slave_1: entered allmulticast mode [ 189.187473][ T54] Bluetooth: hci1: command tx timeout [ 189.208319][T10235] bridge_slave_1: entered promiscuous mode [ 189.280765][ T3441] hsr_slave_0: left promiscuous mode [ 189.298861][ T3441] hsr_slave_1: left promiscuous mode [ 189.313971][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.314815][T10340] netlink: 'syz.1.1036': attribute type 2 has an invalid length. [ 189.344042][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.365460][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.378113][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.417567][ T3441] veth1_macvtap: left promiscuous mode [ 189.423154][ T3441] veth0_macvtap: left promiscuous mode [ 189.428997][ T3441] veth1_vlan: left promiscuous mode [ 189.434330][ T3441] veth0_vlan: left promiscuous mode [ 190.276953][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 190.329898][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 190.730696][T10338] bridge1: entered promiscuous mode [ 190.736055][T10338] bridge1: entered allmulticast mode [ 190.751847][T10338] team0: Port device bridge1 added [ 190.764496][T10341] bridge0: port 1(ip6gretap0) entered blocking state [ 190.775656][T10341] bridge0: port 1(ip6gretap0) entered disabled state [ 190.782728][T10341] ip6gretap0: entered allmulticast mode [ 190.789849][T10341] ip6gretap0: entered promiscuous mode [ 190.812330][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.830725][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.855701][T10343] lo speed is unknown, defaulting to 1000 [ 190.920797][T10235] team0: Port device team_slave_0 added [ 190.934453][T10080] veth0_vlan: entered promiscuous mode [ 190.967926][T10235] team0: Port device team_slave_1 added [ 191.027321][ T54] Bluetooth: hci2: command tx timeout [ 191.072742][T10080] veth1_vlan: entered promiscuous mode [ 191.102488][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.123516][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.155075][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.177030][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.185214][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.215614][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.318536][T10235] hsr_slave_0: entered promiscuous mode [ 191.329441][T10235] hsr_slave_1: entered promiscuous mode [ 191.342356][T10235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.353455][T10235] Cannot create hsr debugfs directory [ 191.614381][T10080] veth0_macvtap: entered promiscuous mode [ 191.636217][T10080] veth1_macvtap: entered promiscuous mode [ 191.673194][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.686725][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.699130][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.712223][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.723207][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.734496][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.745984][T10080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.755314][T10080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.764626][T10080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.773752][T10080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.880704][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.903083][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.971988][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.995165][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.118759][T10393] vlan4: entered promiscuous mode [ 192.241191][T10235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.251761][T10235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.265071][T10235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.278525][T10235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.512008][ T6399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.606178][ T6399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.638951][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.666420][ T6399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.690907][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.701531][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.708690][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.723364][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.730545][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.768804][ T6399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.794988][T10235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.805839][T10235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.913762][ T6399] bridge_slave_1: left allmulticast mode [ 192.923311][ T6399] bridge_slave_1: left promiscuous mode [ 192.929767][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.940028][ T6399] bridge_slave_0: left allmulticast mode [ 192.945711][ T6399] bridge_slave_0: left promiscuous mode [ 192.953105][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.108076][ T54] Bluetooth: hci2: command tx timeout [ 193.442722][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.457024][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.476710][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.495867][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.508020][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.527354][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.744998][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.761774][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.781616][ T6399] bond0 (unregistering): Released all slaves [ 193.795723][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 193.840679][T10450] ipvlan2: entered promiscuous mode [ 193.871257][T10450] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.885505][T10450] team0: Device ipvlan2 is already an upper device of the team interface [ 194.024312][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.056434][T10437] lo speed is unknown, defaulting to 1000 [ 194.129877][T10459] netlink: 'syz.0.1066': attribute type 10 has an invalid length. [ 194.138907][T10459] bond0: (slave netdevsim0): Releasing backup interface [ 194.165605][T10459] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 194.181286][T10459] team0: Failed to send options change via netlink (err -105) [ 194.208007][T10461] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1067'. [ 194.213284][T10459] team0: Port device netdevsim0 added [ 194.236535][T10462] netlink: 'syz.0.1066': attribute type 10 has an invalid length. [ 194.261539][T10462] team0: Failed to send options change via netlink (err -105) [ 194.273680][T10462] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 194.285518][T10462] team0: Port device netdevsim0 removed [ 194.301102][T10462] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 194.474819][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481804][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.521775][T10235] veth0_vlan: entered promiscuous mode [ 194.555122][T10235] veth1_vlan: entered promiscuous mode [ 194.699325][ T6399] hsr_slave_0: left promiscuous mode [ 194.757368][ T6399] hsr_slave_1: left promiscuous mode [ 194.774633][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.783764][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.804357][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.819566][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.885388][ T6399] veth1_macvtap: left promiscuous mode [ 194.896350][ T6399] veth0_macvtap: left promiscuous mode [ 194.905532][ T6399] veth1_vlan: left promiscuous mode [ 194.915015][ T6399] veth0_vlan: left promiscuous mode [ 195.191485][ T5855] Bluetooth: hci2: command tx timeout [ 195.589342][ T5855] Bluetooth: hci1: command tx timeout [ 195.832415][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 195.872368][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 196.403737][T10496] lo speed is unknown, defaulting to 1000 [ 196.418244][T10235] veth0_macvtap: entered promiscuous mode [ 196.479443][T10235] veth1_macvtap: entered promiscuous mode [ 196.502901][T10437] chnl_net:caif_netlink_parms(): no params data found [ 196.600487][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.617914][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.652851][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.705127][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 196.743000][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.756023][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.768959][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.780463][T10235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.789446][T10235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.798493][T10235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.807543][T10235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.861857][T10534] vlan4: entered promiscuous mode [ 196.965387][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.020669][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.042837][T10437] bridge_slave_0: entered allmulticast mode [ 197.085915][T10437] bridge_slave_0: entered promiscuous mode [ 197.136568][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 197.187746][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.217188][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.234643][T10437] bridge_slave_1: entered allmulticast mode [ 197.248364][T10437] bridge_slave_1: entered promiscuous mode [ 197.352624][ T6399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.362802][ T6399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.366301][T10543] lo speed is unknown, defaulting to 1000 [ 197.391763][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.421682][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.503867][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.515967][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.555902][T10437] team0: Port device team_slave_0 added [ 197.570907][T10437] team0: Port device team_slave_1 added [ 197.658972][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.670257][ T5855] Bluetooth: hci1: command tx timeout [ 197.702997][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.749996][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.784028][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.797298][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.843696][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.001091][T10437] hsr_slave_0: entered promiscuous mode [ 198.018629][T10437] hsr_slave_1: entered promiscuous mode [ 198.024448][T10544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1089'. [ 198.112162][ T6389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.275026][ T6389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.371111][ T6389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.451334][ T6389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.671258][ T6389] bridge_slave_1: left allmulticast mode [ 198.677997][ T6389] bridge_slave_1: left promiscuous mode [ 198.684566][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.694068][ T6389] bridge_slave_0: left allmulticast mode [ 198.704830][ T6389] bridge_slave_0: left promiscuous mode [ 198.711616][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.053138][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.064484][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.077705][ T6389] bond0 (unregistering): Released all slaves [ 199.381265][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.392329][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.420005][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.441014][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.462921][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.470688][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.484377][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 199.749390][ T54] Bluetooth: hci1: command tx timeout [ 200.009692][T10437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.091003][T10437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.116170][T10437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.155667][T10582] lo speed is unknown, defaulting to 1000 [ 200.166195][T10437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.389536][ T6389] hsr_slave_0: left promiscuous mode [ 200.404508][ T6389] hsr_slave_1: left promiscuous mode [ 200.422598][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.431390][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.451673][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.460113][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.479444][ T6389] veth1_macvtap: left promiscuous mode [ 200.485000][ T6389] veth0_macvtap: left promiscuous mode [ 200.490996][ T6389] veth1_vlan: left promiscuous mode [ 200.496253][ T6389] veth0_vlan: left promiscuous mode [ 200.915584][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 200.964082][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 201.351351][T10612] tipc: New replicast peer: 255.255.255.255 [ 201.359860][T10612] tipc: Enabled bearer , priority 10 [ 201.379317][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1105'. [ 201.500804][T10626] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 201.514643][ T5855] Bluetooth: hci2: command tx timeout [ 201.541554][T10626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.636927][T10632] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 201.664310][T10437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.718827][T10637] atomic_op ffff88807e558998 conn xmit_atomic 0000000000000000 [ 201.813905][T10437] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.835710][ T5855] Bluetooth: hci1: command tx timeout [ 201.885935][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.893223][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.936543][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.943746][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.958282][T10582] chnl_net:caif_netlink_parms(): no params data found [ 201.978253][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 202.044661][T10437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.061754][T10437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.232960][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.252654][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.270877][T10582] bridge_slave_0: entered allmulticast mode [ 202.282298][T10582] bridge_slave_0: entered promiscuous mode [ 202.291191][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.302066][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.310548][T10582] bridge_slave_1: entered allmulticast mode [ 202.317704][T10582] bridge_slave_1: entered promiscuous mode [ 202.325502][T10667] team0: entered promiscuous mode [ 202.331396][T10667] team_slave_0: entered promiscuous mode [ 202.337359][T10667] team_slave_1: entered promiscuous mode [ 202.349401][T10667] macvlan1: entered promiscuous mode [ 202.355458][T10667] team0: Port device macvlan1 added [ 202.391881][T10667] macvlan1: left promiscuous mode [ 202.414997][T10667] team0: Port device macvlan1 removed [ 202.426182][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.444011][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.454138][T10665] team0: left promiscuous mode [ 202.459192][T10665] team_slave_0: left promiscuous mode [ 202.465248][T10665] team_slave_1: left promiscuous mode [ 202.496731][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.573133][T10582] team0: Port device team_slave_0 added [ 202.604968][T10582] team0: Port device team_slave_1 added [ 202.666461][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.675364][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.705663][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.728399][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.747345][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.807642][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.882256][T10691] batadv_slave_0: entered promiscuous mode [ 202.894424][T10582] hsr_slave_0: entered promiscuous mode [ 202.905200][T10691] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1125'. [ 202.921777][T10582] hsr_slave_1: entered promiscuous mode [ 202.929672][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.950607][T10582] Cannot create hsr debugfs directory [ 202.961765][T10691] lo speed is unknown, defaulting to 1000 [ 203.170035][T10437] veth0_vlan: entered promiscuous mode [ 203.234963][T10437] veth1_vlan: entered promiscuous mode [ 203.384686][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1128'. [ 203.405808][T10701] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 203.433211][T10701] bond0: (slave netdevsim0): Releasing backup interface [ 203.445478][T10701] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 203.456320][T10701] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 203.466779][T10701] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 203.477516][T10701] team0: Failed to send options change via netlink (err -105) [ 203.486213][T10701] team0: Port device netdevsim0 added [ 203.494574][T10437] veth0_macvtap: entered promiscuous mode [ 203.544815][T10706] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 203.566011][T10706] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 203.573726][T10706] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 203.585144][T10706] team0: Failed to send options change via netlink (err -105) [ 203.592831][ T5855] Bluetooth: hci2: command 0x041b tx timeout [ 203.605585][T10706] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 203.615867][T10706] team0: Port device netdevsim0 removed [ 203.625313][T10706] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 203.749109][T10437] veth1_macvtap: entered promiscuous mode [ 203.829330][T10582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.849798][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.875976][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.913638][T10437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.925561][T10719] vlan4: entered promiscuous mode [ 203.939763][T10582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.976889][T10582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.997974][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.015099][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.026230][T10437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.063900][T10582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.169871][T10437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.182390][T10437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.192662][T10437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.227541][T10437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.341472][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'. [ 204.476461][T10745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 204.490864][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.506564][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.522605][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.610424][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.649353][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.673264][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.680468][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.686875][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.691615][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.702207][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.183360][ T3441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.234883][T10773] erspan0: entered promiscuous mode [ 205.248395][T10773] vlan2: entered promiscuous mode [ 205.263905][T10773] erspan0: left promiscuous mode [ 205.384635][ T3441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.443858][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.506799][ T3441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.562016][T10582] veth0_vlan: entered promiscuous mode [ 205.574302][T10582] veth1_vlan: entered promiscuous mode [ 205.615285][ T3441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.652920][T10582] veth0_macvtap: entered promiscuous mode [ 205.663023][T10582] veth1_macvtap: entered promiscuous mode [ 205.677288][ T5855] Bluetooth: hci2: command 0x041b tx timeout [ 205.688242][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.698968][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.709650][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.720348][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.731662][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.744873][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.759580][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.769790][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.780516][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.791809][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.811759][T10582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.821569][T10582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.831075][T10582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.842449][T10582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.122077][ T3441] bridge_slave_1: left allmulticast mode [ 206.138209][ T3441] bridge_slave_1: left promiscuous mode [ 206.145648][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.165817][ T3441] bridge_slave_0: left allmulticast mode [ 206.177588][ T3441] bridge_slave_0: left promiscuous mode [ 206.188952][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.276034][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.292240][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.321406][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.343873][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.355513][ T5860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.368528][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.694419][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.707048][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.718957][ T3441] bond0 (unregistering): Released all slaves [ 206.730262][T10786] netlink: 'syz.1.1154': attribute type 21 has an invalid length. [ 206.738782][T10786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1154'. [ 206.739745][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.749617][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1154'. [ 206.761760][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.796753][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 207.031208][T10805] xt_l2tp: v2 tid > 0xffff: 150994944 [ 207.747676][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 208.389720][ T54] Bluetooth: hci1: command tx timeout [ 208.607152][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.607496][T10789] lo speed is unknown, defaulting to 1000 [ 208.615073][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.205448][ T3441] hsr_slave_0: left promiscuous mode [ 209.213616][ T3441] hsr_slave_1: left promiscuous mode [ 209.219646][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.227185][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.236375][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.244121][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.266922][ T3441] veth1_macvtap: left promiscuous mode [ 209.273155][ T3441] veth0_macvtap: left promiscuous mode [ 209.278820][ T3441] veth1_vlan: left promiscuous mode [ 209.284122][ T3441] veth0_vlan: left promiscuous mode [ 209.924948][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 209.977432][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 210.467588][ T54] Bluetooth: hci1: command tx timeout [ 210.496907][T10832] net_ratelimit: 4 callbacks suppressed [ 210.496927][T10832] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 210.530610][T10789] chnl_net:caif_netlink_parms(): no params data found [ 210.635188][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.642624][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.650243][T10789] bridge_slave_0: entered allmulticast mode [ 210.656792][T10789] bridge_slave_0: entered promiscuous mode [ 210.666386][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.674957][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.690220][T10789] bridge_slave_1: entered allmulticast mode [ 210.697518][T10789] bridge_slave_1: entered promiscuous mode [ 210.726406][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.741737][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.780843][T10789] team0: Port device team_slave_0 added [ 210.798605][T10789] team0: Port device team_slave_1 added [ 210.815167][T10789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.822487][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.848615][T10789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.860842][T10789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.869598][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.895696][T10789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.934816][T10789] hsr_slave_0: entered promiscuous mode [ 210.941871][T10789] hsr_slave_1: entered promiscuous mode [ 211.012838][ T3441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.090521][ T3441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.173197][ T3441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.344825][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 211.459528][ T3441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.514122][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.526564][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.535680][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.544198][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.557827][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.566545][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.590775][T10860] lo speed is unknown, defaulting to 1000 [ 211.796802][T10857] lo speed is unknown, defaulting to 1000 [ 211.873128][ T3441] bridge_slave_1: left allmulticast mode [ 211.881901][ T3441] bridge_slave_1: left promiscuous mode [ 211.888042][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.902826][ T3441] bridge_slave_0: left allmulticast mode [ 211.909059][ T3441] bridge_slave_0: left promiscuous mode [ 211.914893][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.547333][ T5855] Bluetooth: hci1: command tx timeout [ 212.731623][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.743022][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.754942][ T3441] bond0 (unregistering): Released all slaves [ 212.776361][T10875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'. [ 212.785610][T10875] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1174'. [ 212.840317][T10789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.875048][T10789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.887603][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1178'. [ 213.033743][T10789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.044607][T10789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.066868][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 213.080092][T10900] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1181'. [ 213.222126][T10896] netlink: 'syz.0.1180': attribute type 4 has an invalid length. [ 213.321738][T10905] lo speed is unknown, defaulting to 1000 [ 213.380981][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'. [ 213.416349][T10910] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 213.484831][T10910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.565894][T10916] bond2: (slave bridge2): making interface the new active one [ 213.574769][T10916] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 213.600253][ T3441] hsr_slave_0: left promiscuous mode [ 213.606141][ T3441] hsr_slave_1: left promiscuous mode [ 213.612126][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.621172][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.631805][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.642740][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.663738][ T3441] veth1_macvtap: left promiscuous mode [ 213.669353][ T5855] Bluetooth: hci2: command tx timeout [ 213.670971][ T3441] veth0_macvtap: left promiscuous mode [ 213.680835][ T3441] veth1_vlan: left promiscuous mode [ 213.686101][ T3441] veth0_vlan: left promiscuous mode [ 214.112221][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 214.152244][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 214.548641][T10857] chnl_net:caif_netlink_parms(): no params data found [ 214.637694][ T5855] Bluetooth: hci1: command tx timeout [ 214.724285][T10789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.884786][T10928] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 214.913546][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.934523][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.945700][T10857] bridge_slave_0: entered allmulticast mode [ 214.961226][T10857] bridge_slave_0: entered promiscuous mode [ 214.969712][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.976837][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.984391][T10857] bridge_slave_1: entered allmulticast mode [ 214.991727][T10857] bridge_slave_1: entered promiscuous mode [ 215.002849][T10789] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.013985][T10933] team0: No ports can be present during mode change [ 215.033246][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 215.083313][T10933] team0 (unregistering): Port device team_slave_0 removed [ 215.098553][T10933] team0 (unregistering): Port device team_slave_1 removed [ 215.116814][T10933] team0 (unregistering): Port device veth0_macvtap removed [ 215.126645][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.135459][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.152740][T10933] bridge0: left promiscuous mode [ 215.159608][T10933] [ 215.161952][T10933] ============================================ [ 215.168089][T10933] WARNING: possible recursive locking detected [ 215.174224][T10933] 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 Not tainted [ 215.181323][T10933] -------------------------------------------- [ 215.187453][T10933] syz.1.1190/10933 is trying to acquire lock: [ 215.193519][T10933] ffff88806598ce00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 215.203787][T10933] [ 215.203787][T10933] but task is already holding lock: [ 215.211139][T10933] ffff88806598ce00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_uninit+0x37/0x3e0 [ 215.220440][T10933] [ 215.220440][T10933] other info that might help us debug this: [ 215.228486][T10933] Possible unsafe locking scenario: [ 215.228486][T10933] [ 215.235950][T10933] CPU0 [ 215.239234][T10933] ---- [ 215.242498][T10933] lock(team->team_lock_key#4); [ 215.247431][T10933] lock(team->team_lock_key#4); [ 215.252359][T10933] [ 215.252359][T10933] *** DEADLOCK *** [ 215.252359][T10933] [ 215.260485][T10933] May be due to missing lock nesting notation [ 215.260485][T10933] [ 215.268819][T10933] 2 locks held by syz.1.1190/10933: [ 215.273999][T10933] #0: ffffffff8fcd4468 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 215.283406][T10933] #1: ffff88806598ce00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_uninit+0x37/0x3e0 [ 215.293407][T10933] [ 215.293407][T10933] stack backtrace: [ 215.299380][T10933] CPU: 0 UID: 0 PID: 10933 Comm: syz.1.1190 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 215.310123][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.320167][T10933] Call Trace: [ 215.323445][T10933] [ 215.326411][T10933] dump_stack_lvl+0x241/0x360 [ 215.331088][T10933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.336283][T10933] ? __pfx__printk+0x10/0x10 [ 215.340893][T10933] ? lockdep_unlock+0x16a/0x300 [ 215.345744][T10933] print_deadlock_bug+0x483/0x620 [ 215.350773][T10933] validate_chain+0x15e2/0x5920 [ 215.355610][T10933] ? __pfx_validate_chain+0x10/0x10 [ 215.360801][T10933] ? mark_lock+0x9a/0x360 [ 215.365118][T10933] ? __pfx_validate_chain+0x10/0x10 [ 215.370314][T10933] ? __lock_acquire+0x1384/0x2050 [ 215.375347][T10933] ? mark_lock+0x9a/0x360 [ 215.379675][T10933] ? __lock_acquire+0x1384/0x2050 [ 215.384693][T10933] ? mark_lock+0x9a/0x360 [ 215.389010][T10933] __lock_acquire+0x1384/0x2050 [ 215.393860][T10933] lock_acquire+0x1ed/0x550 [ 215.398373][T10933] ? team_port_change_check+0x51/0x1e0 [ 215.403832][T10933] ? __pfx_lock_acquire+0x10/0x10 [ 215.408857][T10933] ? lockdep_hardirqs_on+0x99/0x150 [ 215.414043][T10933] ? __pfx___might_resched+0x10/0x10 [ 215.419320][T10933] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 215.425207][T10933] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 215.431697][T10933] ? lock_timer_base+0x220/0x240 [ 215.436629][T10933] __mutex_lock+0x136/0xd70 [ 215.441121][T10933] ? team_port_change_check+0x51/0x1e0 [ 215.446575][T10933] ? bond_netdev_event+0xdd/0xf20 [ 215.451589][T10933] ? __timer_delete_sync+0x15c/0x310 [ 215.456862][T10933] ? team_port_change_check+0x51/0x1e0 [ 215.462309][T10933] ? __pfx___mutex_lock+0x10/0x10 [ 215.467332][T10933] ? __asan_memset+0x23/0x50 [ 215.471924][T10933] team_port_change_check+0x51/0x1e0 [ 215.477210][T10933] team_device_event+0x161/0x5b0 [ 215.482162][T10933] ? notifier_call_chain+0x162/0x3e0 [ 215.487445][T10933] notifier_call_chain+0x19f/0x3e0 [ 215.492564][T10933] dev_close_many+0x33c/0x4c0 [ 215.497237][T10933] ? __pfx_dev_close_many+0x10/0x10 [ 215.502518][T10933] vlan_device_event+0x18b7/0x1de0 [ 215.507642][T10933] ? br_device_event+0x148/0x970 [ 215.512597][T10933] ? __pfx_phonet_device_notify+0x10/0x10 [ 215.518334][T10933] ? __pfx_vlan_device_event+0x10/0x10 [ 215.523813][T10933] ? __pfx_br_device_event+0x10/0x10 [ 215.529108][T10933] ? raw_notifier+0x9d/0x740 [ 215.533701][T10933] ? cgw_notifier+0xd8/0x3b0 [ 215.538286][T10933] ? packet_notifier+0x76/0xa30 [ 215.543123][T10933] notifier_call_chain+0x19f/0x3e0 [ 215.548224][T10933] dev_close_many+0x33c/0x4c0 [ 215.552895][T10933] ? __pfx_dev_close_many+0x10/0x10 [ 215.558079][T10933] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 215.563355][T10933] dev_close+0x1c0/0x2c0 [ 215.567595][T10933] ? __pfx_dev_close+0x10/0x10 [ 215.572385][T10933] ? lockdep_rtnl_is_held+0x26/0x40 [ 215.577571][T10933] ? vlan_vids_del_by_dev+0x2a1/0x2f0 [ 215.582938][T10933] team_port_del+0x517/0xcc0 [ 215.587523][T10933] ? __pfx_team_port_del+0x10/0x10 [ 215.592626][T10933] ? ip6_route_dev_notify+0x99/0x600 [ 215.597896][T10933] ? notifier_call_chain+0x162/0x3e0 [ 215.603170][T10933] team_uninit+0xa2/0x3e0 [ 215.607487][T10933] ? __pfx_team_uninit+0x10/0x10 [ 215.612421][T10933] unregister_netdevice_many_notify+0x1735/0x1da0 [ 215.618838][T10933] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.625593][T10933] ? mark_lock+0x9a/0x360 [ 215.629921][T10933] ? unregister_netdevice_queue+0x26b/0x370 [ 215.635813][T10933] ? __nla_parse+0x40/0x60 [ 215.640218][T10933] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.646451][T10933] rtnl_dellink+0x51d/0x8c0 [ 215.650947][T10933] ? mark_lock+0x9a/0x360 [ 215.655294][T10933] ? __pfx_rtnl_dellink+0x10/0x10 [ 215.660339][T10933] ? __pfx___mutex_lock+0x10/0x10 [ 215.665392][T10933] ? __pfx_rtnl_dellink+0x10/0x10 [ 215.670413][T10933] rtnetlink_rcv_msg+0x73f/0xcf0 [ 215.675356][T10933] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 215.680464][T10933] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.685938][T10933] ? ref_tracker_free+0x643/0x7e0 [ 215.690954][T10933] netlink_rcv_skb+0x1e3/0x430 [ 215.695746][T10933] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.701218][T10933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.706523][T10933] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.711709][T10933] netlink_unicast+0x7f6/0x990 [ 215.716464][T10933] ? __pfx_netlink_unicast+0x10/0x10 [ 215.721752][T10933] ? __virt_addr_valid+0x183/0x530 [ 215.726856][T10933] ? __check_object_size+0x48e/0x900 [ 215.732129][T10933] netlink_sendmsg+0x8e4/0xcb0 [ 215.736885][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.742158][T10933] ? aa_sock_msg_perm+0x91/0x160 [ 215.747093][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.752371][T10933] __sock_sendmsg+0x221/0x270 [ 215.757040][T10933] ____sys_sendmsg+0x52a/0x7e0 [ 215.761809][T10933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.767095][T10933] __sys_sendmsg+0x292/0x380 [ 215.771691][T10933] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.776811][T10933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.783156][T10933] ? do_syscall_64+0x100/0x230 [ 215.787922][T10933] ? do_syscall_64+0xb6/0x230 [ 215.792602][T10933] do_syscall_64+0xf3/0x230 [ 215.797120][T10933] ? clear_bhb_loop+0x35/0x90 [ 215.801785][T10933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.807682][T10933] RIP: 0033:0x7fe69c37e719 [ 215.812137][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.831757][T10933] RSP: 002b:00007fe69d197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.840162][T10933] RAX: ffffffffffffffda RBX: 00007fe69c535f80 RCX: 00007fe69c37e719 [ 215.848122][T10933] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 000000000000000c [ 215.856095][T10933] RBP: 00007fe69c3f139e R08: 0000000000000000 R09: 0000000000000000 [ 215.864060][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.872029][T10933] R13: 0000000000000000 R14: 00007fe69c535f80 R15: 00007ffc1e7aed58 [ 215.880015][T10933] [ 215.884629][ T5855] Bluetooth: hci2: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.907244][ T5855] Bluetooth: hci2: command tx timeout [ 219.987207][ T5855] Bluetooth: hci2: command tx timeout