last executing test programs: 1m35.375724436s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m22.275369549s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m8.263462483s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 50.352606664s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 26.273443429s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11.062116965s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1200, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 10.000878557s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "39ebc97fccb69645", "88c7477aa032d8b04a03ac5e83f826c8", "18175e79", "7b2046c524359b7b"}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x137) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000cc0), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x7, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x40000029}) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x10000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001540)) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)='@', 0x1}], 0x1}}], 0x1, 0x20040841) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000480)="303338a3fbaa64b7549b030000008ddbccb8bd4c588daacbd1fc0187ed", 0x1d, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 9.422866695s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) 9.327900386s ago: executing program 4: socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x13, 0x0, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000044, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000038c0)=@sco, 0x80, &(0x7f0000005180)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005080)=""/223, 0xdf}], 0x3, &(0x7f0000005200)=""/79, 0x4f}, 0x3}], 0x3, 0x40002006, 0x0) sendfile(r2, r1, 0x0, 0xffefffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f00000003c0)={'pim6reg1\x00', @random="b68dbcbd15dc"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xcb, @private2, 0x100}}, 0x4}, &(0x7f0000000140)=0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x20000195}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000083eeff0f00000000000074fd99f8d8cf3383892efebb76217f5fcf2bddb6fb1f183a12", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xd}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r8}, 0x10) 8.663366141s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c02000007"], 0xd) 8.566556737s ago: executing program 0: pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a3e67d6eb62a747180000000000000000000000000000009500000000000080"], 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 8.336560576s ago: executing program 4: socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) socket(0x0, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x1a}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xbc, 0x0, &(0x7f0000000080)) 8.33367008s ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) sendto$inet(r0, &(0x7f0000000540)='0', 0x1, 0x0, &(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='N', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x22a0b}}, 0x20}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=@allocspi={0x1d0, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@remote}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback}, 0x0, 0x800}, [@policy={0xac, 0x7, {{@in=@multicast1, @in6=@empty}}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@broadcast}}]}, 0x1d0}}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x14, &(0x7f0000000100)={r1}, 0x8) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60"], 0x0) 7.27732869s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "39ebc97fccb69645", "88c7477aa032d8b04a03ac5e83f826c8", "18175e79", "7b2046c524359b7b"}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x137) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000cc0), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x7, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x40000029}) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x10000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001540)) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)='@', 0x1}], 0x1}}], 0x1, 0x20040841) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000480)="303338a3fbaa64b7549b030000008ddbccb8bd4c588daacbd1fc0187ed", 0x1d, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 5.206782206s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) 5.000859256s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x4000010) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) socket(0x0, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000b80), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], &(0x7f0000000200)=""/240, 0x1a, 0xf0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) r5 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r5, 0x10d, 0xbc, 0x0, &(0x7f0000000080)) 2.343576527s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900240073797a30000000000800410072783113"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00\a\x00\b\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000730200000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="83a15ab22ee3", 'virt_wifi0\x00'}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x4c, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @union={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0xa, 0xff9, 0xa}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.19108071s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r0}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001400110c000000110000000002000000", @ANYRES32=r2, @ANYBLOB="08000900000000000800030000000000080002"], 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="40f0868f615eb09ac2916c23e91d11cc1c02bcd2ed8906960d33fc06db910153f56828859e1c63252184099df34317ac44cba08681f239aa", 0x38, 0x8005, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.131684685s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) 2.044448064s ago: executing program 2: socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0xba, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x2}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 2.03238404s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='afs_make_fs_call\x00', r4}, 0x24) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080), 0x4) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000073c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000007400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010300000000000000ff01000000"], 0x14}}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000000)='\x00*', 0x2) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r12, &(0x7f0000000640)="4361732871b062af3578a6c6cc2bbaf6f8551060d80767a7b2848000"/46, 0x2e, 0x8810, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, 0x0, &(0x7f0000000400)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 1.716407511s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xd4f4baa9d87dbd99, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in6, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000f00)={0x5c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x27}}}}, [@NL80211_ATTR_CSA_IES={0x34, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xfffffffffffffdc7, 0xba, [0x5, 0x2, 0x49a, 0xf34, 0x5, 0x2, 0xdb58, 0x8]}, @beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x95, 0x3, 0x81]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfffe]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc050}, 0x8080) preadv(r0, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffffa3}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x6, 0x4000000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0x10, 0x2, 0x4) r4 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000004c0)) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}}, 0x4000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="54158f000000", @ANYRES16=r9, @ANYBLOB="020027bd7000fbdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000907206001100090000000800150000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) recvmmsg(r7, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000007b4d400000000000950000000000000073d44e838ab671e89b18b163e36bc114c5d1ba6c4472364549b45dbc376d8666a368"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.527745796s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "39ebc97fccb69645", "88c7477aa032d8b04a03ac5e83f826c8", "18175e79", "7b2046c524359b7b"}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x137) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000cc0), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x7, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x10000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001540)) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)='@', 0x1}], 0x1}}], 0x1, 0x20040841) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000480)="303338a3fbaa64b7549b030000008ddbccb8bd4c588daacbd1fc0187ed", 0x1d, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 1.101705887s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2463e30050000000", @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250000000006001a004e220000140000060002000000008f06301c010000000000000000000105001200f80000000800feff0901010205002100000000000004e5000099b9327a1a2577caddfdea22a7bbb900002f142c534385413a4798f3118fdd27bf7f38c332c9efdd0ae3e8e416e5a5e55c991a706d0d8894"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8855) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/40, 0x28, 0x2, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @local, 0x9b2}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd600a843500040600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2214d17d91ffb49d7c812b149030ee5c1e4c310d8dc6b19f76b632d3d62fd074f0cc3de0889705d3bce45fae52", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300060000000000020000000000000000000000000000000200100000000000ffffffff00000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3316, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000d80)=ANY=[@ANYBLOB='8\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000093146e56100782000000001400020063616966300000000000000000000000080003000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x738}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffff7f, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000180)=0x30) 1.06839179s ago: executing program 3: r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x4084) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x7}, 0x0) 698.719795ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) (async) syz_emit_ethernet(0xb1, &(0x7f00000003c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@x25={0x805, {0x2, 0x4, 0xf7, "12852c35c615a857c4a99b7de45fe485c2f054c74aa73a438c2b0e3c0a81a919c92b6fc24de08106d6b45cd2e27e02f1d3e4b65ac0eee09d9696f076f07dc5ac6ff1369104c8e7c7d4449ebafcd97592df251758d5a12f586698a10d956b69cc779f848a796bb2a425a27d6851c345b030954d1f17205d3c3153bb52fdfab2fa25fd1ebb02db84dfaa965a41221bb10a78b10a65863e94190b20e41f"}}}}, &(0x7f0000000040)={0x0, 0x4, [0x1a2, 0x52, 0xc4c, 0xc8e]}) 562.939515ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xe9}, 0x20) socket$inet6(0xa, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x3401}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x30, 0x0, 0x0, &(0x7f0000000140)=[@rights], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x61]}}, 0x0, 0x1f, 0x0, 0x1, 0x2}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8923, 0x20000000) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="6abc21a7b2e7890c1466cc408f1de28862546f2afe8d2e5074", 0x19}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000440)) recvmsg$unix(r4, &(0x7f0000000740)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)=""/19, 0x13}, {&(0x7f0000000580)=""/251, 0xfb}], 0x2, &(0x7f00000006c0)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights], 0x70}, 0x40010000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0201000002"], 0x11}}, 0x0) 134.612783ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1012c1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x1, 0x7ff) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f0000000c0007800800020005000000"], 0x20}}, 0x8000) 109.390584ms ago: executing program 3: pipe(&(0x7f0000000080)) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 0s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900240073797a30000000000800410072783113"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00\a\x00\b\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000730200000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="83a15ab22ee3", 'virt_wifi0\x00'}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x4c, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @union={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0xa, 0xff9, 0xa}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ce not active [ 586.474230][T21168] hsr_slave_0: entered promiscuous mode [ 586.482060][T21168] hsr_slave_1: entered promiscuous mode [ 586.492759][T21168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.501071][T21168] Cannot create hsr debugfs directory [ 586.711611][T21204] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 586.807785][ T29] audit: type=1804 audit(1717837270.854:52): pid=21209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1791458227/syzkaller.6UAv5N/837/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 586.826501][T21168] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.859769][T21168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.948042][ T29] audit: type=1804 audit(1717837270.994:53): pid=21213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1791458227/syzkaller.6UAv5N/838/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 586.963902][T21168] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.987646][T21168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.052557][T21168] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.072775][T21168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.139857][T21168] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.149965][T21168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.274086][T21168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.285826][T21168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.301833][T21168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.312618][T21168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.445828][T21168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.489470][T21168] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.513738][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.520937][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.551020][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.558249][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.591612][T21168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.606877][T21168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.645280][ T52] Bluetooth: hci5: command tx timeout [ 588.045478][T21245] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 588.091622][T21245] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.142792][T21168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.270303][T21168] veth0_vlan: entered promiscuous mode [ 588.297962][T21168] veth1_vlan: entered promiscuous mode [ 588.353898][T21168] veth0_macvtap: entered promiscuous mode [ 588.363411][T21168] veth1_macvtap: entered promiscuous mode [ 588.407310][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.418592][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.430589][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.444670][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.454561][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.479110][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.505471][T21168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.519655][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.539883][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.550568][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.562740][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.572863][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.586235][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.596753][T21168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.607721][T21168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.621012][T21168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.638337][T21168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.647128][T21168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.656787][T21168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.665618][T21168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.817385][T15296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.828938][T15296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.881238][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.899660][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.051259][T21276] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 589.286834][T21289] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 589.725727][ T52] Bluetooth: hci5: command tx timeout [ 590.147698][T21320] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 590.486149][T21335] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 590.507217][T21335] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.646804][T21341] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 590.843923][T21350] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.302102][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.410587][T21372] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.805168][ T52] Bluetooth: hci5: command tx timeout [ 592.443867][T21386] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 592.455806][T21386] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 592.495101][T21386] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 592.977893][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.664076][T21412] tipc: Failed to remove unknown binding: 66,1,1/10136234:4286224181/4286224183 [ 593.686026][T21412] tipc: Failed to remove unknown binding: 66,1,1/10136234:4286224181/4286224183 [ 593.835933][T21415] vlan0: entered promiscuous mode [ 593.841107][T21415] vlan0: entered allmulticast mode [ 593.895270][ T52] Bluetooth: hci5: command tx timeout [ 594.788290][T21451] syz-executor.1[21451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.788432][T21451] syz-executor.1[21451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.163314][T21483] bridge_slave_1: left allmulticast mode [ 596.200561][T21483] bridge_slave_1: left promiscuous mode [ 596.239005][T21483] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.588513][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.599323][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.608694][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.617705][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.625675][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 597.633093][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.187501][T21529] lo speed is unknown, defaulting to 1000 [ 598.371652][T15296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.508356][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 598.537370][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 598.546987][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 598.568135][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 598.578752][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 598.586556][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.592059][T15296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.800977][T15296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.962359][T15296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.286653][T21541] lo speed is unknown, defaulting to 1000 [ 599.380001][T21529] chnl_net:caif_netlink_parms(): no params data found [ 599.619283][T15296] bridge_slave_0: left allmulticast mode [ 599.638998][T15296] bridge_slave_0: left promiscuous mode [ 599.664158][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.727065][ T52] Bluetooth: hci1: command tx timeout [ 600.446175][T15296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.471290][T15296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.498830][T15296] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 600.518802][T15296] bond0 (unregistering): Released all slaves [ 600.638492][T15296] tipc: Disabling bearer [ 600.656080][T21529] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.659699][T15296] tipc: Left network mode [ 600.663209][T21529] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.688071][ T52] Bluetooth: hci6: command tx timeout [ 600.755702][T21529] bridge_slave_0: entered allmulticast mode [ 600.777315][T21529] bridge_slave_0: entered promiscuous mode [ 600.803044][T21529] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.815118][T21529] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.822377][T21529] bridge_slave_1: entered allmulticast mode [ 600.836272][T21529] bridge_slave_1: entered promiscuous mode [ 601.033401][T21529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.079289][T21529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.112333][T21589] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.274930][T21593] Unsupported ieee802154 address type: 0 [ 601.369960][T21529] team0: Port device team_slave_0 added [ 601.447601][T21529] team0: Port device team_slave_1 added [ 601.805347][ T52] Bluetooth: hci1: command tx timeout [ 601.849619][T21529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.866605][T21529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.936732][T21529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.982619][T21606] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 601.991224][T21606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.010854][T21606] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 602.041765][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.050671][T15296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.091547][T15296] hsr0: left allmulticast mode [ 602.097096][T15296] veth1_macvtap: left promiscuous mode [ 602.102747][T15296] veth0_macvtap: left promiscuous mode [ 602.110352][T15296] veth1_vlan: left promiscuous mode [ 602.116008][T15296] veth0_vlan: left promiscuous mode [ 602.497552][T15296] pim6reg (unregistering): left allmulticast mode [ 602.769909][ T52] Bluetooth: hci6: command tx timeout [ 603.103869][T15296] team0 (unregistering): Port device team_slave_1 removed [ 603.162832][T15296] team0 (unregistering): Port device team_slave_0 removed [ 603.769034][T21529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.776462][T21529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.825589][T21529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.885099][ T52] Bluetooth: hci1: command tx timeout [ 604.081641][T21541] chnl_net:caif_netlink_parms(): no params data found [ 604.149476][T21529] hsr_slave_0: entered promiscuous mode [ 604.182636][T21529] hsr_slave_1: entered promiscuous mode [ 604.201443][T21529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.245016][T21529] Cannot create hsr debugfs directory [ 604.536378][T21646] rdma_op ffff8880578e81f0 conn xmit_rdma 0000000000000000 [ 604.616568][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.629466][T15296] IPVS: stop unused estimator thread 0... [ 604.675712][T21541] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.682964][T21541] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.696414][T21541] bridge_slave_0: entered allmulticast mode [ 604.720350][T21541] bridge_slave_0: entered promiscuous mode [ 604.801790][T21541] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.823695][T21541] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.845110][ T4487] Bluetooth: hci6: command tx timeout [ 604.851040][T21541] bridge_slave_1: entered allmulticast mode [ 604.868799][T21541] bridge_slave_1: entered promiscuous mode [ 605.017546][T21529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.040593][T21529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.271093][T21529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.300325][T21529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.356399][T21541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.428900][T21529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.452401][T21529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.497069][T21541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.595925][T21529] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 605.622920][T21529] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 605.661931][T21529] team0: Port device netdevsim0 removed [ 605.677328][T21529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.700438][T21529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.790207][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.822716][T21541] team0: Port device team_slave_0 added [ 605.859492][T21541] team0: Port device team_slave_1 added [ 605.936121][T21692] Cannot find set identified by id 0 to match [ 605.965141][ T52] Bluetooth: hci1: command tx timeout [ 605.995095][T21541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.019729][T21541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.074067][T21541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.099791][T21541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.119374][T21541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.164671][T21541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.197113][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 606.403489][T21541] hsr_slave_0: entered promiscuous mode [ 606.414557][T21541] hsr_slave_1: entered promiscuous mode [ 606.423192][T21541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.434782][T21541] Cannot create hsr debugfs directory [ 606.545332][T21529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 606.576185][T21529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 606.675162][T21529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 606.696207][T21529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 606.924952][ T52] Bluetooth: hci6: command tx timeout [ 607.252472][T21529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.359071][T21529] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.403812][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.411028][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.426485][T21728] rdma_op ffff88805daf01f0 conn xmit_rdma 0000000000000000 [ 607.460219][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.467436][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.492592][T21728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.647904][T21529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.839409][T21734] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 607.903945][T21734] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.928583][T21734] bond0: (slave team0): Enslaving as an active interface with an up link [ 607.947791][T21541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 607.972641][T21541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 607.996010][T21736] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 608.014398][T21736] bond0: (slave team0): Releasing backup interface [ 608.040321][T21736] bridge0: port 3(team0) entered blocking state [ 608.054299][T21736] bridge0: port 3(team0) entered disabled state [ 608.067801][T21736] team0: entered allmulticast mode [ 608.081505][T21736] team_slave_0: entered allmulticast mode [ 608.094389][T21736] team_slave_1: entered allmulticast mode [ 608.109050][T21736] team0: entered promiscuous mode [ 608.121013][T21736] team_slave_0: entered promiscuous mode [ 608.133870][T21736] team_slave_1: entered promiscuous mode [ 608.161843][T21541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 608.206140][T21541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 608.431398][T21529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.473314][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 608.637134][T21541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.703164][T21541] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.738162][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.745458][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.768762][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.775963][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.811276][T21529] veth0_vlan: entered promiscuous mode [ 608.857897][T21529] veth1_vlan: entered promiscuous mode [ 608.953818][T21529] veth0_macvtap: entered promiscuous mode [ 608.992480][T21529] veth1_macvtap: entered promiscuous mode [ 609.057752][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.096051][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.124900][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.155186][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.184893][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.216147][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.246162][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.264872][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.286794][T21529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.305408][T21759] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 609.345090][T21759] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 609.372254][T21759] bridge0: port 3(team0) entered blocking state [ 609.378881][T21759] bridge0: port 3(team0) entered forwarding state [ 609.415075][T21759] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.472700][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.515469][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.539117][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.561165][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.572519][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.594405][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.625524][T21763] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 609.635362][T21529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.661505][T21529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.673523][T21529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.745513][T21529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.754345][T21529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.777702][T21529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.792439][T21529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.868585][T21541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.044346][T21541] veth0_vlan: entered promiscuous mode [ 610.147347][T21541] veth1_vlan: entered promiscuous mode [ 610.165997][T15296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.206163][T15296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.317483][T21541] veth0_macvtap: entered promiscuous mode [ 610.335659][T15296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.343516][T15296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.368881][T21541] veth1_macvtap: entered promiscuous mode [ 610.535375][T21769] syzkaller0: entered promiscuous mode [ 610.555005][T21769] syzkaller0: entered allmulticast mode [ 610.631705][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.658269][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.680339][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.713141][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.744611][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.775773][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.796921][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.819035][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.841824][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.876039][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.910177][T21541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.949414][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.984575][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.007141][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.025360][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.044816][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.070896][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.095035][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.116965][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.134966][T21541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.165050][T21541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.186796][T21541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.551964][T21541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.565003][T21541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.573747][T21541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.582743][T21541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.593446][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.832390][ T5779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.853761][ T5779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.897232][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.928361][ T5779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.950555][ T5779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.172038][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.442918][ T5781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.718580][ T5781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.901396][ T5781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.089496][ T5781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.165532][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.411582][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 617.422132][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 617.434979][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 617.444858][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 617.452839][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 617.461611][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 617.528878][ T5781] bridge_slave_1: left allmulticast mode [ 617.534554][ T5781] bridge_slave_1: left promiscuous mode [ 617.585141][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.686055][ T5781] bridge_slave_0: left allmulticast mode [ 617.691752][ T5781] bridge_slave_0: left promiscuous mode [ 617.726386][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.768407][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.791044][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.813326][ T5781] bond0 (unregistering): Released all slaves [ 619.459666][T21849] lo speed is unknown, defaulting to 1000 [ 619.571485][ T4487] Bluetooth: hci6: command tx timeout [ 620.047969][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.656669][ T5781] hsr_slave_0: left promiscuous mode [ 620.679932][ T5781] hsr_slave_1: left promiscuous mode [ 620.699413][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.708176][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.727778][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.745769][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.831383][ T5781] veth1_macvtap: left promiscuous mode [ 620.846452][ T5781] veth0_macvtap: left promiscuous mode [ 620.856885][ T5781] veth1_vlan: left promiscuous mode [ 620.871970][ T5781] veth0_vlan: left promiscuous mode [ 621.644774][ T4487] Bluetooth: hci6: command tx timeout [ 622.224864][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 622.338809][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 623.438971][T21849] chnl_net:caif_netlink_parms(): no params data found [ 623.724987][ T4487] Bluetooth: hci6: command tx timeout [ 623.795684][T21934] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 623.811673][T21930] team0: Port device syz_tun added [ 624.041518][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.066968][T21849] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.074472][T21849] bridge_slave_0: entered allmulticast mode [ 624.082533][T21849] bridge_slave_0: entered promiscuous mode [ 624.094416][T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.102097][T21849] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.125933][T21849] bridge_slave_1: entered allmulticast mode [ 624.139568][T21849] bridge_slave_1: entered promiscuous mode [ 624.322262][T21849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.358254][T21849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.524187][T21849] team0: Port device team_slave_0 added [ 624.558059][T21849] team0: Port device team_slave_1 added [ 624.655790][T21849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.662781][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.699331][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.721311][T21849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.759757][T21849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.779916][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.846586][T21849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.979179][T21849] hsr_slave_0: entered promiscuous mode [ 624.995136][T21849] hsr_slave_1: entered promiscuous mode [ 625.003756][T21849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.023257][T21849] Cannot create hsr debugfs directory [ 625.737914][T22000] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 625.805381][ T4487] Bluetooth: hci6: command tx timeout [ 625.890217][T21849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.911774][T21849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.935741][T21849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 625.960039][T21849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 626.043757][T22014] macvlan2: entered promiscuous mode [ 626.057368][T22014] vlan1: entered promiscuous mode [ 626.063464][T22014] macvlan2: entered allmulticast mode [ 626.077507][T22014] vlan1: entered allmulticast mode [ 626.085778][T22014] veth0_vlan: entered allmulticast mode [ 626.278656][T22019] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 626.324257][T21849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.380702][T21849] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.418567][T22021] xt_CONNSECMARK: invalid mode: 0 [ 626.432436][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.439620][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.481362][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.488590][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.994023][T21849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.140328][T21849] veth0_vlan: entered promiscuous mode [ 627.182348][T21849] veth1_vlan: entered promiscuous mode [ 627.292824][T21849] veth0_macvtap: entered promiscuous mode [ 627.343406][T21849] veth1_macvtap: entered promiscuous mode [ 627.397335][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.445823][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.461480][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.485392][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.504947][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.534235][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.574258][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.614984][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.629544][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.665811][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.697475][T21849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.733148][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.756392][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.775705][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.794755][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.804605][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.864557][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.884211][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.910440][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.944880][T21849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.965458][T21849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.986674][T21849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.041766][T21849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.066102][T21849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.086281][T21849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.105016][T21849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.323960][ T5781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.361937][ T5781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.437900][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.471635][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.730455][T22054] tipc: Resetting bearer [ 628.805289][T22054] infiniband syz0: set active [ 629.804906][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 631.284399][T22089] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 631.289766][ T5783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.622042][T22091] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 631.889633][T22098] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.201479][T22106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.217628][T22107] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 632.255195][T22107] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.256825][ T5783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.286361][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 632.307386][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 632.319389][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 632.327830][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 632.338216][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 632.350826][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 632.460355][ T5783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.609871][ T5783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.884429][ T5783] bridge_slave_1: left allmulticast mode [ 632.915054][ T5783] bridge_slave_1: left promiscuous mode [ 632.923101][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.948378][ T5783] bridge_slave_0: left allmulticast mode [ 632.963509][ T5783] bridge_slave_0: left promiscuous mode [ 632.975234][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.949816][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.962807][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.977945][ T5783] bond0 (unregistering): Released all slaves [ 633.997363][T22108] lo speed is unknown, defaulting to 1000 [ 634.013889][T22127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 634.395529][T22148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 634.445455][ T4487] Bluetooth: hci6: command tx timeout [ 634.552488][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.568338][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.611314][T22158] bond1: entered promiscuous mode [ 634.625002][T22163] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.636176][T22163] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.654769][T22163] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 634.662873][T22163] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.679435][T22159] ip6gretap1: entered promiscuous mode [ 634.685721][T22159] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 634.698620][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.710507][T22158] bond1: left promiscuous mode [ 634.716691][T22158] ip6gretap1: left promiscuous mode [ 634.724030][T22158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.223485][T22108] chnl_net:caif_netlink_parms(): no params data found [ 635.324273][ T5783] hsr_slave_0: left promiscuous mode [ 635.345268][ T5783] hsr_slave_1: left promiscuous mode [ 635.351614][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.369373][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.384568][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.404022][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.468167][ T5783] veth1_macvtap: left promiscuous mode [ 635.473749][ T5783] veth0_macvtap: left promiscuous mode [ 635.493700][ T5783] veth1_vlan: left promiscuous mode [ 635.499357][ T5783] veth0_vlan: left promiscuous mode [ 635.816382][T22197] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 635.826271][T22197] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 636.312532][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 636.363361][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 636.525420][ T4487] Bluetooth: hci6: command tx timeout [ 636.865176][T22187] __nla_validate_parse: 1 callbacks suppressed [ 636.865198][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.900198][T22187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.113374][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 637.191599][T22108] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.215091][T22108] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.222440][T22108] bridge_slave_0: entered allmulticast mode [ 637.255589][T22224] sctp: [Deprecated]: syz-executor.3 (pid 22224) Use of int in maxseg socket option. [ 637.255589][T22224] Use struct sctp_assoc_value instead [ 637.276695][T22108] bridge_slave_0: entered promiscuous mode [ 637.292370][T22108] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.303210][T22108] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.315484][T22108] bridge_slave_1: entered allmulticast mode [ 637.323462][T22108] bridge_slave_1: entered promiscuous mode [ 637.472531][T22229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.507287][T22229] team0: Port device batadv0 added [ 637.553401][T22108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.592396][T22108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.697644][T22108] team0: Port device team_slave_0 added [ 637.718011][T22108] team0: Port device team_slave_1 added [ 637.851485][T22108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.867975][T22108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.905846][T22252] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 637.909477][T22108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.917504][T22252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.934035][T22108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.952677][T22108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.994362][T22108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.011360][T22253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.179238][T22108] hsr_slave_0: entered promiscuous mode [ 638.209188][T22108] hsr_slave_1: entered promiscuous mode [ 638.234523][T22108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.268185][T22108] Cannot create hsr debugfs directory [ 638.605950][ T4487] Bluetooth: hci6: command tx timeout [ 638.762420][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 638.850131][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.878659][T22300] wg1: entered allmulticast mode [ 638.909620][T22304] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 638.965206][T22306] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 638.981518][T22306] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 639.045337][T22306] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.234074][T22108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 639.260465][T22108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.290003][T22108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.309397][T22108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.568733][T22108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.649205][T22108] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.683517][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.690714][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.758019][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.765208][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.241808][T22108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.323352][T22108] veth0_vlan: entered promiscuous mode [ 640.347498][T22108] veth1_vlan: entered promiscuous mode [ 640.405467][T22108] veth0_macvtap: entered promiscuous mode [ 640.429500][T22108] veth1_macvtap: entered promiscuous mode [ 640.475749][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.498737][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.509326][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.539195][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.575216][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.590460][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.600632][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.611296][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.621391][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.631981][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.653284][T22108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.682520][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.695493][ T4487] Bluetooth: hci6: command tx timeout [ 640.724747][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.734624][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.747057][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.763600][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.786015][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.809731][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.828627][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.838776][T22108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.851083][T22108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.863230][T22108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.908366][T22377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.920772][T22377] team0: Port device batadv0 added [ 640.948083][T22108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.958906][T22108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.973489][T22108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.982559][T22108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.238483][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.258922][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.510784][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.533577][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.678979][T22412] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 641.701638][T22412] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 641.847839][T22422] openvswitch: netlink: EtherType 20a is less than min 600 [ 642.414038][T22450] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 642.423787][T22450] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.997497][T22482] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 643.015781][T22482] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 643.186527][T22492] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 643.202262][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 643.804977][ T4487] Bluetooth: hci1: command tx timeout [ 644.324524][ T5783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.835741][T22551] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 644.866015][T22551] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 644.897656][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 644.910703][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 644.921678][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 644.937684][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 644.946747][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 644.954100][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.022294][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 645.382987][T22552] lo speed is unknown, defaulting to 1000 [ 645.936372][ T5783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.193723][ T5783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.448318][ T5783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.793720][T22552] chnl_net:caif_netlink_parms(): no params data found [ 646.804315][T22578] lo speed is unknown, defaulting to 1000 [ 647.007518][ T4487] Bluetooth: hci6: command tx timeout [ 647.025304][ T5783] bridge_slave_1: left allmulticast mode [ 647.046813][ T5783] bridge_slave_1: left promiscuous mode [ 647.061794][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.077497][ T5783] bridge_slave_0: left allmulticast mode [ 647.083181][ T5783] bridge_slave_0: left promiscuous mode [ 647.089738][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.134028][T22607] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 647.149540][T22607] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 647.601292][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.618952][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.630318][ T5783] bond0 (unregistering): Released all slaves [ 647.820744][T22552] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.847330][T22552] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.857520][T22552] bridge_slave_0: entered allmulticast mode [ 647.866135][T22552] bridge_slave_0: entered promiscuous mode [ 647.962105][T22552] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.978301][T22552] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.988789][T22552] bridge_slave_1: entered allmulticast mode [ 647.997645][T22552] bridge_slave_1: entered promiscuous mode [ 648.148061][T22552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.387232][T22552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.740849][T22552] team0: Port device team_slave_0 added [ 648.769279][T22552] team0: Port device team_slave_1 added [ 648.882318][T22650] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 648.891865][T22650] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.016408][T22552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.023393][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.099744][ T4487] Bluetooth: hci6: command tx timeout [ 649.102283][T22552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.180914][T22552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.202946][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.231088][T22552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.257495][ T5783] hsr_slave_0: left promiscuous mode [ 649.267821][ T5783] hsr_slave_1: left promiscuous mode [ 649.282051][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.295829][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.309084][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.317791][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.362238][ T5783] veth1_macvtap: left promiscuous mode [ 649.368289][ T5783] veth0_macvtap: left promiscuous mode [ 649.374832][ T5783] veth1_vlan: left promiscuous mode [ 649.385064][ T5783] veth0_vlan: left promiscuous mode [ 649.541045][T22665] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 650.108121][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 650.161187][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 650.656934][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 650.674418][T22661] hsr0: Device is already in use. [ 650.863770][T22552] hsr_slave_0: entered promiscuous mode [ 650.921429][T22552] hsr_slave_1: entered promiscuous mode [ 650.947818][T22552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.974523][T22552] Cannot create hsr debugfs directory [ 651.167311][ T4487] Bluetooth: hci6: command tx timeout [ 651.218550][T22697] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 651.264850][T22697] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 651.465298][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 651.511654][T22709] veth0_vlan: left allmulticast mode [ 651.954044][T22552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.969495][T22552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.983687][T22552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.998465][T22552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.209376][T22552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.251063][T22552] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.318218][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.325382][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.359783][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.367010][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.772133][T22552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.868280][T22765] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 652.895405][T22765] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.933304][T22552] veth0_vlan: entered promiscuous mode [ 652.967113][T22552] veth1_vlan: entered promiscuous mode [ 653.050917][T22552] veth0_macvtap: entered promiscuous mode [ 653.088844][T22552] veth1_macvtap: entered promiscuous mode [ 653.217204][ T5783] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.246623][ T4487] Bluetooth: hci6: command tx timeout [ 653.285359][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.296213][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.312027][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.322656][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.334315][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.346476][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.356574][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.367264][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.379182][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.390135][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.402085][T22552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.442584][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.445080][ T5783] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.463782][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.478746][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.492327][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.502607][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.504027][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.525992][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.530737][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.544029][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.556584][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.556676][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.575013][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.585863][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.596907][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.607944][T22552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.619171][T22552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.630282][T22552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.656754][T22552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.678108][T22552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.687331][T22552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.696090][T22552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.738049][ T5783] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.847988][ T5783] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.046867][T15297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.066016][T15297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.238269][T15297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.271938][T15297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.853305][ T5783] dvmrp0 (unregistering): left allmulticast mode [ 655.494447][ T5783] team0: Port device bond0 removed [ 655.502157][ T5783] bond0 (unregistering): Released all slaves [ 655.514166][ T5783] bond1 (unregistering): Released all slaves [ 655.526901][ T5783] bond2 (unregistering): Released all slaves [ 655.657722][ T4487] Bluetooth: hci2: command tx timeout [ 655.667227][ T5783] bond3 (unregistering): Released all slaves [ 655.788637][ T5783] bond4 (unregistering): Released all slaves [ 655.920594][ T5783] bond5 (unregistering): Released all slaves [ 655.936207][ T5783] bond6 (unregistering): Released all slaves [ 655.961276][T22775] lo speed is unknown, defaulting to 1000 [ 656.261482][ T5783] JR³xRË: left promiscuous mode [ 656.513671][ T5783] tipc: Disabling bearer [ 656.533886][ T5783] tipc: Disabling bearer [ 656.541236][ T5783] tipc: Left network mode [ 656.680174][T22838] batadv0: entered promiscuous mode [ 656.683068][T22837] sctp: [Deprecated]: syz-executor.3 (pid 22837) Use of int in max_burst socket option deprecated. [ 656.683068][T22837] Use struct sctp_assoc_value instead [ 656.742085][T22838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.001339][T22775] chnl_net:caif_netlink_parms(): no params data found [ 657.181459][T22857] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 657.333251][ T29] audit: type=1804 audit(1717837341.374:54): pid=22868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1791458227/syzkaller.6UAv5N/950/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 657.494889][ T4487] Bluetooth: hci3: command 0x0405 tx timeout [ 657.620921][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.706379][T22775] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.723063][T22775] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.730277][ T52] Bluetooth: hci2: command tx timeout [ 657.779268][T22775] bridge_slave_0: entered allmulticast mode [ 657.852918][T22775] bridge_slave_0: entered promiscuous mode [ 657.873570][T22775] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.897266][T22775] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.915124][T22775] bridge_slave_1: entered allmulticast mode [ 657.961099][T22775] bridge_slave_1: entered promiscuous mode [ 658.164986][ T5783] hsr0: left allmulticast mode [ 658.169998][ T5783] veth1_macvtap: left allmulticast mode [ 658.205017][ T5783] veth1_macvtap: left promiscuous mode [ 658.210600][ T5783] veth0_macvtap: left promiscuous mode [ 658.227501][ T5783] veth1_vlan: left promiscuous mode [ 658.232795][ T5783] veth0_vlan: left promiscuous mode [ 658.400718][ T5783] infiniband syz0: set down [ 659.145353][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 659.158604][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 659.167882][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 659.187575][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 659.205761][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 659.213169][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 659.268275][T15298] smc: removing ib device syz0 [ 659.805987][ T52] Bluetooth: hci2: command tx timeout [ 660.311188][ T5783] team0 (unregistering): Port device batadv0 removed [ 660.481356][ T5160] infiniband syz0: ib_query_port failed (-19) [ 660.596799][T22775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.667408][T22775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.903653][T22911] lo speed is unknown, defaulting to 1000 [ 661.091639][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 661.239052][T22775] team0: Port device team_slave_0 added [ 661.301645][T22775] team0: Port device team_slave_1 added [ 661.326930][ T52] Bluetooth: hci6: command tx timeout [ 661.609862][T22775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.619518][T22775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.696477][T22775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.801429][T22775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.834941][T22775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.886745][ T52] Bluetooth: hci2: command tx timeout [ 661.934904][T22775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.089949][T22916] lo speed is unknown, defaulting to 1000 [ 662.265905][T22775] hsr_slave_0: entered promiscuous mode [ 662.330861][T22775] hsr_slave_1: entered promiscuous mode [ 662.366835][T22775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.374462][T22775] Cannot create hsr debugfs directory [ 663.405106][ T52] Bluetooth: hci6: command tx timeout [ 664.161988][T22911] chnl_net:caif_netlink_parms(): no params data found [ 664.368757][ T5783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.579486][ T5783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.661290][T22911] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.672526][T22911] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.694893][T22911] bridge_slave_0: entered allmulticast mode [ 664.701931][T22911] bridge_slave_0: entered promiscuous mode [ 664.736411][T22973] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 664.805227][ T5783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.838676][T22911] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.874995][T22911] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.882286][T22911] bridge_slave_1: entered allmulticast mode [ 664.910767][T22911] bridge_slave_1: entered promiscuous mode [ 665.022605][ T5783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.061278][T22911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.130857][T22911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.310909][T22775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 665.365258][T22911] team0: Port device team_slave_0 added [ 665.371743][T22984] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 665.427393][T22775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 665.463541][T22911] team0: Port device team_slave_1 added [ 665.482265][T22775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 665.495132][ T4487] Bluetooth: hci6: command tx timeout [ 665.565895][T22775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 665.654207][T22911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.669905][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.708808][T22911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.739435][T22911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.746726][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.786379][T22911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.854407][ T5783] bridge_slave_1: left allmulticast mode [ 665.865135][ T5783] bridge_slave_1: left promiscuous mode [ 665.877967][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.899953][ T5783] bridge_slave_0: left allmulticast mode [ 665.914189][ T5783] bridge_slave_0: left promiscuous mode [ 665.927939][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.715301][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.737737][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.766829][ T5783] bond0 (unregistering): Released all slaves [ 666.984206][T22911] hsr_slave_0: entered promiscuous mode [ 667.028735][T22911] hsr_slave_1: entered promiscuous mode [ 667.035309][T22911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.042886][T22911] Cannot create hsr debugfs directory [ 667.140735][T22996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 667.226830][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 667.277351][T23002] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 667.305097][T23002] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.314609][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.363371][T23002] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.363549][T23005] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 667.397263][T23005] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 667.566006][ T4487] Bluetooth: hci6: command 0x0419 tx timeout [ 667.761768][T23013] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 668.057842][ T5783] hsr_slave_0: left promiscuous mode [ 668.073691][ T5783] hsr_slave_1: left promiscuous mode [ 668.101812][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.109741][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.135765][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.143192][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.198073][ T5783] veth1_macvtap: left promiscuous mode [ 668.203633][ T5783] veth0_macvtap: left promiscuous mode [ 668.225159][ T5783] veth1_vlan: left promiscuous mode [ 668.230551][ T5783] veth0_vlan: left promiscuous mode [ 669.202202][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 669.260194][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 669.645076][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 670.297109][T22775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.560417][T22775] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.640602][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.647810][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.753276][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.760470][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.005948][T22911] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.019279][T22911] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.067396][T22911] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.089228][T22911] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.382493][T22911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.425533][T22775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.468107][T22911] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.508155][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.515353][T15408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.566111][T15408] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.573281][T15408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.664102][T22775] veth0_vlan: entered promiscuous mode [ 671.713368][T22775] veth1_vlan: entered promiscuous mode [ 671.816770][T22775] veth0_macvtap: entered promiscuous mode [ 671.842989][T22775] veth1_macvtap: entered promiscuous mode [ 671.918762][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.955415][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.975035][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.996263][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.016308][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.040299][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.074361][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.114941][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.125383][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.159250][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.188054][T22775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.221797][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.257768][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.290045][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.334950][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.366757][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.390687][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.437143][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.476189][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.507022][T22775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.537080][T22775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.566569][T22775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.618459][T22775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.645466][T22775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.654199][T22775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.686428][T22775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.799654][T22911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.042746][ T5781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.080397][ T5781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.152776][T22911] veth0_vlan: entered promiscuous mode [ 673.191230][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.198620][T22911] veth1_vlan: entered promiscuous mode [ 673.220339][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.318349][T22911] veth0_macvtap: entered promiscuous mode [ 673.350165][T22911] veth1_macvtap: entered promiscuous mode [ 673.429902][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.452563][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.474627][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.494893][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.517708][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.538139][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.559160][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.581516][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.602961][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.627790][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.648281][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.668257][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.690808][T22911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.796479][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.840640][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.874766][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.893075][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.928327][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.950486][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.973825][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.996030][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.016965][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.054896][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.072284][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.085941][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.106748][T22911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.114391][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 674.175694][T22911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.185450][T22911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.194277][T22911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.233261][T22911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.551112][T15295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.585954][T15295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.660681][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.696316][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.524146][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 676.189375][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.433803][T15296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.521810][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 676.873974][T15296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.001703][ T4487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.024905][ T4487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.036810][ T4487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.045293][ T4487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.052802][T15296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.052971][ T4487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 677.075212][ T4487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 677.201824][T15296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.232425][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 677.248989][T23157] lo speed is unknown, defaulting to 1000 [ 677.393663][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 677.408729][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 677.419250][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 677.435640][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 677.445711][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 677.454193][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 677.490143][T15296] bridge_slave_1: left allmulticast mode [ 677.517653][T15296] bridge_slave_1: left promiscuous mode [ 677.538754][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.559797][T15296] bridge_slave_0: left allmulticast mode [ 677.567012][T15296] bridge_slave_0: left promiscuous mode [ 677.572785][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.419516][T15296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.461006][T15296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.493988][T15296] bond0 (unregistering): Released all slaves [ 678.677176][T23163] lo speed is unknown, defaulting to 1000 [ 679.173061][T23167] Bluetooth: hci5: command tx timeout [ 679.289128][T23157] chnl_net:caif_netlink_parms(): no params data found [ 679.467423][T15296] hsr_slave_0: left promiscuous mode [ 679.478500][T15296] hsr_slave_1: left promiscuous mode [ 679.504859][T23167] Bluetooth: hci6: command tx timeout [ 679.512360][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.536555][T15296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.549770][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.582652][T15296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.667469][T15296] veth1_macvtap: left promiscuous mode [ 679.673073][T15296] veth0_macvtap: left promiscuous mode [ 679.702822][T15296] veth1_vlan: left promiscuous mode [ 679.715164][T15296] veth0_vlan: left promiscuous mode [ 680.576177][T15296] team0 (unregistering): Port device team_slave_1 removed [ 680.629858][T15296] team0 (unregistering): Port device team_slave_0 removed [ 681.151470][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.190448][T23211] bond0: (slave bond_slave_0): Releasing backup interface [ 681.212274][T23211] bond0: (slave bond_slave_1): Releasing backup interface [ 681.245197][T23167] Bluetooth: hci5: command tx timeout [ 681.282228][T23211] team0: Port device team_slave_0 removed [ 681.320409][T23211] team0: Port device team_slave_1 removed [ 681.333878][T23211] bond0: (slave wlan1): Releasing backup interface [ 681.361596][T23211] team0: Port device batadv0 removed [ 681.417973][T23226] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 681.464143][T23226] team0: Port device syz_tun removed [ 681.564947][T23167] Bluetooth: hci6: command tx timeout [ 681.703731][T23157] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.719708][T23157] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.735252][T23157] bridge_slave_0: entered allmulticast mode [ 681.756641][T23157] bridge_slave_0: entered promiscuous mode [ 681.846041][T23157] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.853156][T23157] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.920313][T23157] bridge_slave_1: entered allmulticast mode [ 681.964532][T23157] bridge_slave_1: entered promiscuous mode [ 682.110752][T23163] chnl_net:caif_netlink_parms(): no params data found [ 682.190985][T23157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.214276][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 682.293893][T23157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.519202][T23157] team0: Port device team_slave_0 added [ 682.556247][T23157] team0: Port device team_slave_1 added [ 682.708496][T23280] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.4'. [ 682.809309][T15296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.867728][T23163] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.885009][T23163] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.892325][T23163] bridge_slave_0: entered allmulticast mode [ 682.904219][T23163] bridge_slave_0: entered promiscuous mode [ 682.926609][T23157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.938658][T23157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.965128][T23157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.104262][T23287] syzkaller0: entered promiscuous mode [ 683.113489][T23287] syzkaller0: entered allmulticast mode [ 683.173386][T15296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.201979][T23163] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.223014][T23163] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.234618][T23163] bridge_slave_1: entered allmulticast mode [ 683.264427][T23163] bridge_slave_1: entered promiscuous mode [ 683.273531][T23157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.281306][T23157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.309261][T23157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.320955][T23282] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 683.326677][T23167] Bluetooth: hci5: command tx timeout [ 683.414289][T15296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.644959][T23167] Bluetooth: hci6: command tx timeout [ 685.405027][T23167] Bluetooth: hci5: command tx timeout [ 685.724996][T23167] Bluetooth: hci6: command tx timeout [ 686.130717][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.100137][T15296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.154470][T23163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.212580][T23163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.370707][T23157] hsr_slave_0: entered promiscuous mode [ 688.397177][T23157] hsr_slave_1: entered promiscuous mode [ 688.424553][T23157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.435091][T23157] Cannot create hsr debugfs directory [ 688.507479][T23163] team0: Port device team_slave_0 added [ 688.635672][T21803] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.674270][T23163] team0: Port device team_slave_1 added [ 688.903764][T23163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.929496][T23163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.968520][T23163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.004005][T23163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.021860][T23163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.057160][T23163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.122169][T15296] bridge0: port 3(team0) entered disabled state [ 689.132097][T15296] bridge_slave_1: left allmulticast mode [ 689.144932][T15296] bridge_slave_1: left promiscuous mode [ 689.175402][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.204081][T15296] bridge_slave_0: left allmulticast mode [ 689.223098][T15296] bridge_slave_0: left promiscuous mode [ 689.236712][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.946752][T15296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.959219][T15296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.973015][T15296] bond0 (unregistering): Released all slaves [ 690.157662][T23163] hsr_slave_0: entered promiscuous mode [ 690.186015][T23163] hsr_slave_1: entered promiscuous mode [ 690.198977][T23163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.223185][T23163] Cannot create hsr debugfs directory [ 690.902525][T15296] hsr_slave_0: left promiscuous mode [ 690.928562][T15296] hsr_slave_1: left promiscuous mode [ 690.944292][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.962078][T15296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.978034][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.997124][T15296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.031878][T15296] veth1_macvtap: left promiscuous mode [ 691.037730][T15296] veth0_macvtap: left promiscuous mode [ 691.043446][T15296] veth1_vlan: left promiscuous mode [ 691.053562][T15296] veth0_vlan: left promiscuous mode [ 692.697673][T15296] team_slave_1 (unregistering): left promiscuous mode [ 692.714810][T15296] team_slave_1 (unregistering): left allmulticast mode [ 692.734614][T15296] team0 (unregistering): Port device team_slave_1 removed [ 692.838199][T15296] team_slave_0 (unregistering): left promiscuous mode [ 692.854805][T15296] team_slave_0 (unregistering): left allmulticast mode [ 692.871497][T15296] team0 (unregistering): Port device team_slave_0 removed [ 694.436276][T23370] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 694.521764][T23163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 694.561167][T23163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 694.598422][T23163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 694.627961][T23163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 694.827690][T23157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 694.907455][T23157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 694.937991][T23157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 694.983369][T23157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.116316][T23163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.260851][T23163] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.303635][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.310838][T15408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.406955][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.414098][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.501383][T23157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.595835][T23163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 695.621891][T23163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.668789][T23157] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.768253][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.775539][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.809218][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.816422][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.932661][T23157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.207961][T23163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.376740][T23157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.397391][T23163] veth0_vlan: entered promiscuous mode [ 696.398780][T23410] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 696.447395][T23410] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.470422][T23163] veth1_vlan: entered promiscuous mode [ 696.485215][T23410] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.534563][T23157] veth0_vlan: entered promiscuous mode [ 696.584201][T23163] veth0_macvtap: entered promiscuous mode [ 696.604344][T23157] veth1_vlan: entered promiscuous mode [ 696.628778][T23163] veth1_macvtap: entered promiscuous mode [ 696.698149][T23413] ipt_REJECT: ECHOREPLY no longer supported. [ 696.712627][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.754931][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.794101][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.824889][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.854733][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.874961][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.894719][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.914717][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.924572][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.955878][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.980086][T23163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.017542][T23413] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 697.038196][T23413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.081166][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.139853][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.174878][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.203849][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.226654][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.244957][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.274798][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.304833][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.325079][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.343565][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.366650][T23163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.393778][T23157] veth0_macvtap: entered promiscuous mode [ 697.445416][T23163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.454164][T23163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.494250][T23163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.504565][T23163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.588355][T23157] veth1_macvtap: entered promiscuous mode [ 697.669136][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.694897][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.714912][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.739294][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.764780][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.781068][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.826062][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.857047][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.878153][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.925005][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.955195][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.984884][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.005283][T23157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.058242][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.089550][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.118129][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.144901][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.164902][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.194914][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.215919][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.237003][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.259223][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.281389][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.306052][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.327073][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.351226][T23157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.403962][T23157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.423138][T23157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.445009][T23157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.459379][T23157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.550610][T15298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.568791][T15298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.730068][T15296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.751383][T15296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.845604][T15295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.853456][T15295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.996603][T15296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.024730][T15296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.172470][T23442] ipt_REJECT: ECHOREPLY no longer supported. [ 699.195851][T23442] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 699.203972][T23442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 699.595178][T23467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.300952][ T5779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.708882][ T5779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.830361][T23484] ipt_REJECT: ECHOREPLY no longer supported. [ 700.883231][ T5779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.980130][T23484] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 701.031953][T23484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.231500][ T5779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.322475][T23494] vlan0: entered promiscuous mode [ 701.347262][T23494] vlan0: entered allmulticast mode [ 701.358649][T23494] veth0_vlan: entered allmulticast mode [ 701.421691][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 701.433630][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.442073][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.450221][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.458248][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 701.470298][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.477734][T23494] team0: Port device vlan0 added [ 701.694942][T23500] lo speed is unknown, defaulting to 1000 [ 701.701266][ T5779] bridge_slave_1: left allmulticast mode [ 701.714057][ T5779] bridge_slave_1: left promiscuous mode [ 701.720759][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.743019][ T5779] bridge_slave_0: left allmulticast mode [ 701.749510][ T5779] bridge_slave_0: left promiscuous mode [ 701.767381][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.767929][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.820809][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.844909][ T5779] bond0 (unregistering): Released all slaves [ 703.590058][T23167] Bluetooth: hci6: command tx timeout [ 703.997850][T23500] chnl_net:caif_netlink_parms(): no params data found [ 704.247485][ T5779] hsr_slave_0: left promiscuous mode [ 704.262846][T23559] ipt_REJECT: ECHOREPLY no longer supported. [ 704.272573][ T5779] hsr_slave_1: left promiscuous mode [ 704.286325][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.318757][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.343551][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.373675][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.465745][ T5779] veth1_macvtap: left promiscuous mode [ 704.481180][ T5779] veth0_macvtap: left promiscuous mode [ 704.494181][ T5779] veth1_vlan: left promiscuous mode [ 704.506765][ T5779] veth0_vlan: left promiscuous mode [ 705.646459][ T4487] Bluetooth: hci6: command tx timeout [ 705.816962][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 705.937903][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 705.967736][T23167] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 705.976621][ T4487] Bluetooth: hci3: command 0x0405 tx timeout [ 707.128861][T23559] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 707.168555][T23559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.337756][T23569] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 707.357977][T23569] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 707.368741][T23500] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.380184][T23500] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.411613][T23500] bridge_slave_0: entered allmulticast mode [ 707.433806][T23500] bridge_slave_0: entered promiscuous mode [ 707.475679][T23500] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.491979][T23500] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.525005][T23500] bridge_slave_1: entered allmulticast mode [ 707.545194][T23500] bridge_slave_1: entered promiscuous mode [ 707.648244][T23500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.689449][T23500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.733946][ T4487] Bluetooth: hci6: command tx timeout [ 707.908275][T23500] team0: Port device team_slave_0 added [ 707.914244][T23591] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 707.938545][T23500] team0: Port device team_slave_1 added [ 708.074778][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.400691][T23500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.429157][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.485271][ T29] audit: type=1804 audit(1717837392.524:55): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir229879396/syzkaller.r68CCO/29/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 708.522199][T23500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.655560][T23500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.679326][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.774715][T23500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.867180][T23615] vxcan1: tx address claim with dlc 1 [ 708.873373][T23615] x_tables: unsorted underflow at hook 4 [ 708.900910][T23602] lo speed is unknown, defaulting to 1000 [ 709.003315][T23500] hsr_slave_0: entered promiscuous mode [ 709.008680][T23619] ipt_REJECT: ECHOREPLY no longer supported. [ 709.048451][T23500] hsr_slave_1: entered promiscuous mode [ 709.062979][T23500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.087667][T23500] Cannot create hsr debugfs directory [ 709.113920][T23619] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 709.157386][T23619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.806274][ T4487] Bluetooth: hci6: command tx timeout [ 710.406918][T23500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 710.443521][T23500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 710.459332][T23500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 710.474257][T23500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 710.720170][T23500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.778566][T23500] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.808646][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.815839][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.897938][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.905198][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.453534][T23500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.617429][T23500] veth0_vlan: entered promiscuous mode [ 711.648268][T23500] veth1_vlan: entered promiscuous mode [ 711.750915][T23500] veth0_macvtap: entered promiscuous mode [ 711.795918][T23500] veth1_macvtap: entered promiscuous mode [ 711.803630][T23658] ipt_REJECT: ECHOREPLY no longer supported. [ 711.850469][T23658] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 711.864439][T23660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.872568][T23658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.905691][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.933107][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.944974][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.964517][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.987172][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.009234][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.028148][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.049618][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.065928][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.086657][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.105903][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.131150][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.148031][T23500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.205072][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.225402][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.246379][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.267825][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.285723][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.309135][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.333930][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.349357][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.373810][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.389045][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.409287][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.439195][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.483068][T23500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.536872][T23500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.575805][T23500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.624884][T23500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.636280][T23500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.743033][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 712.965240][T23673] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 712.987385][T23673] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.128206][T15295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.159583][T15295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.247142][T15298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.271197][T15298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.628715][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 714.791287][T23693] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 715.128887][T23702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 715.610717][T15297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.327449][T15297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.503090][T15297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.570072][T23725] lo speed is unknown, defaulting to 1000 [ 716.755091][T23167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 716.782868][T15297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.805007][T23167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 716.814322][T23167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 716.823275][T23167] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 716.833477][T23167] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 716.841401][T23167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 717.126369][T15297] bridge_slave_1: left allmulticast mode [ 717.145967][T15297] bridge_slave_1: left promiscuous mode [ 717.151754][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.206732][T15297] bridge_slave_0: left allmulticast mode [ 717.212427][T15297] bridge_slave_0: left promiscuous mode [ 717.223211][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.299923][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 717.964324][T15297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.979538][T15297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.992410][T15297] bond0 (unregistering): Released all slaves [ 718.021645][T23735] lo speed is unknown, defaulting to 1000 [ 718.446622][T23773] bond0: entered allmulticast mode [ 718.451791][T23773] bond_slave_0: entered allmulticast mode [ 718.457755][T23773] bond_slave_1: entered allmulticast mode [ 718.725136][T23778] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 718.925424][ T4487] Bluetooth: hci6: command tx timeout [ 719.228822][T15297] hsr_slave_0: left promiscuous mode [ 719.253002][T15297] hsr_slave_1: left promiscuous mode [ 719.259164][T15297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.275410][T15297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.293973][T15297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.304716][T15297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.340751][T15297] veth1_macvtap: left promiscuous mode [ 719.355263][T15297] veth0_macvtap: left promiscuous mode [ 719.360888][T15297] veth1_vlan: left promiscuous mode [ 719.374796][T15297] veth0_vlan: left promiscuous mode [ 720.357289][T15297] team0 (unregistering): Port device team_slave_1 removed [ 720.430470][T15297] team0 (unregistering): Port device team_slave_0 removed [ 721.008865][ T4487] Bluetooth: hci6: command tx timeout [ 721.295745][T23735] chnl_net:caif_netlink_parms(): no params data found [ 721.606395][T23735] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.613566][T23735] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.667778][T23735] bridge_slave_0: entered allmulticast mode [ 721.699786][T23735] bridge_slave_0: entered promiscuous mode [ 721.738096][T23735] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.758441][T23735] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.774468][T23735] bridge_slave_1: entered allmulticast mode [ 721.791376][T23735] bridge_slave_1: entered promiscuous mode [ 721.919525][T23735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.954249][T23735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.053600][T23735] team0: Port device team_slave_0 added [ 722.078858][T23735] team0: Port device team_slave_1 added [ 722.159569][T23735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.174416][T23735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.234477][T23735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.259603][T23817] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 722.315427][T23735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.322406][T23735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.392539][T23735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.521138][T23735] hsr_slave_0: entered promiscuous mode [ 722.560361][T23735] hsr_slave_1: entered promiscuous mode [ 722.586384][T23735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.593973][T23735] Cannot create hsr debugfs directory [ 722.672174][T23826] tipc: Started in network mode [ 722.682666][T23826] tipc: Node identity 62, cluster identity 7 [ 722.694914][T23826] tipc: Node number set to 98 [ 722.709389][T23826] tipc: Cannot configure node identity twice [ 722.726863][T23827] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 722.806002][T23829] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.3'. [ 722.837205][T23829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 722.857068][T23829] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 723.085709][ T4487] Bluetooth: hci6: command tx timeout [ 723.524991][T23843] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 723.553858][T23843] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 723.759831][T23735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.782606][T23735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.808941][T23735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.848382][T23735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.161831][T23735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.210511][T23735] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.256601][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.263760][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.308106][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.315303][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.452843][T23735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.982152][T23871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.106923][T23735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.175976][ T4487] Bluetooth: hci6: command tx timeout [ 725.209074][T23871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.400829][T23871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.506952][T23879] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.554381][T23871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.591001][T23735] veth0_vlan: entered promiscuous mode [ 725.639415][T23735] veth1_vlan: entered promiscuous mode [ 725.743214][T23871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.772669][T23735] veth0_macvtap: entered promiscuous mode [ 725.791568][T23871] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.826644][T23871] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.838344][T23735] veth1_macvtap: entered promiscuous mode [ 725.859698][T23871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.910320][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.936613][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.960819][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.971661][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.984189][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.995125][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.005352][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.019499][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.030202][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.041157][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.064272][T23735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.091574][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.103306][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.115463][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.127911][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.138113][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.160560][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.173976][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.197682][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.217635][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.238485][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.248854][T23735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.262104][T23735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.285875][T23735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.317051][T23735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.345486][T23735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.371205][T23735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.387118][T23735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.446384][ T30] INFO: task syz-executor.2:20608 blocked for more than 143 seconds. [ 726.456986][ T30] Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 2024/06/08 09:03:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 726.488465][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.575410][ T30] task:syz-executor.2 state:D stack:25344 pid:20608 tgid:20607 ppid:16904 flags:0x00000006 [ 726.614788][ T30] Call Trace: [ 726.618114][ T30] [ 726.621060][ T30] __schedule+0x17e8/0x4a20 [ 726.644698][ T30] ? __pfx___schedule+0x10/0x10 [ 726.649605][ T30] ? __pfx_lock_release+0x10/0x10 [ 726.674803][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 726.680341][ T30] ? schedule+0x90/0x320 [ 726.684611][ T30] schedule+0x14b/0x320 [ 726.699091][ T30] schedule_preempt_disabled+0x13/0x30 [ 726.704576][ T30] __mutex_lock+0x6a4/0xd70 [ 726.725029][ T30] ? __mutex_lock+0x527/0xd70 [ 726.729761][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 726.744866][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 726.749945][ T30] ? net_generic+0x1f/0x240 [ 726.766404][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 726.772180][ T30] genl_start+0x4d6/0x6d0 [ 726.785001][ T30] __netlink_dump_start+0x45c/0x780 [ 726.790255][ T30] genl_rcv_msg+0x88c/0xec0 [ 726.804692][ T30] ? mark_lock+0x9a/0x350 [ 726.809067][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.814127][ T30] ? __pfx_genl_start+0x10/0x10 [ 726.834706][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 726.839696][ T30] ? __pfx_genl_done+0x10/0x10 [ 726.844511][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 726.877044][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 726.883532][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 726.905119][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 726.911587][ T30] ? __pfx___might_resched+0x10/0x10 [ 726.935073][ T30] netlink_rcv_skb+0x1e3/0x430 [ 726.939954][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.954821][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.960260][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 726.974980][ T30] genl_rcv+0x28/0x40 [ 726.979020][ T30] netlink_unicast+0x7ea/0x980 [ 726.983805][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 727.005389][ T30] ? __virt_addr_valid+0x183/0x520 [ 727.010583][ T30] ? __check_object_size+0x49c/0x900 [ 727.024677][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 727.029834][ T30] netlink_sendmsg+0x8db/0xcb0 [ 727.044827][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.050164][ T30] ? __import_iovec+0x536/0x820 [ 727.064684][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 727.072010][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 727.104979][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 727.110512][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.135015][ T30] __sock_sendmsg+0x221/0x270 [ 727.139795][ T30] ____sys_sendmsg+0x525/0x7d0 [ 727.144582][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.165046][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 727.169689][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.195048][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 727.201433][ T30] ? do_syscall_64+0x100/0x230 [ 727.214822][ T30] ? do_syscall_64+0xb6/0x230 [ 727.219581][ T30] do_syscall_64+0xf3/0x230 [ 727.224102][ T30] ? clear_bhb_loop+0x35/0x90 [ 727.245201][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.251159][ T30] RIP: 0033:0x7f486167cf69 [ 727.275615][ T30] RSP: 002b:00007f48624b40c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.284344][ T30] RAX: ffffffffffffffda RBX: 00007f48617b3f80 RCX: 00007f486167cf69 [ 727.305028][ T30] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 000000000000000b [ 727.313046][ T30] RBP: 00007f48616da6fe R08: 0000000000000000 R09: 0000000000000000 [