last executing test programs: 1m27.997514565s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 1m22.373684131s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 1m15.193008115s ago: executing program 0 (id=653): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 1m14.146151301s ago: executing program 0 (id=658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7904000000000000000001000000140009000000000000000000000000000000000006000a004e68a437080002000a000000"], 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 1m13.819038828s ago: executing program 0 (id=661): r0 = socket(0x9, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000680)=[{0x6, 0x2, 0x4, 0x7}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) 1m13.576905655s ago: executing program 0 (id=663): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) 1m13.246200036s ago: executing program 0 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x19, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000101301010100000000001a0000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31000000000000000000140012800b0001006970766c616e000004000280"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m13.07404029s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000640)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0x1}, {0x3, 0x3, {0x2, 0xff, 0x2}, {0x1, 0x0, 0x1}, 0x2, 0x1}, {0x2, 0x1, {0x1, 0xf0}, {0x0, 0x1, 0x2}, 0x1, 0xff}], 0x60) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff3f9) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b66e92c9", 0xc}], 0x1}, 0x48005) (async) r3 = socket(0x10, 0x3, 0x0) bind$isdn_base(r3, 0x0, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) (async) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f0000000180)) 1m11.983783739s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 1m11.004417462s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 1m4.481826769s ago: executing program 2 (id=705): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = epoll_create1(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x174, 0x3f, 0x20, 0x70bd29, 0x25dfdbfd, {0xc}, [@typed={0x4, 0x15}, @nested={0x159, 0xa6, 0x0, 0x1, [@generic="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", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="3510ab0a3d173d0f7ae72e627eeb780990772b79ccf68fd681005b65829f3fa815d261e36c9674ad5bc4ad3469acbc856f4fdc71bddf249d3e06ddb5bf1e554cb29cb7791a054b6cc8e939bb"]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000500)={0xa0000004}) (rerun: 32) 1m3.045442588s ago: executing program 2 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3bb, 0x200, 0x6, 0x4, r3}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 59.44255347s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 58.413328334s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 57.433925523s ago: executing program 32 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000640)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0x1}, {0x3, 0x3, {0x2, 0xff, 0x2}, {0x1, 0x0, 0x1}, 0x2, 0x1}, {0x2, 0x1, {0x1, 0xf0}, {0x0, 0x1, 0x2}, 0x1, 0xff}], 0x60) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff3f9) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b66e92c9", 0xc}], 0x1}, 0x48005) (async) r3 = socket(0x10, 0x3, 0x0) bind$isdn_base(r3, 0x0, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) (async) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f0000000180)) 54.863085961s ago: executing program 2 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3bb, 0x200, 0x6, 0x4, r3}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 43.09107169s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 43.050019331s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 41.441405483s ago: executing program 2 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3bb, 0x200, 0x6, 0x4, r3}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 26.93904182s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 25.740836667s ago: executing program 2 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3bb, 0x200, 0x6, 0x4, r3}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 23.691313292s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 9.900486329s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, r2, 0x8, 0x70bd26, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x48}, {0x12}, {0x16}, {0x6c}]}, @random={0xe, 0x9d, "21422c05300eaeff2b9727e629b9939b67aa8592fb0ef2ac95c9d1bdfdc189a130765d32fa6f73c67a508302dffec2a138d488a2c7c30d7dc0627800e2a83ecc4677788660a0d6f60f93c1e50cc12e04137e59d64c450061b38cb3a4171830d9d070439384f4c11d9ea48e04da3e599795832516614d3f24fc8936c8a6cdc69d790ef4a960bb4ce17c016557f8182ad17e3db42960c6262653ba550fcc"}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x81, @device_b, 0x6, @value=@broadcast, 0xfffffffb, 0x80, 0x5, [{{}, @broadcast, 0x80000000}, {{0x0, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x6a}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, 0x28}}, @random_vendor={0xdd, 0x36, "6e8a715a997a11cb54a8244bba838fe4a574ac3c450051ce99d5117ec97788b4b60af7ee6025c7551cb0e0abcd39f09942a0bfec0a4b"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 8.553197927s ago: executing program 2 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3bb, 0x200, 0x6, 0x4, r3}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 6.871563444s ago: executing program 4 (id=388): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 2.689444969s ago: executing program 3 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0x4, [{@remote, 0x6}, {@empty, 0x5}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x7, 0xf72}]}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 2.574647818s ago: executing program 3 (id=926): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e2506000000360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b553c3b6d81c719fe41cb1d", 0xd8}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000080e4f70408010800000000000000000000000006000240000000000500d6ea00000000"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) write(r0, &(0x7f00000003c0)="240000001e005f0214fffffffffffff00700006a0400000000000000050009000d000000", 0x24) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200445c0}, 0x20004010) (async) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="f2c7d27e7c021fe23c928dd2f09c12bde181fa92177b5f91d8ed77d21cdcee05dedb1e4a4f1f83dbc0225a1c2f95426084f18704b07b942412c4e7f0410e5afa004e5ad752", 0x45}], 0x1, 0x7) socketpair(0x1d, 0x4, 0x5ec48ebf, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000380)={@null, @bcast}) 2.170975248s ago: executing program 3 (id=929): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0xb70, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x490}}, 0xb, 0x4}, &(0x7f0000000100)=0x90) 2.053968724s ago: executing program 5 (id=930): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e20, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 1.993707927s ago: executing program 3 (id=931): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbf29, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xe36bb82f27d15a4f}, 0x4000) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0xa}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc014}, 0x4080) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) 1.134035357s ago: executing program 5 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0x20004004) shutdown(r0, 0xd6d9e409091f8a09) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0xd, 0x9, 0x17aea8d, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x80, 0x0, 0xc, 0x5}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@deltclass={0x1f4, 0x29, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x8}, {0xf, 0xb}, {0xfff1, 0x7}}, [@c_atm={{0x8}, {0x18, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xd}}, @TCA_ATM_HDR={0xc, 0x3, "5421215c9dbb2e66"}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_HDR={0x3b, 0x3, "dc3dc246715d923cdf1266693a26e514faec094b0ceb040ec7d5f81cf5bc40c0fecc3ae0e6908b0866ed6632e2fa3c6b5100cf9235a1d3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xf}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xfff1}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_atm={{0x8}, {0xd4, 0x2, [@TCA_ATM_HDR={0x1a, 0x3, "d03fd5bb96cd2d1845a12aebb734d15c997de61308c3"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x8, 0x3, "e49dd78c"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x44, 0x3, "8c44b2afe5d48fbd04b368c14364d12d69f36b49db22292e3bf99b1506567fa482b678649f9be80a491a59ace258a5cbd2e111821294010b5289e03ca449341b"}, @TCA_ATM_HDR={0x29, 0x3, "5ee1a0c1c63822726016b635ce4c67d40bc4cdd3861bb29b8ea21e86c5ff114bdfcd3a28ba"}, @TCA_ATM_HDR={0x22, 0x3, "019af67a529948d1c4f2c9d44f1c03665e6b3c3094a4526eb93a42661516"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff1}}]}}, @c_atm={{0x8}, {0x44, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x1}}, @TCA_ATM_HDR={0x2f, 0x3, "e7ef82f000b9314d0cad46fec481f4bffbd9e8322841d3931ccadc4266c2fc6cced84a5582313752655972"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xa0}}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="03800000000000005c0012800b0001006970766c616e00004c00028006000100010000000600020003000000060001000200000006000100020000000600010004000000060001000000000006000100010000000600010000000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB="08001f0091000000"], 0x8c}}, 0x0) 753.332454ms ago: executing program 3 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x1e, &(0x7f0000000440)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000dc0)={'gre0\x00', 0x100}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080007000000050020000000496f008800660000401190780a010102ac14141a44600000000100000000000000044e204e22004d9078020000000100000001000000053333c98aab3d501bf817920a8da263c567a486ff0a1b2e8f78165e397d591a13c426e5901e02555e5cf04d15853745e0ace7a15e4078ad604dbe515d332ccc4f325c000000000000000000b1"], 0x96) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20044881) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r7, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000180)=0x200000000a) accept4$rose(r7, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x3, 0x9, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @local, {[@generic={0x7, 0x5, "6edf39"}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xf8, 0x1, 0x7, [{@rand_addr=0x64010101}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x451}, {@private=0xa010102, 0xaee}, {@multicast2, 0x8}, {@private=0xa010101, 0xf3b1}, {@multicast2, 0xf81}, {@rand_addr=0x64010100, 0x4a7f5fc7}]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x9, "5e042c6b484327"}, {0x1, 0xe, "f3e7c7e93ec50af314e05b71"}, {0x1, 0xd, "fe609ae5450f1faff295ef"}, {0x6, 0xa, "67dc1adab66002a8"}, {0x5, 0x4, "c99b"}, {0x6, 0xe, "ef3ab141de2e987c53c1c5f5"}]}, @timestamp_addr={0x44, 0x14, 0x1a, 0x1, 0x4, [{@multicast1, 0x7}, {@remote, 0x9}]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$xdp(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x2c, 0xb, r8, 0x10}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="c15b1a8845094ed5a8c594", 0xb}, {&(0x7f0000000340)="c43bae6c98bddeb40cdfa8e5de520fccbc31c4bb11c20b9deb080131e1e73dc648080c1001ca7e7cce9206394593c413aafe854c8442033fd32cc6350a2c48cb6468a29b20c3c1f8cdfc5ab533db95fb349aa8437ab8a64fd8036d610f2728752f739c5d7e60ad53b8", 0x69}], 0x2, 0x0, 0x0, 0x8000}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)=@delchain={0x708, 0x65, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xf}, {0xfff3, 0xa}, {0xffff, 0x3}}, [@f_rsvp6={{0xa}, {0x660, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x1f49}, {0xf0, 0x3, 0xf53}, 0x32, 0xff, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x85e4, 0x1, 0x5}, {0xb2b, 0x81, 0x1800000}, 0x5c, 0x8, 0x9}}, @TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x30, 0x6}, {0x4, 0xd, 0xb}, 0x21, 0x1, 0x5}}, @TCA_RSVP_ACT={0x41c, 0x6, [@m_skbedit={0x70, 0x9, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}]}, {0x39, 0x6, "d810f98c775554be8f8bfcb0f4de486c6f329ba832c15feb8f6719860dcdb80bc2efb98e4f4891e3caa3610f82f4a665cf2ae8980a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x130, 0x10, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0xee, 0x6, "7d96b529658629580e33afd5e35db278ca9d2f4b1c580b1755c9f769824a89808bdae3dda2c6be2a9d7936e153739ca655372594707aa3932afcf617e0852f3d4280d8d973d109ec58bc3d81bf5a43f5042656ce7673e0dfe1b05f223c2a757425b1f7146e0c23d90b97dc63a4921b46e7f271577cc4acc717d14624ea89baaf3e43ca43d1e8398db84ff107fd788f4d86ef41cf1330d533aed45ccbc098d3cfae3d9185d78ae200300aca6fedda24146ae711f85e95625f745b8b0641f3bd65ef85f0fc11d25e92c284ddee7c1b4d10162eb97fa79ceae0ee23a1ed59e17c8a8e10105b781185adb539"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xe8, 0x16, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'gretap0\x00'}]}, {0xb0, 0x6, "fb0993653fc4ab16ae58bcf36dd2a4eee4812ba8e15752a576124ce1b28529877020c52fc48705c8d2cb134e8500ed3a419a4e80f0ff6a00133a4bc00ed32a4f4182390dfa431fcf765b80eb5dedfcbe760264ae53c253903d34d02af82216e460ed7dd6fa68bc20e0f04f5952488e02ee0dd8fc931e5a15b39192372f790c3830ce2c9fdf5d5f78fc72183b1689293b13dc34d756a11a4d35fb81d262f04b6b7b438e12ba39dc02af5dad57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x74, 0x1f, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x800, 0x20000000, 0x7fffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7b}]}, {0x28, 0x6, "52736ef113988abcd0164f43c9cded7746dab28d013f606d4b29573da3ad87e0b1623f95"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x11c, 0xb, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x1, 0xfb, 0x6, 0x4}, {0x0, 0xe, 0x81, 0x10}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x5, 0x62, 0x10, 0x187}, {0x3, 0x4, 0xfa, 0x3}, {0x5, 0x4, 0x0, 0x4e}, {0x7fff, 0x9, 0x8, 0x1}, {0x471, 0x81, 0x2e, 0x5395}, {0x8001, 0x1, 0x8, 0x86}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x7b, 0x6, "edaeacc402e0931ecec68ee22d704fd75790b29094208d9ce85c0dd098811e1c88b554c8739e7097e4d5db2c9a4884cf8a61e5aa4736083c0257ab03d8c2a14b3ea36aae80ac40583f6da5666b61f7229e0079e9b433cd95147d4a2ed8c7b1b598f63c56153755a922fb4c5b4139003bc5aaf5cb049925"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_RSVP_SRC={0x14, 0x3, @dev}, @TCA_RSVP_ACT={0x1a8, 0x6, [@m_ctinfo={0xf4, 0x5, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe38}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xc845}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff0}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10001}]}, {0x7d, 0x6, "89b37bfae70e20c2764dc5ac44fe0f940fb76aaade68244695c665e25abc2f9710afead1dbd8250234368c7013f58c58d8df22aa7825df3e32e454c9860e3c4ab32d8c9bdab1502bfc0eb995b3c278f70aad492130f03f5fa00e9a31809c88f9a09a417f426ff00a4f4d501ebff980670d8f7e1f0941554eb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_mpls={0xb0, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x69, 0x6, "66448ec07c496fbe2d6cdff09d422e21baa10cf1f10fa05566f481d6d91bd89d27a416028f96b74372b51f1d314cf49c5fe43bb30bf2e3cadcf84bd5c74326f72a1afea4f61e4f74ddf0035cc414ec6ae8eee2988d14e848765a83b1214b11c480ffc1296c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x8}, {0x7fffffff, 0x6, 0x6}, 0xc4, 0x4, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x8040}, 0x4000094) 597.98442ms ago: executing program 5 (id=934): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, &(0x7f0000000440), &(0x7f0000000400)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x3c1, 0x1, 0x1f8, [0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x270) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001d4ee903651a2e306ab55e013a49e8e23c70ca6fff1c50b3c436ef6c7146db42a42f1ec3266c2c8746648beb094a6104b7aefd21e8ded1fd684195fa1db255d860ef92e6feb6a59d08942a81ef9a0b7dfbb10e6827bf8e1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xe6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xd106}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) 330.794292ms ago: executing program 5 (id=935): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e1946c79521b1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000004070d787ac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000103006a00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) (async, rerun: 32) socket$inet6(0xa, 0x200000000003, 0x87) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @local, @mcast2, {[@fragment={0x2c, 0x0, 0x3, 0x1, 0x0, 0x1a, 0x66}]}}}}}, 0x0) 132.061299ms ago: executing program 5 (id=936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) close(r0) write$cgroup_devices(r2, &(0x7f0000000100)={'c', ' *:* ', 'rm\x00'}, 0x9) 105.936445ms ago: executing program 3 (id=937): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) socket$packet(0x11, 0xa, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_emit_ethernet(0x6a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaa88aaaa0180c2000000080045000000119078000000000000000000004e20004894999a2e00000000000007f7bbfe04cd00050000000000000000c71ce29af5880843b8adfcf542a4bc5ad1063b34026c208fd0c45787e4aa384e3d26b21ea41cc128364c00000000000000"], 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000080)="f4ebe2e7b3d98c375f783ed540c21b4f730d34685584b5236d8075e75ccc831f4472833d9d481b0981a04588e1b65d81fb0448e042530328b964c3d185f742c74ded2f9030cce346afd8dd75e2f72b6b37c9052cb5", &(0x7f00000001c0)=""/208, &(0x7f0000000100)="beb5593e250f5d1fb9c64aa3bbe315f9e0955b01d3f2fe8521c8a893ebe16eebc9d3ef36676e33984a72b30be0421a48a106d16587a89710f493bc23d86a20c99c94fb5c1fb2565fdbeffafa07ec29f99f4a717cd9a26f669f4e1a5721f630c1ca49807dc581afdedfe8ded3a8b012d972", &(0x7f0000000300)="9c31b99b90fea63d68567e8abc0166e0648812932ed44e637b2e05f2d13c83a72dc100287987812614633cce3f6720b68065db48d25fd668d24068d687a7ff169bd78d0f97eb4f2349d926ef011608f35424dc40e7a9a78fcbce3f0ff6a90f4d85e73253d2409f21358357fd8850843d81c683c26a2645d43b88e9251f4138fbbf229134b9d318ad84856257418bc7353ec6f9f38a9a7ce7af0fd0db48d90d08f47438bf00887d29bc59297db2e655359bb08a4f1df72a12e53e77258887b8a766c7d126fc67d77fa56fedcbf6b7ce6a7ae5ce989204167847435ee0844662323de8523071317e5dcae9c9abd6d1808baea284a18f5077f2", 0x8, r3, 0x4}, 0x38) 0s ago: executing program 5 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbf9, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): 0:50:50:50 [ 156.462636][ T8499] veth0_macvtap: entered promiscuous mode [ 156.477838][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.483255][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 156.501385][ T8499] veth1_macvtap: entered promiscuous mode [ 156.553571][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.603850][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.628719][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.650450][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.662676][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.674048][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.705609][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.718119][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 156.762142][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.782953][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.797119][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.811636][ T8499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.831044][ T8499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.841225][ T8499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.850619][ T8499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.229250][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.288904][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.321680][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.390907][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.462636][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.471711][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.653475][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.754105][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.008158][ T6080] bridge_slave_1: left allmulticast mode [ 158.036869][ T6080] bridge_slave_1: left promiscuous mode [ 158.063495][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.107529][ T6080] bridge_slave_0: left allmulticast mode [ 158.113457][ T6080] bridge_slave_0: left promiscuous mode [ 158.121154][ T5834] hid-generic 0005:0B57:0006.0002: item fetching failed at offset 0/1 [ 158.144130][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.147627][ T5834] hid-generic 0005:0B57:0006.0002: probe with driver hid-generic failed with error -22 [ 158.574601][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.585291][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.593211][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.609409][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.618425][ T5150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.626907][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.880433][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.892052][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.911508][ T6080] bond0 (unregistering): Released all slaves [ 158.922588][ T8829] netlink: 240 bytes leftover after parsing attributes in process `syz.2.673'. [ 159.360989][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 159.573877][ T6080] hsr_slave_0: left promiscuous mode [ 159.589209][ T6080] hsr_slave_1: left promiscuous mode [ 159.598210][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.607331][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.616534][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.625025][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.632691][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.640522][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.654955][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.663151][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.674489][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.681942][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.776112][ T6080] veth1_macvtap: left promiscuous mode [ 159.781755][ T6080] veth0_macvtap: left promiscuous mode [ 159.808382][ T6080] veth1_vlan: left promiscuous mode [ 159.825485][ T6080] veth0_vlan: left promiscuous mode [ 160.458832][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 160.502849][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 160.658620][ T5150] Bluetooth: hci0: command tx timeout [ 160.909547][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 160.920295][ T8862] netlink: 'syz.2.678': attribute type 12 has an invalid length. [ 160.928463][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.678'. [ 160.942603][ T8887] netlink: 71 bytes leftover after parsing attributes in process `syz.3.683'. [ 161.312840][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.334153][ T8905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.686'. [ 161.345379][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.352645][ T8839] bridge_slave_0: entered allmulticast mode [ 161.361191][ T8839] bridge_slave_0: entered promiscuous mode [ 161.391495][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.404517][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.420377][ T8839] bridge_slave_1: entered allmulticast mode [ 161.435879][ T8839] bridge_slave_1: entered promiscuous mode [ 161.540514][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 161.569392][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.636836][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.694073][ T5150] Bluetooth: hci1: command tx timeout [ 161.746796][ T8923] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 161.760346][ T8925] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 161.791943][ T8839] team0: Port device team_slave_0 added [ 161.812632][ T8839] team0: Port device team_slave_1 added [ 161.924464][ T6080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.959677][ T8931] netlink: 'syz.2.691': attribute type 4 has an invalid length. [ 161.969255][ T8931] netlink: 152 bytes leftover after parsing attributes in process `syz.2.691'. [ 161.980205][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.992339][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.020966][ T8839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.038290][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'. [ 162.071030][ T6080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.098063][ T8931] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 162.177779][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.194993][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.222171][ T8839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.266966][ T6080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.285871][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 162.333997][ T6080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.458064][ T8839] hsr_slave_0: entered promiscuous mode [ 162.464711][ T8839] hsr_slave_1: entered promiscuous mode [ 162.471124][ T8839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.486833][ T8839] Cannot create hsr debugfs directory [ 162.719604][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.729043][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.737496][ T5150] Bluetooth: hci0: command tx timeout [ 162.745252][ T8864] bridge_slave_0: entered allmulticast mode [ 162.752411][ T8864] bridge_slave_0: entered promiscuous mode [ 162.828784][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.839204][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.859222][ T8864] bridge_slave_1: entered allmulticast mode [ 162.872790][ T8864] bridge_slave_1: entered promiscuous mode [ 163.091567][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.108204][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.131487][ T6080] bridge_slave_1: left allmulticast mode [ 163.149179][ T6080] bridge_slave_1: left promiscuous mode [ 163.164750][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.175297][ T6080] bridge_slave_0: left allmulticast mode [ 163.180988][ T6080] bridge_slave_0: left promiscuous mode [ 163.191899][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.612446][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.625223][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.642955][ T6080] bond0 (unregistering): Released all slaves [ 163.774094][ T5150] Bluetooth: hci1: command tx timeout [ 163.857663][ T8864] team0: Port device team_slave_0 added [ 163.882599][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 163.892195][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 163.967469][ T8864] team0: Port device team_slave_1 added [ 164.217192][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.231278][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.280436][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.325773][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.333038][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.390916][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.627673][ T6080] hsr_slave_0: left promiscuous mode [ 164.635916][ T6080] hsr_slave_1: left promiscuous mode [ 164.641887][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.650324][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.695209][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.703101][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.794833][ T6080] veth1_macvtap: left promiscuous mode [ 164.800427][ T6080] veth0_macvtap: left promiscuous mode [ 164.812866][ T6080] veth1_vlan: left promiscuous mode [ 164.818354][ T5150] Bluetooth: hci0: command tx timeout [ 164.834986][ T6080] veth0_vlan: left promiscuous mode [ 165.380867][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 165.424503][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 165.853110][ T9027] syzkaller1: entered promiscuous mode [ 165.856238][ T5150] Bluetooth: hci1: command tx timeout [ 165.859864][ T9027] syzkaller1: entered allmulticast mode [ 165.929372][ T8864] hsr_slave_0: entered promiscuous mode [ 165.937169][ T8864] hsr_slave_1: entered promiscuous mode [ 165.943309][ T8864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.951927][ T8864] Cannot create hsr debugfs directory [ 166.337453][ T8839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.410595][ T8839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.432079][ T8839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.470909][ T8839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.632360][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.672137][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.693494][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.700724][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.732917][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.740206][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.810311][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.824560][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.836572][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.846234][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.854852][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.862167][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.872602][ T8864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.894278][ T5844] Bluetooth: hci0: command tx timeout [ 166.897419][ T8864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.909617][ T8864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.919989][ T8864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.170823][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.193122][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 167.311354][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.398980][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.411237][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.419091][ T9039] bridge_slave_0: entered allmulticast mode [ 167.419324][ T9057] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 167.426587][ T9039] bridge_slave_0: entered promiscuous mode [ 167.450617][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.459223][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.466516][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.474600][ T9039] bridge_slave_1: entered allmulticast mode [ 167.481702][ T9039] bridge_slave_1: entered promiscuous mode [ 167.509145][ T9057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.572122][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.587415][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.600933][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.608142][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.651066][ T9039] team0: Port device team_slave_0 added [ 167.669495][ T9039] team0: Port device team_slave_1 added [ 167.679955][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.687105][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.738022][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.746412][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.775586][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.788580][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.796004][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.823180][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.884792][ T9039] hsr_slave_0: entered promiscuous mode [ 167.891233][ T9039] hsr_slave_1: entered promiscuous mode [ 167.897645][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.905669][ T9039] Cannot create hsr debugfs directory [ 167.934512][ T5844] Bluetooth: hci1: command tx timeout [ 167.946731][ T8839] veth0_vlan: entered promiscuous mode [ 168.013139][ T8839] veth1_vlan: entered promiscuous mode [ 168.133317][ T8839] veth0_macvtap: entered promiscuous mode [ 168.201113][ T9039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.275665][ T8839] veth1_macvtap: entered promiscuous mode [ 168.301479][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 168.310992][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.333257][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.353915][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.369846][ T8839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.392688][ T8839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.405446][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.449101][ T9039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.471255][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.553586][ T9039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.577070][ T8839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.586832][ T8839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.597988][ T8839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.607869][ T8839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.707470][ T9039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.808095][ T8864] veth0_vlan: entered promiscuous mode [ 168.818609][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.865312][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.879950][ T8864] veth1_vlan: entered promiscuous mode [ 168.887904][ T9076] netlink: 104 bytes leftover after parsing attributes in process `syz.3.715'. [ 168.934301][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.956177][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.974048][ T5844] Bluetooth: hci4: command tx timeout [ 169.006319][ T9039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.045574][ T9039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.096341][ T9039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.135915][ T9039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.202628][ T8864] veth0_macvtap: entered promiscuous mode [ 169.236677][ T8864] veth1_macvtap: entered promiscuous mode [ 169.271787][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.283300][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.294721][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.306018][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.319771][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'. [ 169.327333][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.343826][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.355320][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.395406][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.406503][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.417933][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.434173][ T8864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.442967][ T8864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.452264][ T8864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.461587][ T8864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.560684][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.591868][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.608773][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.624055][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.635596][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.642722][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.655295][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.662410][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.715361][ T6099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.821948][ T6099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.883005][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.891456][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.905060][ T6099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.040284][ T6099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.172618][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.212911][ T9039] veth0_vlan: entered promiscuous mode [ 170.225003][ T9039] veth1_vlan: entered promiscuous mode [ 170.250765][ T9039] veth0_macvtap: entered promiscuous mode [ 170.270123][ T9039] veth1_macvtap: entered promiscuous mode [ 170.303563][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.317358][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.328161][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.339951][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.350084][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.362282][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.372437][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.394493][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.415704][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.459545][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.503903][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.527725][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.563940][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.595158][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.608464][ T9039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.619957][ T9039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.630071][ T9039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.642663][ T9101] openvswitch: netlink: IP tunnel dst address not specified [ 170.665420][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.719'. [ 170.674713][ T9039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.699325][ T6099] bridge_slave_1: left allmulticast mode [ 170.721186][ T6099] bridge_slave_1: left promiscuous mode [ 170.735326][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.793068][ T6099] bridge_slave_0: left allmulticast mode [ 170.814298][ T6099] bridge_slave_0: left promiscuous mode [ 170.830380][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.922297][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.933599][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.945055][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.961541][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.970609][ T5150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.979918][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.064215][ T5150] Bluetooth: hci4: command tx timeout [ 171.303128][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.320152][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.330437][ T6099] bond0 (unregistering): Released all slaves [ 171.354303][ T9101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.719'. [ 171.363230][ T9101] netlink: 21 bytes leftover after parsing attributes in process `syz.3.719'. [ 171.374851][ T9101] netlink: 21 bytes leftover after parsing attributes in process `syz.3.719'. [ 171.798362][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.822138][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.038061][ T6099] hsr_slave_0: left promiscuous mode [ 172.053811][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.062780][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.070672][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.074233][ T6099] hsr_slave_1: left promiscuous mode [ 172.078978][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.083621][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.090945][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.105407][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.133431][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.141786][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.152347][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.178397][ T6099] veth1_macvtap: left promiscuous mode [ 172.184175][ T6099] veth0_macvtap: left promiscuous mode [ 172.189790][ T6099] veth1_vlan: left promiscuous mode [ 172.195391][ T6099] veth0_vlan: left promiscuous mode [ 172.232464][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.241803][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.251628][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.263534][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.271663][ T5150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.279435][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.672345][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 172.719030][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 173.057776][ T5150] Bluetooth: hci0: command tx timeout [ 173.131062][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.149940][ T5150] Bluetooth: hci4: command tx timeout [ 173.173290][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.234087][ T9103] chnl_net:caif_netlink_parms(): no params data found [ 173.600831][ T9125] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 173.638962][ T9125] vlan0: entered allmulticast mode [ 173.655738][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.662901][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.682299][ T9103] bridge_slave_0: entered allmulticast mode [ 173.705012][ T9103] bridge_slave_0: entered promiscuous mode [ 173.728359][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.736597][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 173.745824][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.752977][ T9103] bridge_slave_1: entered allmulticast mode [ 173.753911][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 173.760927][ T9103] bridge_slave_1: entered promiscuous mode [ 173.871950][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.889523][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.906679][ T9112] chnl_net:caif_netlink_parms(): no params data found [ 173.923862][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 173.950839][ T9134] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 173.958872][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 173.989425][ T9103] team0: Port device team_slave_0 added [ 174.014425][ T9134] netlink: 860 bytes leftover after parsing attributes in process `syz.3.725'. [ 174.015016][ T9103] team0: Port device team_slave_1 added [ 174.023392][ T9134] openvswitch: netlink: Flow key attr not present in new flow. [ 174.048836][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 174.058787][ T9134] netlink: 5 bytes leftover after parsing attributes in process `syz.3.725'. [ 174.115913][ T6099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.174750][ T5150] Bluetooth: hci1: command tx timeout [ 174.261447][ T9114] chnl_net:caif_netlink_parms(): no params data found [ 174.333389][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.344156][ T5150] Bluetooth: hci5: command tx timeout [ 174.366759][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.406722][ T9103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.433214][ T6099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.492856][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.511895][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.539792][ T9103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.554510][ T9142] netlink: 'syz.3.727': attribute type 29 has an invalid length. [ 174.585391][ T9142] netlink: 508 bytes leftover after parsing attributes in process `syz.3.727'. [ 174.607331][ T9142] unsupported nla_type 58 [ 174.640984][ T6099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.676933][ T9144] netlink: 'syz.3.727': attribute type 29 has an invalid length. [ 174.794493][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.803314][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.812608][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.821845][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.832265][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.839851][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.847246][ T9150] xt_hashlimit: size too large, truncated to 1048576 [ 174.895184][ T6099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.942776][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.963314][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.973623][ T9112] bridge_slave_0: entered allmulticast mode [ 174.989106][ T9112] bridge_slave_0: entered promiscuous mode [ 175.009453][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.016836][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.025591][ T9112] bridge_slave_1: entered allmulticast mode [ 175.032681][ T9112] bridge_slave_1: entered promiscuous mode [ 175.074189][ T9151] : renamed from bond0 (while UP) [ 175.086256][ T9103] hsr_slave_0: entered promiscuous mode [ 175.092785][ T9103] hsr_slave_1: entered promiscuous mode [ 175.099297][ T9103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.107316][ T9103] Cannot create hsr debugfs directory [ 175.134279][ T5844] Bluetooth: hci0: command tx timeout [ 175.218055][ T9156] netlink: 'syz.3.729': attribute type 21 has an invalid length. [ 175.227345][ T9156] netlink: 'syz.3.729': attribute type 6 has an invalid length. [ 175.237178][ T9156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 175.249603][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.262240][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.311878][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.319437][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.328467][ T9114] bridge_slave_0: entered allmulticast mode [ 175.336025][ T9114] bridge_slave_0: entered promiscuous mode [ 175.378344][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.385818][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.393211][ T9114] bridge_slave_1: entered allmulticast mode [ 175.401972][ T9114] bridge_slave_1: entered promiscuous mode [ 175.409208][ T9157] syz_tun: entered allmulticast mode [ 175.421161][ T9112] team0: Port device team_slave_0 added [ 175.480359][ T9112] team0: Port device team_slave_1 added [ 175.513625][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 175.554725][ T9157] syz_tun: left allmulticast mode [ 175.596055][ T9114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.622794][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.630019][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.663227][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.694992][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.702010][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.728558][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.741359][ T6099] bridge_slave_1: left allmulticast mode [ 175.747548][ T6099] bridge_slave_1: left promiscuous mode [ 175.753302][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.762562][ T6099] bridge_slave_0: left allmulticast mode [ 175.768783][ T6099] bridge_slave_0: left promiscuous mode [ 175.774980][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.121854][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.141780][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.153162][ T6099] bond0 (unregistering): Released all slaves [ 176.202067][ T9114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.264289][ T5844] Bluetooth: hci1: command tx timeout [ 176.336054][ T9112] hsr_slave_0: entered promiscuous mode [ 176.342554][ T9112] hsr_slave_1: entered promiscuous mode [ 176.355802][ T9112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.363553][ T9112] Cannot create hsr debugfs directory [ 176.414130][ T5844] Bluetooth: hci5: command tx timeout [ 176.427558][ T9114] team0: Port device team_slave_0 added [ 176.452726][ T9114] team0: Port device team_slave_1 added [ 176.652301][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.668828][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.711776][ T9114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.791188][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.798580][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.825874][ T9114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.886746][ T6099] hsr_slave_0: left promiscuous mode [ 176.892662][ T6099] hsr_slave_1: left promiscuous mode [ 176.898108][ T5844] Bluetooth: hci4: command tx timeout [ 176.904270][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.911885][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.919948][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.927540][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.952011][ T6099] veth1_macvtap: left promiscuous mode [ 176.957640][ T6099] veth0_macvtap: left promiscuous mode [ 176.963215][ T6099] veth1_vlan: left promiscuous mode [ 176.969365][ T6099] veth0_vlan: left promiscuous mode [ 177.223955][ T5844] Bluetooth: hci0: command tx timeout [ 177.458026][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 177.526077][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 177.995830][ T9114] hsr_slave_0: entered promiscuous mode [ 178.002539][ T9114] hsr_slave_1: entered promiscuous mode [ 178.009195][ T9114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.017857][ T9114] Cannot create hsr debugfs directory [ 178.097542][ T9147] chnl_net:caif_netlink_parms(): no params data found [ 178.302590][ T9179] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 178.334312][ T5844] Bluetooth: hci1: command tx timeout [ 178.493877][ T5844] Bluetooth: hci5: command tx timeout [ 178.562858][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.587334][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.595245][ T9147] bridge_slave_0: entered allmulticast mode [ 178.602437][ T9147] bridge_slave_0: entered promiscuous mode [ 178.639901][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.663088][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.688318][ T9147] bridge_slave_1: entered allmulticast mode [ 178.705031][ T9147] bridge_slave_1: entered promiscuous mode [ 178.761663][ T9103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.780501][ T9103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.823383][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.861924][ T9103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.879139][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.905416][ T9103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.982442][ T226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.982792][ T5844] Bluetooth: hci4: command tx timeout [ 179.021680][ T9147] team0: Port device team_slave_0 added [ 179.047092][ T9147] team0: Port device team_slave_1 added [ 179.174769][ T226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.246637][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.263791][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.304411][ T5844] Bluetooth: hci0: command tx timeout [ 179.313545][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.336709][ T9200] xt_hashlimit: size too large, truncated to 1048576 [ 179.368321][ T9112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.378820][ T9112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.476253][ T226] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.506873][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.519551][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.556935][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.575957][ T9112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.652424][ T226] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.671197][ T9112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.827161][ T9147] hsr_slave_0: entered promiscuous mode [ 179.836861][ T9147] hsr_slave_1: entered promiscuous mode [ 179.842789][ T9147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.851848][ T9147] Cannot create hsr debugfs directory [ 180.106672][ T226] bridge_slave_1: left allmulticast mode [ 180.112382][ T226] bridge_slave_1: left promiscuous mode [ 180.119170][ T226] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.135694][ T226] bridge_slave_0: left allmulticast mode [ 180.142338][ T226] bridge_slave_0: left promiscuous mode [ 180.148975][ T226] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.214258][ T9213] __nla_validate_parse: 1 callbacks suppressed [ 180.214276][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 180.289033][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 180.424188][ T5844] Bluetooth: hci1: command tx timeout [ 180.554470][ T226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.570136][ T226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.578846][ T5844] Bluetooth: hci5: command tx timeout [ 180.589429][ T226] bond0 (unregistering): Released all slaves [ 180.714743][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.784047][ T9114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.807012][ T9114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.884046][ T9114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.900659][ T9114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.057170][ T5844] Bluetooth: hci4: command tx timeout [ 181.131693][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.161377][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.206674][ T9112] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.242301][ T226] hsr_slave_0: left promiscuous mode [ 181.252144][ T226] hsr_slave_1: left promiscuous mode [ 181.275928][ T226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.283438][ T226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.302553][ T226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.310336][ T226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.348361][ T226] veth1_macvtap: left promiscuous mode [ 181.364893][ T226] veth0_macvtap: left promiscuous mode [ 181.372518][ T226] veth1_vlan: left promiscuous mode [ 181.379251][ T226] veth0_vlan: left promiscuous mode [ 181.854213][ T226] team0 (unregistering): Port device team_slave_1 removed [ 181.896404][ T226] team0 (unregistering): Port device team_slave_0 removed [ 182.324535][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.331675][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.466982][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.474145][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.501609][ T9231] netlink: 'syz.3.753': attribute type 9 has an invalid length. [ 182.501673][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.516459][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.520169][ T9231] netlink: 244 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.537091][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.544256][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.615026][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.641248][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.749366][ T9114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.795114][ T9114] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.901359][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.908550][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.930474][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.937685][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.047641][ T9147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.082279][ T9103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.109524][ T9147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.135555][ T5844] Bluetooth: hci4: command tx timeout [ 183.144911][ T9246] netlink: 'syz.3.755': attribute type 7 has an invalid length. [ 183.153346][ T9114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.166509][ T9114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.184260][ T9147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.191647][ T9246] netlink: 'syz.3.755': attribute type 8 has an invalid length. [ 183.224933][ T9147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.281687][ T9112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.528572][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.571208][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.598370][ T9114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.625574][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.632753][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.701000][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.708197][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.752141][ T9103] veth0_vlan: entered promiscuous mode [ 183.771520][ T9114] veth0_vlan: entered promiscuous mode [ 183.795095][ T9103] veth1_vlan: entered promiscuous mode [ 183.825972][ T9114] veth1_vlan: entered promiscuous mode [ 183.921286][ T9114] veth0_macvtap: entered promiscuous mode [ 183.953318][ T9112] veth0_vlan: entered promiscuous mode [ 183.988899][ T9114] veth1_macvtap: entered promiscuous mode [ 184.041444][ T9112] veth1_vlan: entered promiscuous mode [ 184.055898][ T9103] veth0_macvtap: entered promiscuous mode [ 184.075915][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.091659][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.105714][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.115370][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 184.125869][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.138373][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.151356][ T9103] veth1_macvtap: entered promiscuous mode [ 184.179502][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.206103][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.215635][ T9114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.226077][ T9114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.235880][ T9114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.246547][ T9114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.286046][ T9103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.305166][ T9103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.330959][ T9103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.358958][ T9103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.369592][ T9103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.380381][ T9103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.391850][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.398060][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 184.408701][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 184.423581][ T9112] veth0_macvtap: entered promiscuous mode [ 184.471638][ T9103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.487469][ T9103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.503212][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.538006][ T9112] veth1_macvtap: entered promiscuous mode [ 184.576085][ T9103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.597156][ T9103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.617708][ T9103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.633791][ T9103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.720420][ T9275] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 184.732160][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.740625][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.752352][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.760325][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.760345][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.791447][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.802399][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.813153][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.823767][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.834344][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.849340][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.923396][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.934318][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.945603][ T9112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.960799][ T9112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.971970][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.981261][ T9147] veth0_vlan: entered promiscuous mode [ 185.036971][ T9112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.054291][ T9112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.065063][ T9112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.073918][ T9112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.095402][ T9147] veth1_vlan: entered promiscuous mode [ 185.102519][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.171117][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.172082][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.208725][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.304293][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.324410][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.427048][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.435077][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.487483][ T9147] veth0_macvtap: entered promiscuous mode [ 185.525505][ T9147] veth1_macvtap: entered promiscuous mode [ 185.585681][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.616351][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.638596][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.654055][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.654271][ T9288] Cannot find add_set index 0 as target [ 185.673803][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.674320][ T9288] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 185.696589][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.706832][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.719623][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.730007][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.740635][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.752780][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.831649][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.841025][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.851975][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.865314][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.877071][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.888584][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.900146][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.910904][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.921820][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.948856][ T9147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.986268][ T9147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.006374][ T9147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.025746][ T9147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.127272][ T6083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.311709][ T6083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.434795][ T6083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.459510][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.470415][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.542130][ T6083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.587155][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.597810][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.823587][ T6083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.147296][ T9294] netlink: 'syz.5.720': attribute type 1 has an invalid length. [ 187.174491][ T9294] netlink: 'syz.5.720': attribute type 1 has an invalid length. [ 187.176467][ T6083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.195853][ T9298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.317464][ T6083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.487220][ T6083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.600973][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.611387][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.656544][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.676554][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.686338][ T5150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.695900][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.917854][ T6083] bridge_slave_1: left allmulticast mode [ 187.937479][ T6083] bridge_slave_1: left promiscuous mode [ 187.943274][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.000792][ T6083] bridge_slave_0: left allmulticast mode [ 188.030971][ T6083] bridge_slave_0: left promiscuous mode [ 188.044537][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.080113][ T6083] bridge_slave_1: left allmulticast mode [ 188.104815][ T6083] bridge_slave_1: left promiscuous mode [ 188.125669][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.164640][ T6083] bridge_slave_0: left allmulticast mode [ 188.174113][ T6083] bridge_slave_0: left promiscuous mode [ 188.179865][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.292052][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.302086][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.314623][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.325373][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.336413][ T5150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 188.346746][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.368545][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.381322][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.390026][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.401411][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.411909][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.421743][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.967544][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.979497][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.990312][ T6083] bond0 (unregistering): Released all slaves [ 189.113544][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.127935][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.138980][ T6083] bond0 (unregistering): Released all slaves [ 189.725078][ T9337] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 189.774598][ T5841] Bluetooth: hci0: command tx timeout [ 189.792309][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 189.797427][ T9299] chnl_net:caif_netlink_parms(): no params data found [ 189.810385][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 189.857413][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.946891][ T9342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.772'. [ 190.062297][ T9350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 190.195180][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 190.238071][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 190.256208][ T9355] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 190.264272][ T9355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.775'. [ 190.372133][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 190.414573][ T5841] Bluetooth: hci4: command tx timeout [ 190.425117][ T9364] netlink: 'syz.5.776': attribute type 10 has an invalid length. [ 190.496626][ T5841] Bluetooth: hci5: command tx timeout [ 190.535944][ T6083] hsr_slave_0: left promiscuous mode [ 190.542330][ T6083] hsr_slave_1: left promiscuous mode [ 190.551671][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.560087][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.572690][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.589798][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.607528][ T6083] hsr_slave_0: left promiscuous mode [ 190.613408][ T6083] hsr_slave_1: left promiscuous mode [ 190.620034][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.627618][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.639222][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.647423][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.692052][ T6083] veth1_macvtap: left promiscuous mode [ 190.699149][ T6083] veth0_macvtap: left promiscuous mode [ 190.705650][ T6083] veth1_vlan: left promiscuous mode [ 190.711082][ T6083] veth0_vlan: left promiscuous mode [ 190.718296][ T6083] veth1_macvtap: left promiscuous mode [ 190.724346][ T6083] veth0_macvtap: left promiscuous mode [ 190.735643][ T6083] veth1_vlan: left promiscuous mode [ 190.741400][ T6083] veth0_vlan: left promiscuous mode [ 191.430421][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 191.445862][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 191.490763][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 191.853870][ T5841] Bluetooth: hci0: command tx timeout [ 192.262610][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 192.306300][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 192.495113][ T5841] Bluetooth: hci4: command tx timeout [ 192.575126][ T5841] Bluetooth: hci5: command tx timeout [ 192.770990][ T9364] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.788075][ T9316] chnl_net:caif_netlink_parms(): no params data found [ 192.872322][ T9373] geneve2: entered promiscuous mode [ 192.916148][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.923369][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.931340][ T9299] bridge_slave_0: entered allmulticast mode [ 192.941881][ T9299] bridge_slave_0: entered promiscuous mode [ 193.010841][ T9299] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.035584][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.045395][ T9299] bridge_slave_1: entered allmulticast mode [ 193.052443][ T9299] bridge_slave_1: entered promiscuous mode [ 193.173919][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.181135][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.227696][ T9318] bridge_slave_0: entered allmulticast mode [ 193.243176][ T9318] bridge_slave_0: entered promiscuous mode [ 193.266680][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.283795][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.291324][ T9318] bridge_slave_1: entered allmulticast mode [ 193.312915][ T9318] bridge_slave_1: entered promiscuous mode [ 193.396863][ T9299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.416538][ T9299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.478928][ T9397] netlink: 165 bytes leftover after parsing attributes in process `syz.5.785'. [ 193.507000][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.785'. [ 193.637102][ T9299] team0: Port device team_slave_0 added [ 193.647455][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.668417][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.690402][ T9299] team0: Port device team_slave_1 added [ 193.780437][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.808112][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.834427][ T9316] bridge_slave_0: entered allmulticast mode [ 193.854113][ T9316] bridge_slave_0: entered promiscuous mode [ 193.935187][ T5841] Bluetooth: hci0: command tx timeout [ 193.967726][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.988351][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.001493][ T9316] bridge_slave_1: entered allmulticast mode [ 194.008524][ T9413] netlink: 'syz.3.788': attribute type 7 has an invalid length. [ 194.021110][ T9316] bridge_slave_1: entered promiscuous mode [ 194.029340][ T9413] netlink: 'syz.3.788': attribute type 8 has an invalid length. [ 194.051164][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.058657][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.094232][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.112240][ T9318] team0: Port device team_slave_0 added [ 194.167337][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.184948][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.227022][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.356043][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362383][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.393187][ T9318] team0: Port device team_slave_1 added [ 194.419907][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.521450][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.574633][ T5851] Bluetooth: hci4: command tx timeout [ 194.648408][ T9299] hsr_slave_0: entered promiscuous mode [ 194.654126][ T5851] Bluetooth: hci5: command tx timeout [ 194.682185][ T9299] hsr_slave_1: entered promiscuous mode [ 194.689373][ T9299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.697174][ T9299] Cannot create hsr debugfs directory [ 194.742842][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.751302][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.778927][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.811708][ T9316] team0: Port device team_slave_0 added [ 194.821293][ T9316] team0: Port device team_slave_1 added [ 194.854238][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.861238][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.889789][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.900525][ T9438] Unsupported ieee802154 address type: 0 [ 195.001826][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.012668][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.039729][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.102931][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.119900][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.155742][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.243413][ T9318] hsr_slave_0: entered promiscuous mode [ 195.250606][ T9318] hsr_slave_1: entered promiscuous mode [ 195.257007][ T9318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.265229][ T9318] Cannot create hsr debugfs directory [ 195.395207][ T6083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.431984][ T9316] hsr_slave_0: entered promiscuous mode [ 195.439828][ T9316] hsr_slave_1: entered promiscuous mode [ 195.467103][ T9316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.483935][ T9316] Cannot create hsr debugfs directory [ 195.557563][ T6083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.648631][ T9455] openvswitch: netlink: Unknown nsh attribute 0 [ 195.659321][ T9455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.722977][ T6083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.811670][ T9462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.860465][ T6083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.013739][ T5851] Bluetooth: hci0: command tx timeout [ 196.354650][ T6083] bridge_slave_1: left allmulticast mode [ 196.370640][ T6083] bridge_slave_1: left promiscuous mode [ 196.393328][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.417577][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 196.417859][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 196.443622][ T6083] bridge_slave_0: left allmulticast mode [ 196.449683][ T6083] bridge_slave_0: left promiscuous mode [ 196.456028][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.654810][ T5841] Bluetooth: hci4: command tx timeout [ 196.734415][ T5841] Bluetooth: hci5: command tx timeout [ 196.865570][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.884773][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.898103][ T6083] bond0 (unregistering): Released all slaves [ 196.913404][ T9481] __nla_validate_parse: 2 callbacks suppressed [ 196.913421][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 196.929281][ T9481] netlink: 5 bytes leftover after parsing attributes in process `syz.3.806'. [ 197.236833][ T9299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.309983][ T9299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.316161][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.809'. [ 197.380405][ T9299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.409649][ T9299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.490194][ T6083] hsr_slave_0: left promiscuous mode [ 197.496451][ T6083] hsr_slave_1: left promiscuous mode [ 197.502342][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.510997][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.525242][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.535319][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.596103][ T6083] veth1_macvtap: left promiscuous mode [ 197.601685][ T6083] veth0_macvtap: left promiscuous mode [ 197.620234][ T6083] veth1_vlan: left promiscuous mode [ 197.634339][ T6083] veth0_vlan: left promiscuous mode [ 197.766453][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.810'. [ 197.900087][ T9506] netlink: 68 bytes leftover after parsing attributes in process `syz.3.810'. [ 198.202728][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 198.245282][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 198.834826][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 198.867863][ T9299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.939976][ T9299] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.977965][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.985139][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.022619][ T9316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.189602][ T9316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.211054][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.218250][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.284028][ T9316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.328162][ T9316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.456085][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.820'. [ 199.670146][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 199.727731][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 199.819336][ T9299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.845226][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 199.882341][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.951473][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.042658][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.049866][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.101861][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.109076][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.144415][ T9299] veth0_vlan: entered promiscuous mode [ 200.204128][ T9299] veth1_vlan: entered promiscuous mode [ 200.221699][ T9318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.269633][ T9318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.323011][ T9318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.367274][ T9318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.408819][ T9571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 200.431105][ T9316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.458518][ T9299] veth0_macvtap: entered promiscuous mode [ 200.496719][ T9299] veth1_macvtap: entered promiscuous mode [ 200.556405][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.581627][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.609868][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.634175][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.654407][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.675471][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.690070][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.756407][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.779591][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.801511][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.830128][ T9299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.864836][ T9299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.904436][ T9299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.913266][ T9299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.077283][ T9316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.181283][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.223862][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.292342][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.330581][ T9316] veth0_vlan: entered promiscuous mode [ 201.351800][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.360024][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.363993][ T9316] veth1_vlan: entered promiscuous mode [ 201.416884][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.446942][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.454142][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.551535][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.558722][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.621328][ T9316] veth0_macvtap: entered promiscuous mode [ 201.655708][ T9316] veth1_macvtap: entered promiscuous mode [ 201.800868][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.834062][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.844836][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.873687][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.883550][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.914362][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.936734][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.947976][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.961085][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.001037][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.032841][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.043379][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.060520][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.071620][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.084754][ T9607] __nla_validate_parse: 4 callbacks suppressed [ 202.084766][ T9607] netlink: 80 bytes leftover after parsing attributes in process `syz.3.834'. [ 202.112439][ T9316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.132681][ T9316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.153787][ T9316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.158079][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'. [ 202.163985][ T9316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.272561][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.341313][ T6069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.502775][ T6069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.614881][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.622733][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.670285][ T6069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.717363][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.726007][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.763394][ T9318] veth0_vlan: entered promiscuous mode [ 202.789262][ T9318] veth1_vlan: entered promiscuous mode [ 202.838718][ T9318] veth0_macvtap: entered promiscuous mode [ 202.849406][ T9318] veth1_macvtap: entered promiscuous mode [ 202.868122][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.882388][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.902356][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.913781][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.924427][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.935229][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.945534][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.956377][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.968009][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.980594][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.999480][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.040330][ T6069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.059939][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.071366][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.082612][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.094068][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.104521][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.115147][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.126392][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.146593][ T9318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.156680][ T9318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.170136][ T9318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.180015][ T9318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.405620][ T6069] bridge_slave_1: left allmulticast mode [ 203.411655][ T6069] bridge_slave_1: left promiscuous mode [ 203.435130][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.486144][ T6069] bridge_slave_0: left allmulticast mode [ 203.515986][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'. [ 203.536231][ T6069] bridge_slave_0: left promiscuous mode [ 203.542003][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.862981][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.873270][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.890550][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.910395][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.918199][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.938884][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.128680][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.159225][ T9633] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.184509][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.209795][ T6069] bond0 (unregistering): Released all slaves [ 204.276236][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.286892][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.465885][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.484725][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.579229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.703970][ T9645] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.845680][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.859065][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.877732][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.894624][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.902343][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.910020][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.184383][ T6069] hsr_slave_0: left promiscuous mode [ 205.194958][ T6069] hsr_slave_1: left promiscuous mode [ 205.200855][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.208646][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.222500][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.236635][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.259605][ T6069] veth1_macvtap: left promiscuous mode [ 205.265541][ T6069] veth0_macvtap: left promiscuous mode [ 205.271147][ T6069] veth1_vlan: left promiscuous mode [ 205.276798][ T6069] veth0_vlan: left promiscuous mode [ 205.400022][ T9670] netlink: 56 bytes leftover after parsing attributes in process `syz.3.845'. [ 205.924257][ T6069] team0 (unregistering): Port device team_slave_1 removed [ 205.969873][ T6069] team0 (unregistering): Port device team_slave_0 removed [ 206.018212][ T5841] Bluetooth: hci0: command tx timeout [ 206.606378][ T9629] chnl_net:caif_netlink_parms(): no params data found [ 206.944493][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.951995][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.975330][ T5841] Bluetooth: hci4: command tx timeout [ 207.000283][ T9629] bridge_slave_0: entered allmulticast mode [ 207.016407][ T9629] bridge_slave_0: entered promiscuous mode [ 207.059403][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.066920][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.077144][ T9629] bridge_slave_1: entered allmulticast mode [ 207.084615][ T9629] bridge_slave_1: entered promiscuous mode [ 207.111038][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.123055][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.142107][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.152610][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.160607][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.168142][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.317208][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.337422][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.515889][ T6069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.546223][ T9707] veth1_to_hsr: entered promiscuous mode [ 207.588350][ T9629] team0: Port device team_slave_0 added [ 207.606385][ T9629] team0: Port device team_slave_1 added [ 207.639402][ T9649] chnl_net:caif_netlink_parms(): no params data found [ 207.760813][ T6069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.896397][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.903394][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.931275][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.956570][ T6069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.992165][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.001112][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.031969][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.094593][ T5841] Bluetooth: hci0: command tx timeout [ 208.135683][ T6069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.255008][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.269552][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.276950][ T9649] bridge_slave_0: entered allmulticast mode [ 208.284406][ T9649] bridge_slave_0: entered promiscuous mode [ 208.311039][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.334441][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.341815][ T9649] bridge_slave_1: entered allmulticast mode [ 208.350460][ T9649] bridge_slave_1: entered promiscuous mode [ 208.375799][ T9629] hsr_slave_0: entered promiscuous mode [ 208.392235][ T9629] hsr_slave_1: entered promiscuous mode [ 208.410908][ T9629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.426998][ T9629] Cannot create hsr debugfs directory [ 208.551548][ T9649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.693571][ T9649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.728297][ T9742] netlink: 32 bytes leftover after parsing attributes in process `syz.5.862'. [ 208.853067][ T6069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.886916][ T9649] team0: Port device team_slave_0 added [ 208.905110][ T9649] team0: Port device team_slave_1 added [ 209.007708][ T6069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.026028][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.033109][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.060881][ T5841] Bluetooth: hci4: command tx timeout [ 209.063829][ T9649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.215403][ T5841] Bluetooth: hci5: command tx timeout [ 209.246648][ T6069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.275853][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.282843][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.361692][ T9649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.502766][ T6069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.558417][ T9691] chnl_net:caif_netlink_parms(): no params data found [ 209.579679][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.866'. [ 209.582089][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.866'. [ 209.788887][ T9649] hsr_slave_0: entered promiscuous mode [ 209.805350][ T9649] hsr_slave_1: entered promiscuous mode [ 209.811508][ T9649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.822403][ T9649] Cannot create hsr debugfs directory [ 209.895579][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.113155][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.120534][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.134564][ T9691] bridge_slave_0: entered allmulticast mode [ 210.147378][ T9691] bridge_slave_0: entered promiscuous mode [ 210.174436][ T5841] Bluetooth: hci0: command tx timeout [ 210.216636][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.233874][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.248580][ T9691] bridge_slave_1: entered allmulticast mode [ 210.267484][ T9691] bridge_slave_1: entered promiscuous mode [ 210.326717][ T6069] bridge_slave_1: left allmulticast mode [ 210.332488][ T6069] bridge_slave_1: left promiscuous mode [ 210.361297][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.395472][ T6069] bridge_slave_0: left allmulticast mode [ 210.411352][ T6069] bridge_slave_0: left promiscuous mode [ 210.421557][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.444442][ T6069] bridge_slave_1: left allmulticast mode [ 210.450148][ T6069] bridge_slave_1: left promiscuous mode [ 210.474371][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.496501][ T6069] bridge_slave_0: left allmulticast mode [ 210.512375][ T6069] bridge_slave_0: left promiscuous mode [ 210.518290][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.133937][ T5841] Bluetooth: hci4: command tx timeout [ 211.140945][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.153018][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.163818][ T6069] bond0 (unregistering): Released all slaves [ 211.287939][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.294139][ T5841] Bluetooth: hci5: command tx timeout [ 211.305890][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.318470][ T6069] bond0 (unregistering): Released all slaves [ 211.402442][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.432575][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.745391][ T9691] team0: Port device team_slave_0 added [ 211.766117][ T9691] team0: Port device team_slave_1 added [ 211.848504][ T9629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.899118][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.910733][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.940579][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.968792][ T9629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.987455][ T9629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.062195][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.070090][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.098360][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.142929][ T9629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.254855][ T5841] Bluetooth: hci0: command tx timeout [ 212.302797][ T9795] delete_channel: no stack [ 212.369163][ T9691] hsr_slave_0: entered promiscuous mode [ 212.404796][ T9691] hsr_slave_1: entered promiscuous mode [ 212.411039][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.437294][ T9691] Cannot create hsr debugfs directory [ 212.512206][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 212.923906][ T6069] hsr_slave_0: left promiscuous mode [ 212.946725][ T6069] hsr_slave_1: left promiscuous mode [ 212.963259][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.981951][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.018979][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.032243][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.129444][ T6069] hsr_slave_0: left promiscuous mode [ 213.150174][ T6069] hsr_slave_1: left promiscuous mode [ 213.156139][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 213.164628][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.182897][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.194626][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.214160][ T5841] Bluetooth: hci4: command tx timeout [ 213.220404][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.304054][ T9826] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.329698][ T6069] veth1_macvtap: left promiscuous mode [ 213.335919][ T6069] veth0_macvtap: left promiscuous mode [ 213.341556][ T6069] veth1_vlan: left promiscuous mode [ 213.349749][ T6069] veth0_vlan: left promiscuous mode [ 213.357166][ T6069] veth1_macvtap: left promiscuous mode [ 213.367416][ T6069] veth0_macvtap: left promiscuous mode [ 213.374583][ T5841] Bluetooth: hci5: command tx timeout [ 213.383085][ T6069] veth1_vlan: left promiscuous mode [ 213.397810][ T6069] veth0_vlan: left promiscuous mode [ 214.362131][ T6069] team0 (unregistering): Port device team_slave_1 removed [ 214.405037][ T6069] team0 (unregistering): Port device team_slave_0 removed [ 215.220393][ T6069] team0 (unregistering): Port device team_slave_1 removed [ 215.265612][ T6069] team0 (unregistering): Port device team_slave_0 removed [ 215.460664][ T5841] Bluetooth: hci5: command tx timeout [ 215.859305][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.985336][ T9649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.024708][ T9649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.055291][ T9649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.091661][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.116672][ T9846] sctp: [Deprecated]: syz.5.891 (pid 9846) Use of int in max_burst socket option deprecated. [ 216.116672][ T9846] Use struct sctp_assoc_value instead [ 216.192312][ T9649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.206238][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.213347][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.232211][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.239458][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.635645][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.719215][ T9691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.741426][ T9691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.778358][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.789027][ T9691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.817726][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.824911][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.836229][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.843338][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.864158][ T9691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.895135][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.967439][ T9649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.096962][ T9629] veth0_vlan: entered promiscuous mode [ 217.168680][ T9629] veth1_vlan: entered promiscuous mode [ 217.277125][ T9629] veth0_macvtap: entered promiscuous mode [ 217.335635][ T9629] veth1_macvtap: entered promiscuous mode [ 217.398278][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.411588][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.423114][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.436236][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.446243][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.458242][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.471615][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.507226][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.528284][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.546578][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.546680][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 217.578308][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.620436][ T9629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.630317][ T9629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.644420][ T9629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.653178][ T9629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.709182][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.805990][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.964707][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.971879][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.061831][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.098490][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.176054][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.183185][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.248693][ T9649] veth0_vlan: entered promiscuous mode [ 218.286719][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.300456][ T9649] veth1_vlan: entered promiscuous mode [ 218.306681][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.598826][ T9649] veth0_macvtap: entered promiscuous mode [ 218.653078][ T9649] veth1_macvtap: entered promiscuous mode [ 218.669631][ T9890] No such timeout policy "syz0" [ 218.877002][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.921081][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.951071][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.976956][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.000811][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.031891][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.059670][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.074468][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.086943][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.122522][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.143369][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.173816][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.184916][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.196864][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.240321][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.262001][ T9649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.294290][ T9649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.323441][ T9649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.348553][ T9649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.463545][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.595694][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.693124][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.716921][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.766742][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.791608][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.810279][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.842494][ T9691] veth0_vlan: entered promiscuous mode [ 219.862792][ T9691] veth1_vlan: entered promiscuous mode [ 219.920854][ T9691] veth0_macvtap: entered promiscuous mode [ 219.941604][ T9691] veth1_macvtap: entered promiscuous mode [ 219.998314][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.009511][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.020297][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.031260][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.041827][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.052572][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.065220][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.076905][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.087369][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.098251][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.110299][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.129872][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.144725][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.161256][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.172178][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.183929][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.194862][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.206128][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.222404][ T9691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.231442][ T9691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.253681][ T9691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.262526][ T9691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.317313][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.506764][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.537927][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.642784][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.661229][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.672363][ T1154] bridge_slave_1: left allmulticast mode [ 220.689479][ T1154] bridge_slave_1: left promiscuous mode [ 220.704728][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.754027][ T1154] bridge_slave_0: left allmulticast mode [ 220.759731][ T1154] bridge_slave_0: left promiscuous mode [ 220.784112][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.020889][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.034978][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.043015][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.062747][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.070673][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.078393][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.279454][ T9932] netlink: 108 bytes leftover after parsing attributes in process `syz.3.905'. [ 221.476239][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.488713][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.505582][ T1154] bond0 (unregistering): Released all slaves [ 221.526403][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.536090][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.544322][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.559077][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.566928][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.574773][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.253948][ T1154] hsr_slave_0: left promiscuous mode [ 222.304933][ T1154] hsr_slave_1: left promiscuous mode [ 222.310807][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.319671][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.328641][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.338292][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.372872][ T1154] veth1_macvtap: left promiscuous mode [ 222.391431][ T1154] veth0_macvtap: left promiscuous mode [ 222.397263][ T1154] veth1_vlan: left promiscuous mode [ 222.402607][ T1154] veth0_vlan: left promiscuous mode [ 222.931506][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 222.979306][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 223.135071][ T5841] Bluetooth: hci0: command tx timeout [ 223.599549][ T9958] netlink: 160 bytes leftover after parsing attributes in process `syz.5.910'. [ 223.700337][ T5841] Bluetooth: hci4: command tx timeout [ 224.070562][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 224.086381][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.096889][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.102068][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 224.111901][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.126585][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.134771][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.142970][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.535726][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.595897][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.603257][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.612493][ T9926] bridge_slave_0: entered allmulticast mode [ 224.622232][ T9926] bridge_slave_0: entered promiscuous mode [ 224.643959][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.651121][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.691015][ T9934] bridge_slave_0: entered allmulticast mode [ 224.705042][ T9934] bridge_slave_0: entered promiscuous mode [ 224.735896][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.743057][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.790565][ T9934] bridge_slave_1: entered allmulticast mode [ 224.805426][ T9934] bridge_slave_1: entered promiscuous mode [ 224.849462][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.875420][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 224.891861][T10000] netlink: 'syz.3.920': attribute type 8 has an invalid length. [ 224.901250][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.901370][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 224.919777][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.937900][ T9926] bridge_slave_1: entered allmulticast mode [ 224.952544][ T9926] bridge_slave_1: entered promiscuous mode [ 224.971516][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 225.010852][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 225.060429][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.138475][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.214987][ T5841] Bluetooth: hci0: command tx timeout [ 225.233768][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 225.293406][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.323973][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.350253][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.362614][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.509292][ T9926] team0: Port device team_slave_0 added [ 225.574780][ T9926] team0: Port device team_slave_1 added [ 225.587406][ T9934] team0: Port device team_slave_0 added [ 225.667133][ T9934] team0: Port device team_slave_1 added [ 225.689317][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.699201][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.728281][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.741973][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.749332][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.774422][ T5841] Bluetooth: hci4: command tx timeout [ 225.783541][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.816120][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 225.881889][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.890320][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.925781][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.939815][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.947227][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.973396][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.008011][ T6080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.133483][ T6080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.148411][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.156036][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.163266][ T9973] bridge_slave_0: entered allmulticast mode [ 226.171382][ T9973] bridge_slave_0: entered promiscuous mode [ 226.178733][ T5841] Bluetooth: hci5: command tx timeout [ 226.192027][ T9926] hsr_slave_0: entered promiscuous mode [ 226.202610][ T9926] hsr_slave_1: entered promiscuous mode [ 226.209156][ T9926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.217196][ T9926] Cannot create hsr debugfs directory [ 226.247102][ T6080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.259668][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.273827][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.280984][ T9973] bridge_slave_1: entered allmulticast mode [ 226.288520][ T9973] bridge_slave_1: entered promiscuous mode [ 226.337948][ T6080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.379626][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 226.399331][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 226.406042][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.431779][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 226.445610][ T9934] hsr_slave_0: entered promiscuous mode [ 226.469336][ T9934] hsr_slave_1: entered promiscuous mode [ 226.477619][ T9934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.512980][ T9934] Cannot create hsr debugfs directory [ 226.536021][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.656758][T10029] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 226.689216][ T9973] team0: Port device team_slave_0 added [ 226.755619][ T9973] team0: Port device team_slave_1 added [ 227.008505][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.022433][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.056104][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.125224][ T6080] bridge_slave_1: left allmulticast mode [ 227.130905][ T6080] bridge_slave_1: left promiscuous mode [ 227.143952][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.152695][ T6080] bridge_slave_0: left allmulticast mode [ 227.159247][ T6080] bridge_slave_0: left promiscuous mode [ 227.165314][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.176314][ T6080] bridge_slave_1: left allmulticast mode [ 227.181980][ T6080] bridge_slave_1: left promiscuous mode [ 227.188713][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.198061][ T6080] bridge_slave_0: left allmulticast mode [ 227.205578][ T6080] bridge_slave_0: left promiscuous mode [ 227.211272][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.297508][ T5841] Bluetooth: hci0: command tx timeout [ 227.856799][ T5841] Bluetooth: hci4: command tx timeout [ 227.882948][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.917542][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.930675][ T6080] bond0 (unregistering): Released all slaves [ 228.096968][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.116253][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.127129][ T6080] bond0 (unregistering): Released all slaves [ 228.140073][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.147667][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.176394][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.257774][ T5841] Bluetooth: hci5: command tx timeout [ 228.551247][ T9973] hsr_slave_0: entered promiscuous mode [ 228.566447][ T9973] hsr_slave_1: entered promiscuous mode [ 228.572713][ T9973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.582612][ T9973] Cannot create hsr debugfs directory [ 228.602932][T10055] syzkaller1: entered promiscuous mode [ 228.609060][T10055] syzkaller1: entered allmulticast mode [ 228.636548][T10061] xt_ipvs: protocol family 7 not supported [ 229.015477][ T6080] hsr_slave_0: left promiscuous mode [ 229.030112][ T6080] hsr_slave_1: left promiscuous mode [ 229.041514][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.058675][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.095966][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.103418][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.128780][ T6080] hsr_slave_0: left promiscuous mode [ 229.136517][T10077] netlink: 'syz.5.938': attribute type 1 has an invalid length. [ 229.136625][ T6080] hsr_slave_1: left promiscuous mode [ 229.145383][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.5.938'. [ 229.162036][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.178921][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.187266][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.196457][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.252658][ T6080] veth1_macvtap: left promiscuous mode [ 229.267839][ T6080] veth0_macvtap: left promiscuous mode [ 229.273453][ T6080] veth1_vlan: left promiscuous mode [ 229.279079][ T6080] veth0_vlan: left promiscuous mode [ 229.291400][ T6080] veth1_macvtap: left promiscuous mode [ 229.297977][ T6080] veth0_macvtap: left promiscuous mode [ 229.303650][ T6080] veth1_vlan: left promiscuous mode [ 229.308963][ T6080] veth0_vlan: left promiscuous mode [ 229.374164][ T5841] Bluetooth: hci0: command tx timeout [ 229.876975][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 229.919492][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 229.937244][ T5841] Bluetooth: hci4: command tx timeout [ 230.174391][ T30] INFO: task udevd:5837 blocked for more than 143 seconds. [ 230.182095][ T30] Not tainted 6.13.0-syzkaller-04145-gdfffaccffc53 #0 [ 230.192157][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.201515][ T30] task:udevd state:D stack:21752 pid:5837 tgid:5837 ppid:5211 flags:0x00000002 [ 230.211803][ T30] Call Trace: [ 230.216054][ T30] [ 230.219018][ T30] __schedule+0x186c/0x4be0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.223538][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 230.230959][ T30] ? __pfx___schedule+0x10/0x10 [ 230.243820][ T30] ? __blk_flush_plug+0x449/0x500 [ 230.284027][ T30] ? __pfx_lock_release+0x10/0x10 [ 230.289119][ T30] ? __pfx___mod_timer+0x10/0x10 [ 230.309895][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.321677][ T30] ? schedule+0x90/0x320 [ 230.326277][ T30] schedule+0x14b/0x320 [ 230.330588][ T30] schedule_timeout+0x15a/0x290 [ 230.335719][ T5841] Bluetooth: hci5: command tx timeout [ 230.368213][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 230.380435][ T30] ? __pfx_process_timeout+0x10/0x10 [ 230.388893][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 230.400306][ T30] nbd_queue_rq+0x6dd/0xef0 [ 230.407804][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 230.412845][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 230.427309][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 230.432890][ T30] ? sbitmap_get+0x289/0x3f0 [ 230.442664][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 230.453086][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 230.464445][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 230.470813][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 230.478722][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 230.484235][ T30] ? __pfx___might_resched+0x10/0x10 [ 230.489584][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 230.495367][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 230.501150][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 230.507577][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 230.512954][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 230.518376][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 230.524640][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 230.530599][ T30] ? blk_mq_submit_bio+0xfb9/0x25a0 [ 230.535960][ T30] ? blk_mq_submit_bio+0x494/0x25a0 [ 230.541485][ T30] __blk_flush_plug+0x420/0x500 [ 230.546705][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.552728][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 230.558174][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.564805][ T30] __submit_bio+0x54a/0x6a0 [ 230.569347][ T30] ? __pfx___submit_bio+0x10/0x10 [ 230.574702][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 230.580362][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 230.586697][ T30] ? __pfx___might_resched+0x10/0x10 [ 230.592021][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 230.598368][ T30] block_read_full_folio+0x9b3/0xae0 [ 230.603768][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 230.609384][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 230.615520][ T30] filemap_read_folio+0x148/0x3b0 [ 230.620690][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 230.626803][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 230.632564][ T30] ? __filemap_get_folio+0x848/0x940 [ 230.637975][ T30] do_read_cache_folio+0x373/0x5b0 [ 230.643282][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 230.648851][ T30] read_part_sector+0xb3/0x260 [ 230.654258][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 230.659549][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 230.670046][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 230.675859][ T30] ? snprintf+0xda/0x120 [ 230.680512][ T30] ? alloc_pages_mpol_noprof+0x58e/0x780 [ 230.686934][ T30] ? vsnprintf+0x1148/0x1220 [ 230.691654][ T30] ? vsnprintf+0x18e/0x1220 [ 230.696321][ T30] ? __pfx_snprintf+0x10/0x10 [ 230.701256][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 230.706358][ T30] bdev_disk_changed+0x72c/0x13f0 [ 230.711622][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 230.717209][ T30] ? wait_on_inode+0xc1/0x230 [ 230.722095][ T30] blkdev_get_whole+0x2d2/0x450 [ 230.728104][ T30] bdev_open+0x2d4/0xc50 [ 230.732419][ T30] blkdev_open+0x38e/0x4e0 [ 230.737222][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 230.742196][ T30] do_dentry_open+0xbe1/0x1b70 [ 230.747525][ T30] vfs_open+0x3e/0x330 [ 230.751654][ T30] path_openat+0x2c84/0x3590 [ 230.756687][ T30] ? __pfx_path_openat+0x10/0x10 [ 230.761674][ T30] do_filp_open+0x27f/0x4e0 [ 230.766488][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 230.771570][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 230.776894][ T30] do_sys_openat2+0x13e/0x1d0 [ 230.781616][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 230.787302][ T30] __x64_sys_openat+0x247/0x2a0 [ 230.792189][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 230.797688][ T30] ? do_syscall_64+0x100/0x230 [ 230.802611][ T30] ? do_syscall_64+0xb6/0x230 [ 230.807412][ T30] do_syscall_64+0xf3/0x230 [ 230.812046][ T30] ? clear_bhb_loop+0x35/0x90 [ 230.816878][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.823563][ T30] RIP: 0033:0x7fa803f169a4 [ 230.828639][ T30] RSP: 002b:00007ffcbcf48c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.837539][ T30] RAX: ffffffffffffffda RBX: 000055bf3d716df0 RCX: 00007fa803f169a4 [ 230.845620][ T30] RDX: 00000000000a0800 RSI: 000055bf3d6f5390 RDI: 00000000ffffff9c [ 230.853878][ T30] RBP: 000055bf3d6f5390 R08: 0000000000000001 R09: 7fffffffffffffff [ 230.861943][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 230.870434][ T30] R13: 000055bf3d6ffce0 R14: 0000000000000001 R15: 000055bf3d6f4910 [ 230.878817][ T30] [ 230.882016][ T30] [ 230.882016][ T30] Showing all locks held in the system: [ 230.908071][ T30] 1 lock held by khungtaskd/30: [ 230.912985][ T30] #0: ffffffff8e939b20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 230.925657][ T30] 2 locks held by kworker/u8:5/226: [ 230.931441][ T30] 2 locks held by getty/5592: [ 230.936266][ T30] #0: ffff88803499a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 230.946615][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 230.956901][ T30] 3 locks held by udevd/5837: [ 230.961790][ T30] #0: ffff8881443914c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 230.971239][ T30] #1: ffff888141b39110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 230.981238][ T30] #2: ffff888025630178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 230.990541][ T30] 3 locks held by udevd/5839: [ 230.996111][ T30] #0: ffff8880250be4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 231.005675][ T30] #1: ffff8880242e5a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 231.015383][ T30] #2: ffff8880257151f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 231.024699][ T30] 3 locks held by udevd/5852: [ 231.029397][ T30] #0: ffff8880255834c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 231.039489][ T30] #1: ffff888141b39590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 231.049139][ T30] #2: ffff8880256a7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 231.059502][ T30] 3 locks held by udevd/5853: [ 231.064421][ T30] #0: ffff8880255874c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 231.073796][ T30] #1: ffff888141b39a90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 231.083453][ T30] #2: ffff8880256de178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 231.092446][ T30] 5 locks held by kworker/u8:19/6080: [ 231.098111][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 231.109288][ T30] #1: ffffc9000556fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 231.120102][ T30] #2: ffffffff8fcb7b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 231.129629][ T30] #3: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0 [ 231.140496][ T30] #4: ffffffff8e93eff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 231.151938][ T30] 2 locks held by kworker/u8:21/6083: [ 231.157690][ T30] 3 locks held by kworker/u8:33/6099: [ 231.163095][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 231.175496][ T30] #1: ffffc9000560fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 231.186930][ T30] #2: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 231.196277][ T30] 1 lock held by syz.0.666/8767: [ 231.201255][ T30] #0: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75a/0xf30 [ 231.210849][ T30] 7 locks held by syz-executor/9926: [ 231.216779][ T30] #0: ffff88802fa34420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 231.226067][ T30] #1: ffff88805a8fa088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 231.236104][ T30] #2: ffff8881453d8698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 231.246889][ T30] #3: ffffffff8f570108 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 231.257479][ T30] #4: ffff8880644620e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 231.268389][ T30] #5: ffff888030565250 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 231.278842][ T30] #6: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa4/0x620 [ 231.288147][ T30] 4 locks held by syz-executor/9934: [ 231.293450][ T30] #0: ffff88802fa34420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 231.303242][ T30] #1: ffff88801220fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 231.316188][ T30] #2: ffff8881453d8698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 231.327235][ T30] #3: ffffffff8f570108 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 231.338616][ T30] 2 locks held by syz-executor/9973: [ 231.344731][ T30] #0: ffffffff8f46d440 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 231.354551][ T30] #1: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 231.363769][ T30] 1 lock held by syz.3.937/10072: [ 231.368836][ T30] #0: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 231.378381][ T30] 3 locks held by syz.5.938/10077: [ 231.383511][ T30] #0: ffffffff8fd27d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 231.391920][ T30] #1: ffffffff8fd27be8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 231.401148][ T30] #2: ffffffff8fcc4088 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3073/0x4240 [ 231.423048][ T30] [ 231.425652][ T30] ============================================= [ 231.425652][ T30] [ 231.447218][ T30] NMI backtrace for cpu 1 [ 231.447238][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04145-gdfffaccffc53 #0 [ 231.447262][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.447274][ T30] Call Trace: [ 231.447282][ T30] [ 231.447292][ T30] dump_stack_lvl+0x241/0x360 [ 231.447330][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.447361][ T30] ? __pfx__printk+0x10/0x10 [ 231.447403][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 231.447444][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 231.447475][ T30] ? _printk+0xd5/0x120 [ 231.447501][ T30] ? __pfx__printk+0x10/0x10 [ 231.447529][ T30] ? __wake_up_klogd+0xcc/0x110 [ 231.447549][ T30] ? __pfx__printk+0x10/0x10 [ 231.447578][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 231.447602][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 231.447635][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 231.447673][ T30] watchdog+0xff6/0x1040 [ 231.447697][ T30] ? watchdog+0x1ea/0x1040 [ 231.447726][ T30] ? __pfx_watchdog+0x10/0x10 [ 231.447748][ T30] kthread+0x7a9/0x920 [ 231.447771][ T30] ? __pfx_kthread+0x10/0x10 [ 231.447797][ T30] ? __pfx_watchdog+0x10/0x10 [ 231.447820][ T30] ? __pfx_kthread+0x10/0x10 [ 231.447841][ T30] ? __pfx_kthread+0x10/0x10 [ 231.447870][ T30] ? __pfx_kthread+0x10/0x10 [ 231.447893][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.447913][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 231.447936][ T30] ? __pfx_kthread+0x10/0x10 [ 231.447962][ T30] ret_from_fork+0x4b/0x80 [ 231.447983][ T30] ? __pfx_kthread+0x10/0x10 [ 231.448007][ T30] ret_from_fork_asm+0x1a/0x30 [ 231.448043][ T30] [ 231.448051][ T30] Sending NMI from CPU 1 to CPUs 0: [ 231.620307][ C0] NMI backtrace for cpu 0 [ 231.620321][ C0] CPU: 0 UID: 0 PID: 6100 Comm: kworker/u8:34 Not tainted 6.13.0-syzkaller-04145-gdfffaccffc53 #0 [ 231.620339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.620349][ C0] Workqueue: bat_events batadv_nc_worker [ 231.620382][ C0] RIP: 0010:batadv_nc_worker+0xa7/0x610 [ 231.620405][ C0] Code: 31 ff 89 ee e8 6a d7 00 f6 85 ed 0f 84 58 02 00 00 45 31 ed 4c 89 f0 48 c1 e8 03 48 89 44 24 18 48 8b 44 24 18 42 80 3c 38 00 <74> 08 4c 89 f7 e8 ff 58 67 f6 4a 8d 2c ed 00 00 00 00 4c 89 f3 49 [ 231.620419][ C0] RSP: 0018:ffffc9000561fab8 EFLAGS: 00000246 [ 231.620431][ C0] RAX: 1ffff11005f516f0 RBX: ffffffff8b9e89fb RCX: ffff88802a67da00 [ 231.620443][ C0] RDX: 0000000000000000 RSI: ffffffff8c0a9f20 RDI: ffffffff8c600920 [ 231.620454][ C0] RBP: 0000000000000000 R08: ffffffff901b8877 R09: 1ffffffff203710e [ 231.620464][ C0] R10: dffffc0000000000 R11: fffffbfff203710f R12: ffff88805d81cd80 [ 231.620476][ C0] R13: 0000000000000220 R14: ffff88802fa8b780 R15: dffffc0000000000 [ 231.620487][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 231.620500][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.620510][ C0] CR2: 000055ef31e23088 CR3: 000000000e738000 CR4: 00000000003526f0 [ 231.620524][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.620533][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.620542][ C0] Call Trace: [ 231.620549][ C0] [ 231.620555][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 231.620580][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 231.620599][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 231.620624][ C0] ? nmi_handle+0x2a/0x5a0 [ 231.620652][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 231.620667][ C0] ? nmi_handle+0x14f/0x5a0 [ 231.620686][ C0] ? nmi_handle+0x2a/0x5a0 [ 231.620706][ C0] ? batadv_nc_worker+0xa7/0x610 [ 231.620727][ C0] ? default_do_nmi+0x63/0x160 [ 231.620769][ C0] ? exc_nmi+0x123/0x1f0 [ 231.620793][ C0] ? end_repeat_nmi+0xf/0x53 [ 231.620817][ C0] ? batadv_nc_worker+0xcb/0x610 [ 231.620845][ C0] ? batadv_nc_worker+0xa7/0x610 [ 231.620868][ C0] ? batadv_nc_worker+0xa7/0x610 [ 231.620893][ C0] ? batadv_nc_worker+0xa7/0x610 [ 231.620916][ C0] [ 231.620921][ C0] [ 231.620927][ C0] ? batadv_nc_worker+0xcb/0x610 [ 231.620951][ C0] ? process_scheduled_works+0x976/0x1840 [ 231.620978][ C0] process_scheduled_works+0xa66/0x1840 [ 231.621019][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.621050][ C0] ? assign_work+0x364/0x3d0 [ 231.621077][ C0] worker_thread+0x870/0xd30 [ 231.621097][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.621117][ C0] ? __kthread_parkme+0x169/0x1d0 [ 231.621136][ C0] ? __pfx_worker_thread+0x10/0x10 [ 231.621151][ C0] kthread+0x7a9/0x920 [ 231.621169][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621188][ C0] ? __pfx_worker_thread+0x10/0x10 [ 231.621204][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621221][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621241][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621258][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.621274][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 231.621291][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621310][ C0] ret_from_fork+0x4b/0x80 [ 231.621327][ C0] ? __pfx_kthread+0x10/0x10 [ 231.621345][ C0] ret_from_fork_asm+0x1a/0x30 [ 231.621376][ C0] [ 231.622450][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 231.961154][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04145-gdfffaccffc53 #0 [ 231.971309][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.981363][ T30] Call Trace: [ 231.984645][ T30] [ 231.987672][ T30] dump_stack_lvl+0x241/0x360 [ 231.992365][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.997572][ T30] ? __pfx__printk+0x10/0x10 [ 232.002184][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.008173][ T30] ? vscnprintf+0x5d/0x90 [ 232.012513][ T30] panic+0x349/0x880 [ 232.016408][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 232.022571][ T30] ? __pfx_panic+0x10/0x10 [ 232.026991][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 232.032379][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 232.038540][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 232.044734][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 232.050895][ T30] watchdog+0x1035/0x1040 [ 232.055224][ T30] ? watchdog+0x1ea/0x1040 [ 232.059649][ T30] ? __pfx_watchdog+0x10/0x10 [ 232.064338][ T30] kthread+0x7a9/0x920 [ 232.068411][ T30] ? __pfx_kthread+0x10/0x10 [ 232.073008][ T30] ? __pfx_watchdog+0x10/0x10 [ 232.077687][ T30] ? __pfx_kthread+0x10/0x10 [ 232.082281][ T30] ? __pfx_kthread+0x10/0x10 [ 232.086872][ T30] ? __pfx_kthread+0x10/0x10 [ 232.091459][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.096658][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 232.101853][ T30] ? __pfx_kthread+0x10/0x10 [ 232.106460][ T30] ret_from_fork+0x4b/0x80 [ 232.110887][ T30] ? __pfx_kthread+0x10/0x10 [ 232.115474][ T30] ret_from_fork_asm+0x1a/0x30 [ 232.120243][ T30] [ 232.123619][ T30] Kernel Offset: disabled [ 232.127955][ T30] Rebooting in 86400 seconds..