last executing test programs: 1m43.533061109s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 1m28.488339988s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m26.524976573s ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 1m23.927090215s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 1m11.089969611s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m10.126389705s ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 1m9.28966492s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 52.486905701s ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 51.50547324s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 49.878215042s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 36.279533136s ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 35.28675335s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 33.733491463s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 19.157331076s ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 17.944502616s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 15.479112121s ago: executing program 1 (id=216): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d27800054c49e982063c09000000e937cad9668d0600afce1579a5010000000b6fcca10fddb1a0b39d0820ba48c72312d705a07bfcc46e69fc9f5e7548f80a0e31ddae2b82084e1cda97006677a6e724147182726ff55fb5bb73a18a909f4cd6119c1aabae5bf366f5f17ebbce2f7cd52f55e9362735240e3781a42b379f5bea3a82"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x290, 0x290, 0x290, 0x290, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0xffffffc5) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @empty, 0x9d}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{r4, 0x7f, 0x7fffffff, 0x4, 0xa, 0xca, 0x7, 0x5, 0xb, 0x10000, 0x5, 0x7, 0x5eb, 0x70000000000000, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 3.546708185s ago: executing program 3 (id=1663): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100000) accept(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2c00000000002020207b0af8ff00000000bda100000000000077010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xd, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100c03050000000000001ebd77665e69", @ANYRES32=0x0, @ANYBLOB="1000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaabb0000100005800a0004002ae0d5b3974e0000"], 0x50}}, 0x10) 3.345980994s ago: executing program 3 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 3.202649518s ago: executing program 3 (id=1666): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005180)=ANY=[@ANYBLOB="842300002d00090026bd70000000000004000000702318"], 0x2384}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x40810) r6 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="b59c57976ea9d39631c22b81c85eaa866e4b535e1cd2d520a5c18e4ea21c7bf1591edb105e0515aab516a899ce6e8d8b443d184ee948354359c26c3af47a206910c2655c9dbf6e6cec4d88", 0x4b}, {&(0x7f00000000c0)}, {&(0x7f0000000100), 0xfff0}], 0x4, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) ppoll(&(0x7f000000c040)=[{r8, 0x2391}], 0x1, 0x0, &(0x7f000000c240), 0x8) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="63a74d245dfb585ac68cd3eea399e3ec98a149a647d1317aa680154eb40665fa7e6ec080735414f8c40cc8e848ccff80d60eba7f3c8f770a998f97da93d249895cc8540cd2496d4bbef92c6a30e10a4c9f93e6c3a5cb32f5d735b2f02ded69e6df1c0c085c1e298e727ab601c5a10fe5162a99e24c6c10565821aba463b79ed8dc7784d1db7f67e8e3ae3f3d2042b65f113254fbb74890813a32", 0x9a}, {&(0x7f00000001c0)="a09220d3fa4bd4314740b4986a5e9ae1858516b349d992db77af3ac3b2679f943d302ba7380e0a6b7983a75090aa5abf284700d6c6cad47f02b11344400ecee44d428b66e4835151ef2945f10e955aba8a9fb0d31f8858418d23216c9ca593ef682376843faeb017db236c47cfb10dcd96aa9e75c16ba06044347f15cb69257767365f0b62f51150873d766b963f8a73f6870395eec978fc80f1e2c7b648868e8eaf3e0730999e6bb589815add2fba0386defed80a901387b1b45d30", 0xbc}, {&(0x7f0000000280)="51359df50512f3682483633ec6a4b729dabfadc54558e6", 0x17}], 0x3, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x48}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16=r10, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.026986587s ago: executing program 4 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4088c3, 0x0) 2.909782197s ago: executing program 4 (id=1668): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f00000004c0), 0x0, 0x4, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @ldst={0x3, 0x1, 0x6, 0xa, 0x2, 0x8, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x595f, 0x2c, &(0x7f0000000100)=""/44, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x8001, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r0, r0, r0], &(0x7f0000000580)=[{0x5, 0xffffb3fa, 0x0, 0x9}, {0x5, 0x2, 0xc}, {0x4, 0x5, 0x5, 0xa}, {0x3, 0x2, 0xb, 0x4}], 0x10, 0x8001}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=r5, @ANYBLOB="0000000000200000b706000014000000b703000000060000850000002f000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1ec}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x6, 0x9, 0x18016, r5, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x9, @value=r5, @void, @value=r5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x94, 0x30, 0x300, 0x70bd29, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x4, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x200004, 0x3, 0x0, 0x400}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) 2.895431298s ago: executing program 3 (id=1669): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7a62affbfad3fad668c7e9854c228bdb"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.773383525s ago: executing program 3 (id=1670): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eccc8b1c5a93cd0ead2fd6305b489b96613dba8a5a17223ca3b3c9a18f4f1e85f7947fce5a91a44ab32878a6574874d416b161e15a15c10cfad12e52671ae25499eba86f3c47e791835d906c3adc2ddaf6c52582a19ab1987d4a598bf7fa21a5f40ec784fab345664ea35894958b19a9879bf7908d6e490700dc82476460b93bdd8c6d9a39b502951aa44b3ee39fdc5038246bb4ace6a42ef15b83ac2db6eccfac6200e82e04b5", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x14, 0x0, 0x1, [@nested={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0xe3e9}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x100}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.655726147s ago: executing program 4 (id=1671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x6, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f0061"], 0x0, 0x52}, 0x28) socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x100, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x1}, {0x8, 0x10}}}, 0x24}}, 0x0) 2.557172556s ago: executing program 3 (id=1672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc79, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94) unshare(0x68040200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000104000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6]) 2.54172518s ago: executing program 4 (id=1673): r0 = socket(0x10, 0x2, 0x6) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd2, &(0x7f0000000000)=""/210, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.409498782s ago: executing program 4 (id=1674): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 1.309442826s ago: executing program 4 (id=1675): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@dellink={0x320, 0x11, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40040, 0x100}, [@IFLA_PHYS_PORT_ID={0xd, 0x22, "79ab427d4cd52764b6"}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_VF_PORTS={0x290, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de9beae93779bbee85f7697680ef16cc"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5d5752b048582a1632109b3b22f40fab"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "08b96e7e77a0c9bab660388726bd62b0"}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, 'team_slave_1\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "82bfeadbd83d8f5e1f5b069390ff7354"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "35d86757e51fd56c23e833eb1445fcfd"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0100"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "23834c2efe7691e521ccc0fb1af24182"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3353ebf9063aa7805983ffc97a6d38f7"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xea}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4e2fac7c78d101d1627fe31c131f4298"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5fb8e8c335a7486df279258cbe9ebde6"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4f52b312d04dc2e7b5cee76c8f637a6f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c565e8fd599f80c405165b22b5c03411"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b809fe925bdfd5df7cb1e358b636eaf2"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "53c0d6cbd246f95c8a2b785183f9853e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "122a602fd879cc1cd683e2143589fdcc"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x10}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e18148b98477df10bdab5562e89fde7e"}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "26bc4297d0e20eb4a6346edadd97e924"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "085a2297caf410a484d22bd45653afd4"}, @IFLA_PORT_PROFILE={0x8, 0x2, '}%,\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3b93f74c3442b7c73015b25efd83da90"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "23a8e6fb7bc23e4e6c9c00afbdc2b29e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x46}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c68d2af987a2f1789986198b0c979458"}]}]}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7c496}]}, 0x320}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) unshare(0x22020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="c3aa00fe0000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="09000000000000000200fffee000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007cc4f2bc3d1f37acf5ee52f954f1fdcc14848467cde1f5e9a7ac60c586e1c6543adf86efdd07c29b463ba0ac87bde127f9b1ba88c9017831411a96f9d2675d49894f6805d5199d9a094194825ef129f9f4a2871c5598aef1d96f0cac32c2c8714d1af9c5bb"], 0x190) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x7, 0x0, &(0x7f0000000780)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x40}}, 0x24040084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r10 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, 0x0, 0x0) listen(r10, 0x0) 807.098755ms ago: executing program 2 (id=1367): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @local, 0x5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x1, 0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232dcdeb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 0s ago: executing program 0 (id=589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): Cannot create hsr debugfs directory [ 330.276415][ T9846] hsr_slave_0: left promiscuous mode [ 330.282398][ T9846] hsr_slave_1: left promiscuous mode [ 330.288334][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.296803][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.307085][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.314888][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.332129][ T9846] hsr_slave_0: left promiscuous mode [ 330.338195][ T9846] hsr_slave_1: left promiscuous mode [ 330.349729][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.357140][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.365610][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.373080][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.417272][ T9846] veth1_macvtap: left promiscuous mode [ 330.423290][ T9846] veth0_macvtap: left promiscuous mode [ 330.428881][ T9846] veth1_vlan: left promiscuous mode [ 330.434475][ T9846] veth0_vlan: left promiscuous mode [ 330.442131][ T9846] veth1_macvtap: left promiscuous mode [ 330.447653][ T9846] veth0_macvtap: left promiscuous mode [ 330.453460][ T9846] veth1_vlan: left promiscuous mode [ 330.458844][ T9846] veth0_vlan: left promiscuous mode [ 331.039730][ T51] Bluetooth: hci2: command tx timeout [ 331.083614][ T9846] team0 (unregistering): Port device team_slave_1 removed [ 331.126487][ T9846] team0 (unregistering): Port device team_slave_0 removed [ 331.282758][ T51] Bluetooth: hci3: command tx timeout [ 331.816970][ T9846] team0 (unregistering): Port device team_slave_1 removed [ 331.853808][ T9846] team0 (unregistering): Port device team_slave_0 removed [ 332.305020][T12175] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 332.452015][T12175] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 332.556114][T12175] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 332.614043][T12179] netem: change failed [ 332.713742][T12175] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 332.801644][T12060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.857187][T12060] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.901417][T12185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1440'. [ 332.956147][ T2940] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 332.971225][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.978562][ T9848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.001234][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.008500][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.126293][ T2940] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.188970][ T2940] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.230118][ T2940] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.235135][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 333.356720][T12193] netlink: 'syz.4.1442': attribute type 3 has an invalid length. [ 333.512586][T12080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.577813][T12080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.606768][T12080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.643652][T12080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.657894][T12201] sock: sock_set_timeout: `syz.3.1444' (pid 12201) tries to set negative timeout [ 333.807446][T12060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.019746][T12214] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 334.048796][T12216] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 334.067450][T12060] veth0_vlan: entered promiscuous mode [ 334.091959][T12078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.131364][T12078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.153590][T12060] veth1_vlan: entered promiscuous mode [ 334.171148][T12078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.188928][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.209447][T12078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.248014][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.268400][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.275532][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.294606][T12060] veth0_macvtap: entered promiscuous mode [ 334.305919][T12060] veth1_macvtap: entered promiscuous mode [ 334.326909][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.334073][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.397723][T12060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.433452][T12060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.484057][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.512951][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.532613][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.553499][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.684319][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.711039][ T9848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.726411][ T9848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.826212][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.842132][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.855181][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.914912][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.922154][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.990925][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.007393][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.014580][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.058014][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1450'. [ 335.086837][T12233] wg2: entered promiscuous mode [ 335.205417][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 335.221342][T12240] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 335.311202][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 335.340496][T12240] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 335.363434][T12080] veth0_vlan: entered promiscuous mode [ 335.407441][T12080] veth1_vlan: entered promiscuous mode [ 335.634525][ T3444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.757134][T12080] veth0_macvtap: entered promiscuous mode [ 335.863338][ T3444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.914487][T12080] veth1_macvtap: entered promiscuous mode [ 336.037261][ T3444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.093550][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.128729][ T3444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.150803][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.169099][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.190002][ T9849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.200034][ T9846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.228177][ T9846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.248286][ T9846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.331633][T12078] veth0_vlan: entered promiscuous mode [ 336.396939][T12078] veth1_vlan: entered promiscuous mode [ 336.412719][ T9846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.427018][ T9846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.465442][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.466148][ T3444] bridge_slave_1: left allmulticast mode [ 336.477243][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.480275][ T3444] bridge_slave_1: left promiscuous mode [ 336.493061][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.503270][ T3444] bridge_slave_0: left allmulticast mode [ 336.509069][ T3444] bridge_slave_0: left promiscuous mode [ 336.516702][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.834899][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.846776][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.857785][ T3444] bond0 (unregistering): Released all slaves [ 336.974609][T12078] veth0_macvtap: entered promiscuous mode [ 337.026793][T12078] veth1_macvtap: entered promiscuous mode [ 337.127875][T12078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.145586][T12078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.180691][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.194470][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.227852][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.257481][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.577128][ T3444] hsr_slave_0: left promiscuous mode [ 337.602847][ T3444] hsr_slave_1: left promiscuous mode [ 337.608938][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.651289][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.674628][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.683500][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.742466][ T3444] veth1_macvtap: left promiscuous mode [ 337.748091][ T3444] veth0_macvtap: left promiscuous mode [ 337.770217][ T3444] veth1_vlan: left promiscuous mode [ 337.775709][ T3444] veth0_vlan: left promiscuous mode [ 338.027363][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.043739][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.047585][T12269] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1460'. [ 338.068301][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.083694][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.092602][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.438709][ T5166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.455399][ T5166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.463729][ T5166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.478515][ T5166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.491450][ T5166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.643161][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 338.682452][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 339.059000][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.079659][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.193024][ T9846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.241070][ T9846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.260490][T12267] lo speed is unknown, defaulting to 1000 [ 339.515672][T12283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 339.591136][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'. [ 339.605533][T12285] sctp: [Deprecated]: syz.4.1465 (pid 12285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.605533][T12285] Use struct sctp_sack_info instead [ 339.637873][T12285] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1465'. [ 339.663821][T12274] lo speed is unknown, defaulting to 1000 [ 339.833839][ T3444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.002344][ T3444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.162944][ T5166] Bluetooth: hci0: command tx timeout [ 340.182154][ T3444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.242844][T12297] tipc: Started in network mode [ 340.247841][T12297] tipc: Node identity dec4c96f4011, cluster identity 229 [ 340.255478][T12297] tipc: Enabled bearer , priority 0 [ 340.304714][T12298] syzkaller0: entered allmulticast mode [ 340.365238][T12298] tipc: Resetting bearer [ 340.373700][T12297] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1469'. [ 340.383479][T12297] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1469'. [ 340.393061][T12297] netlink: 'syz.3.1469': attribute type 6 has an invalid length. [ 340.403235][T12297] netlink: 'syz.3.1469': attribute type 5 has an invalid length. [ 340.411756][T12297] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1469'. [ 340.460166][ T3444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.559484][ T5166] Bluetooth: hci3: command tx timeout [ 340.716327][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 340.833354][T12306] veth0: entered promiscuous mode [ 340.935356][T12267] chnl_net:caif_netlink_parms(): no params data found [ 340.961848][T12296] tipc: Disabling bearer [ 341.323465][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.349455][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.357268][T12267] bridge_slave_0: entered allmulticast mode [ 341.376052][T12267] bridge_slave_0: entered promiscuous mode [ 341.384103][ T3444] bridge_slave_1: left allmulticast mode [ 341.392483][ T3444] bridge_slave_1: left promiscuous mode [ 341.398187][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.410021][ T3444] bridge_slave_0: left allmulticast mode [ 341.415667][ T3444] bridge_slave_0: left promiscuous mode [ 341.421964][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.724011][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.735387][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.745973][ T3444] bond0 (unregistering): Released all slaves [ 341.763764][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.771798][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.778993][T12267] bridge_slave_1: entered allmulticast mode [ 341.787938][T12267] bridge_slave_1: entered promiscuous mode [ 341.874549][T12274] chnl_net:caif_netlink_parms(): no params data found [ 341.888245][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.904649][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.957886][T12267] team0: Port device team_slave_0 added [ 341.978139][T12267] team0: Port device team_slave_1 added [ 342.093721][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.104744][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.160512][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.239732][ T5166] Bluetooth: hci0: command tx timeout [ 342.270005][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.286975][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.314238][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.639408][ T5166] Bluetooth: hci3: command tx timeout [ 342.763017][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.787870][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.806224][T12274] bridge_slave_0: entered allmulticast mode [ 342.812864][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.823744][T12274] bridge_slave_0: entered promiscuous mode [ 342.829725][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.837950][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.850844][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.860170][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.931985][ T3444] hsr_slave_0: left promiscuous mode [ 342.938150][ T3444] hsr_slave_1: left promiscuous mode [ 342.944238][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.951851][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.970152][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.977560][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.024345][ T3444] veth1_macvtap: left promiscuous mode [ 343.030013][ T3444] veth0_macvtap: left promiscuous mode [ 343.035704][ T3444] veth1_vlan: left promiscuous mode [ 343.043986][ T3444] veth0_vlan: left promiscuous mode [ 343.077709][T12358] netlink: 'syz.3.1476': attribute type 3 has an invalid length. [ 343.088656][T12358] netlink: 'syz.3.1476': attribute type 1 has an invalid length. [ 343.112024][T12358] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1476'. [ 343.472714][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 343.516786][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 343.898274][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.906024][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.915592][T12274] bridge_slave_1: entered allmulticast mode [ 343.923772][T12274] bridge_slave_1: entered promiscuous mode [ 343.983036][T12267] hsr_slave_0: entered promiscuous mode [ 343.990176][T12267] hsr_slave_1: entered promiscuous mode [ 343.996260][T12267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.004441][T12267] Cannot create hsr debugfs directory [ 344.067852][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 344.095800][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.127819][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.221864][T12350] lo speed is unknown, defaulting to 1000 [ 344.297284][T12274] team0: Port device team_slave_0 added [ 344.320218][ T51] Bluetooth: hci0: command tx timeout [ 344.470276][T12274] team0: Port device team_slave_1 added [ 344.594839][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.611246][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.657004][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.697516][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.715923][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.748235][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.749328][ T51] Bluetooth: hci3: command tx timeout [ 344.792363][T12379] ipvlan0: entered promiscuous mode [ 344.798150][T12379] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 344.807476][T12379] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.959425][ T51] Bluetooth: hci2: command tx timeout [ 345.239848][ T3444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.297091][T12274] hsr_slave_0: entered promiscuous mode [ 345.305704][T12274] hsr_slave_1: entered promiscuous mode [ 345.321266][T12274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.334071][T12274] Cannot create hsr debugfs directory [ 345.408207][ T3444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.527976][ T3444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.530816][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 345.548053][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 345.587910][T12408] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1489'. [ 345.634073][T12406] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 345.693370][ T3444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.038433][T12350] chnl_net:caif_netlink_parms(): no params data found [ 346.303255][ T3444] bridge_slave_1: left allmulticast mode [ 346.309820][ T3444] bridge_slave_1: left promiscuous mode [ 346.315669][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.331260][ T3444] bridge_slave_0: left allmulticast mode [ 346.343623][ T3444] bridge_slave_0: left promiscuous mode [ 346.355045][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.355374][T12429] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 346.409780][ T51] Bluetooth: hci0: command tx timeout [ 346.786075][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.798433][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.807389][ T51] Bluetooth: hci3: command tx timeout [ 346.815725][ T3444] bond0 (unregistering): Released all slaves [ 346.882128][T12430] bond3: (slave gretap2): making interface the new active one [ 346.891805][T12430] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 346.917958][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 347.012363][T12267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.042498][ T51] Bluetooth: hci2: command tx timeout [ 347.108013][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.123772][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.133548][T12350] bridge_slave_0: entered allmulticast mode [ 347.141557][T12350] bridge_slave_0: entered promiscuous mode [ 347.150897][T12267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.173233][T12267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.188646][T12448] Bluetooth: MGMT ver 1.23 [ 347.204931][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.215046][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.223298][T12350] bridge_slave_1: entered allmulticast mode [ 347.231923][T12350] bridge_slave_1: entered promiscuous mode [ 347.255242][T12454] netlink: 'syz.4.1499': attribute type 10 has an invalid length. [ 347.262365][T12267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.263768][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1499'. [ 347.351804][T12454] team0: entered promiscuous mode [ 347.362841][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.373077][T12454] team0: entered allmulticast mode [ 347.378236][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.387428][T12454] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 347.408541][T12453] netlink: 'syz.4.1499': attribute type 10 has an invalid length. [ 347.419442][T12453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1499'. [ 347.436764][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.492129][T12453] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 347.562666][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.815870][T12350] team0: Port device team_slave_0 added [ 347.830066][T12470] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 347.853309][ T3444] hsr_slave_0: left promiscuous mode [ 347.857338][T12472] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 347.867584][ T3444] hsr_slave_1: left promiscuous mode [ 347.877091][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.885094][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.896469][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.904143][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.927389][ T3444] veth1_macvtap: left promiscuous mode [ 347.933137][ T3444] veth0_macvtap: left promiscuous mode [ 347.938797][ T3444] veth1_vlan: left promiscuous mode [ 347.944184][ T3444] veth0_vlan: left promiscuous mode [ 348.429403][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 348.466922][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 348.853674][T12350] team0: Port device team_slave_1 added [ 348.889183][T12472] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 348.898608][T12470] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 348.949143][T12477] gretap1: entered promiscuous mode [ 348.998296][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.005296][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.034975][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.048152][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.069500][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.103974][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.131250][ T51] Bluetooth: hci2: command tx timeout [ 349.150003][T12470] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 349.176781][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 349.198440][T12483] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 349.206510][T12483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.284843][T12470] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 349.323686][T12350] hsr_slave_0: entered promiscuous mode [ 349.345150][T12350] hsr_slave_1: entered promiscuous mode [ 349.361219][T12350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.368886][T12350] Cannot create hsr debugfs directory [ 349.514015][ T2940] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 349.590145][ T64] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 349.638270][ T64] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 349.695653][T12274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.713503][ T64] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 349.734543][T12274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.749943][T12274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.775962][T12496] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 349.792359][T12274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.807318][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.840499][T12496] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 349.884908][T12496] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 349.940213][T12496] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 349.950098][T12496] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 349.985561][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.986382][T12503] netlink: 'syz.3.1510': attribute type 23 has an invalid length. [ 350.025496][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.032799][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.057260][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.064460][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.304898][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.388199][T12274] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.435524][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.442794][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.521483][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.528647][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.588821][T12350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.655655][T12350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.714774][T12350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.794843][T12350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.005002][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.189148][T12267] veth0_vlan: entered promiscuous mode [ 351.200662][ T51] Bluetooth: hci2: command tx timeout [ 351.221244][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.236824][T12267] veth1_vlan: entered promiscuous mode [ 351.342773][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.433953][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.441179][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.497517][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.504751][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.531069][T12267] veth0_macvtap: entered promiscuous mode [ 351.571312][T12267] veth1_macvtap: entered promiscuous mode [ 351.657689][T12274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.683908][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.724751][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.786091][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.831840][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.892182][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.945102][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.016062][T12274] veth0_vlan: entered promiscuous mode [ 352.096140][T12274] veth1_vlan: entered promiscuous mode [ 352.124981][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.146696][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.244406][T12274] veth0_macvtap: entered promiscuous mode [ 352.263553][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.287797][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.301645][T12274] veth1_macvtap: entered promiscuous mode [ 352.376710][T12274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.435790][T12274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.464706][ T9848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.508597][ T9848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.533953][ T9848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.613288][ T9848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.686603][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.913171][T12350] veth0_vlan: entered promiscuous mode [ 352.928865][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.000789][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.073275][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.158613][T12350] veth1_vlan: entered promiscuous mode [ 353.180190][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.188168][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.236322][T12350] veth0_macvtap: entered promiscuous mode [ 353.267877][T12350] veth1_macvtap: entered promiscuous mode [ 353.334299][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.381028][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.398377][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.416001][ T1009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.426957][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.441848][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.453632][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.542666][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.560873][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.631922][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.661728][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.672771][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.720515][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.915657][ T64] bridge_slave_1: left allmulticast mode [ 353.924461][ T64] bridge_slave_1: left promiscuous mode [ 353.931311][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.942261][ T64] bridge_slave_0: left allmulticast mode [ 353.948673][ T64] bridge_slave_0: left promiscuous mode [ 353.955199][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.204128][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.213141][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.224456][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.261577][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.284943][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.346602][T12537] validate_nla: 60 callbacks suppressed [ 354.346621][T12537] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 354.557035][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.582576][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.594306][T12545] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 354.609902][T12545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1513'. [ 354.623324][ T64] bond0 (unregistering): Released all slaves [ 354.855211][T12543] netlink: 'syz.4.1513': attribute type 4 has an invalid length. [ 355.058428][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.074958][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.086044][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.103253][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.111700][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.210904][T12528] lo speed is unknown, defaulting to 1000 [ 355.495079][T12557] lo speed is unknown, defaulting to 1000 [ 355.848558][ T64] hsr_slave_0: left promiscuous mode [ 355.857548][ T64] hsr_slave_1: left promiscuous mode [ 355.866540][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.874050][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.882487][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.889980][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.911900][ T64] veth1_macvtap: left promiscuous mode [ 355.917449][ T64] veth0_macvtap: left promiscuous mode [ 355.924317][ T64] veth1_vlan: left promiscuous mode [ 355.932388][ T64] veth0_vlan: left promiscuous mode [ 356.319944][ T51] Bluetooth: hci0: command tx timeout [ 356.357573][ T64] team0 (unregistering): Port device team_slave_1 removed [ 356.394965][ T64] team0 (unregistering): Port device team_slave_0 removed [ 357.055382][T12528] chnl_net:caif_netlink_parms(): no params data found [ 357.101927][T12557] chnl_net:caif_netlink_parms(): no params data found [ 357.200671][ T51] Bluetooth: hci2: command tx timeout [ 357.431954][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.455838][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.471055][T12528] bridge_slave_0: entered allmulticast mode [ 357.478375][T12528] bridge_slave_0: entered promiscuous mode [ 357.492308][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.506459][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.514358][T12528] bridge_slave_1: entered allmulticast mode [ 357.525607][T12528] bridge_slave_1: entered promiscuous mode [ 357.664407][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.689412][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.696783][T12557] bridge_slave_0: entered allmulticast mode [ 357.704819][T12557] bridge_slave_0: entered promiscuous mode [ 357.747301][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.759426][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.766673][T12557] bridge_slave_1: entered allmulticast mode [ 357.789134][ T5166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.799749][T12557] bridge_slave_1: entered promiscuous mode [ 357.807017][ T5166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.815202][ T5166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.823465][ T5166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.832326][ T5166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.843236][T12528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.889986][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.963649][T12528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.018542][T12593] lo speed is unknown, defaulting to 1000 [ 358.049593][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.183381][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.227728][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.242875][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.276884][T12528] team0: Port device team_slave_0 added [ 358.305138][T12528] team0: Port device team_slave_1 added [ 358.400270][ T5166] Bluetooth: hci0: command tx timeout [ 358.497217][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.541126][T12604] netlink: 'syz.4.1521': attribute type 3 has an invalid length. [ 358.564575][T12528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.573747][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.636787][T12528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.655013][T12557] team0: Port device team_slave_0 added [ 358.665531][T12557] team0: Port device team_slave_1 added [ 358.697870][T12595] lo speed is unknown, defaulting to 1000 [ 358.723530][T12528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.749815][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.763777][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1522'. [ 358.809837][T12528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.992936][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.011013][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.064908][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.106527][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.129998][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.169846][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.279586][ T5166] Bluetooth: hci2: command tx timeout [ 359.348230][T12557] hsr_slave_0: entered promiscuous mode [ 359.356159][T12557] hsr_slave_1: entered promiscuous mode [ 359.363126][T12557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.378538][T12557] Cannot create hsr debugfs directory [ 359.406054][T12528] hsr_slave_0: entered promiscuous mode [ 359.427076][T12528] hsr_slave_1: entered promiscuous mode [ 359.433665][T12528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.441882][T12528] Cannot create hsr debugfs directory [ 359.598553][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.796761][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.926457][ T5166] Bluetooth: hci3: command tx timeout [ 359.978931][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.152179][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.277217][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 360.323115][T12631] syzkaller0: entered promiscuous mode [ 360.328618][T12631] syzkaller0: entered allmulticast mode [ 360.480104][ T5166] Bluetooth: hci0: command tx timeout [ 360.516867][T12595] chnl_net:caif_netlink_parms(): no params data found [ 360.794884][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 361.362674][ T5166] Bluetooth: hci2: command tx timeout [ 362.001530][ T5166] Bluetooth: hci3: command tx timeout [ 362.357668][ T64] bridge_slave_1: left allmulticast mode [ 362.369848][ T64] bridge_slave_1: left promiscuous mode [ 362.375683][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.421275][ T64] bridge_slave_0: left allmulticast mode [ 362.427020][ T64] bridge_slave_0: left promiscuous mode [ 362.433312][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.447732][ T64] bridge_slave_1: left allmulticast mode [ 362.465096][ T64] bridge_slave_1: left promiscuous mode [ 362.474294][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.487535][ T64] bridge_slave_0: left allmulticast mode [ 362.509936][ T64] bridge_slave_0: left promiscuous mode [ 362.515759][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.560422][ T5166] Bluetooth: hci0: command tx timeout [ 363.247386][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.259354][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.272483][ T64] bond0 (unregistering): Released all slaves [ 363.439978][ T5166] Bluetooth: hci2: command tx timeout [ 363.678019][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.689887][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.700633][ T64] bond0 (unregistering): Released all slaves [ 363.935813][T12595] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.962647][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.977709][T12595] bridge_slave_0: entered allmulticast mode [ 363.989005][T12595] bridge_slave_0: entered promiscuous mode [ 364.035145][T12595] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.049995][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.057289][T12595] bridge_slave_1: entered allmulticast mode [ 364.077419][T12595] bridge_slave_1: entered promiscuous mode [ 364.079986][ T5166] Bluetooth: hci3: command tx timeout [ 364.182709][T12595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.197133][T12595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.347482][T12595] team0: Port device team_slave_0 added [ 364.351603][T12673] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 364.419103][T12595] team0: Port device team_slave_1 added [ 364.452879][T12673] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.491461][T12674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.505266][T12674] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.517408][T12674] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 364.584623][T12595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.595393][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.625717][T12595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.643566][T12595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.658460][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.685424][T12595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.706179][T12673] macvlan0: entered promiscuous mode [ 364.712122][T12673] macvlan0: entered allmulticast mode [ 364.718222][T12673] bond6: entered promiscuous mode [ 364.725766][T12673] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 364.736139][T12673] bond6: left promiscuous mode [ 364.922603][T12595] hsr_slave_0: entered promiscuous mode [ 364.935710][T12595] hsr_slave_1: entered promiscuous mode [ 364.943122][T12595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.951042][T12595] Cannot create hsr debugfs directory [ 365.494348][T12557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.542385][T12557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.557371][T12689] sctp: [Deprecated]: syz.3.1541 (pid 12689) Use of int in max_burst socket option deprecated. [ 365.557371][T12689] Use struct sctp_assoc_value instead [ 365.654850][T12557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.673510][T12557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 365.698094][ T64] hsr_slave_0: left promiscuous mode [ 365.704844][ T64] hsr_slave_1: left promiscuous mode [ 365.711285][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.718690][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.726858][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.734667][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.754728][ T64] hsr_slave_0: left promiscuous mode [ 365.765148][ T64] hsr_slave_1: left promiscuous mode [ 365.775487][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.783115][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.792486][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.800063][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.847182][ T64] veth1_macvtap: left promiscuous mode [ 365.853275][ T64] veth0_macvtap: left promiscuous mode [ 365.858894][ T64] veth1_vlan: left promiscuous mode [ 365.864400][ T64] veth0_vlan: left promiscuous mode [ 365.874507][ T64] veth1_macvtap: left promiscuous mode [ 365.880161][ T64] veth0_macvtap: left promiscuous mode [ 365.885774][ T64] veth1_vlan: left promiscuous mode [ 365.891214][ T64] veth0_vlan: left promiscuous mode [ 366.160036][ T5166] Bluetooth: hci3: command tx timeout [ 366.497264][ T64] team0 (unregistering): Port device team_slave_1 removed [ 366.545056][ T64] team0 (unregistering): Port device team_slave_0 removed [ 367.255645][ T64] team0 (unregistering): Port device team_slave_1 removed [ 367.299203][ T64] team0 (unregistering): Port device team_slave_0 removed [ 367.887847][T12712] netlink: 'syz.3.1546': attribute type 29 has an invalid length. [ 367.901839][T12708] tipc: Enabled bearer , priority 0 [ 368.028743][T12708] syzkaller0: entered promiscuous mode [ 368.051263][T12708] syzkaller0: entered allmulticast mode [ 368.058373][T12528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.101112][T12528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.171601][T12528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.200353][T12708] tipc: Resetting bearer [ 368.240178][T12528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.343836][T12707] tipc: Resetting bearer [ 368.363482][T12707] tipc: Disabling bearer [ 368.478689][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.546386][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.613179][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.620416][ T9848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.637320][T12723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1547'. [ 368.652448][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.659714][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.773994][T12557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.790802][T12557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.934899][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.015433][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.033803][T12595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.052849][T12595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.098116][T12595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.137733][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.144968][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.163711][T12735] netlink: 'syz.3.1549': attribute type 11 has an invalid length. [ 369.177770][T12595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.223766][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.231036][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.381278][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.603054][T12557] veth0_vlan: entered promiscuous mode [ 369.628591][T12754] bridge0: port 1(veth0_to_bridge) entered blocking state [ 369.649955][T12754] bridge0: port 1(veth0_to_bridge) entered disabled state [ 369.662619][T12754] veth0_to_bridge: entered allmulticast mode [ 369.668067][T12755] netlink: 'syz.4.1552': attribute type 12 has an invalid length. [ 369.670783][T12754] veth0_to_bridge: entered promiscuous mode [ 369.736265][T12557] veth1_vlan: entered promiscuous mode [ 369.767839][T12595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.901782][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.917906][T12557] veth0_macvtap: entered promiscuous mode [ 369.971099][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.978287][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.006567][T12557] veth1_macvtap: entered promiscuous mode [ 370.019008][ T6850] hid-generic 0005:07C0:8002.0001: collection stack underflow [ 370.023201][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.033914][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.052814][ T6850] hid-generic 0005:07C0:8002.0001: item 0 0 0 12 parsing failed [ 370.063502][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 370.064572][ T6850] hid-generic 0005:07C0:8002.0001: probe with driver hid-generic failed with error -22 [ 370.158198][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.196502][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.236835][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.333606][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.353070][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 370.400428][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.474558][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.499489][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.582534][T12528] veth0_vlan: entered promiscuous mode [ 370.603786][T12528] veth1_vlan: entered promiscuous mode [ 370.777376][ T9846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.813892][ T9846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.814407][T12528] veth0_macvtap: entered promiscuous mode [ 370.865042][T12528] veth1_macvtap: entered promiscuous mode [ 370.925953][T12595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.952851][ T9846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.963629][ T9846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.984409][T12793] lo speed is unknown, defaulting to 1000 [ 370.994098][T12528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.037462][T12528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.088511][ T9849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.138788][ T9849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.204506][ T9849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.225000][ T9849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.328358][T12595] veth0_vlan: entered promiscuous mode [ 371.388149][T12595] veth1_vlan: entered promiscuous mode [ 371.564537][ T9846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.757040][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.774327][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.833286][ T9846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.936570][T12595] veth0_macvtap: entered promiscuous mode [ 371.957170][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.970910][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.988952][ T9846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.012713][T12595] veth1_macvtap: entered promiscuous mode [ 372.103196][ T9846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.238385][T12595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.259341][T12595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.308027][ T9848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.320757][ T9848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.333439][ T9848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.342940][ T9848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.502783][ T9846] bridge_slave_1: left allmulticast mode [ 372.521687][ T9846] bridge_slave_1: left promiscuous mode [ 372.527496][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.601079][ T9846] bridge_slave_0: left allmulticast mode [ 372.606783][ T9846] bridge_slave_0: left promiscuous mode [ 372.629609][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.915774][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.924817][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.952614][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.961720][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.976622][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.101495][ T9846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.113973][ T9846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.124836][ T9846] bond0 (unregistering): Released all slaves [ 373.248848][ T9836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.266123][ T9836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.272595][T12811] lo speed is unknown, defaulting to 1000 [ 373.365602][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.383100][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.812573][ T9846] hsr_slave_0: left promiscuous mode [ 373.818732][ T9846] hsr_slave_1: left promiscuous mode [ 373.833456][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.845486][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.870842][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.878272][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.932340][ T9846] veth1_macvtap: left promiscuous mode [ 373.937940][ T9846] veth0_macvtap: left promiscuous mode [ 373.948261][ T9846] veth1_vlan: left promiscuous mode [ 373.955902][ T9846] veth0_vlan: left promiscuous mode [ 374.371677][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.380732][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.395284][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.417733][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.429981][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.605666][ T9846] team0 (unregistering): Port device team_slave_1 removed [ 374.652462][ T9846] team0 (unregistering): Port device team_slave_0 removed [ 375.040352][ T5166] Bluetooth: hci0: command tx timeout [ 375.148043][T12815] lo speed is unknown, defaulting to 1000 [ 375.243797][T12811] chnl_net:caif_netlink_parms(): no params data found [ 375.418968][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.428492][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.436426][T12811] bridge_slave_0: entered allmulticast mode [ 375.445423][T12811] bridge_slave_0: entered promiscuous mode [ 375.460617][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.467854][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.475355][T12811] bridge_slave_1: entered allmulticast mode [ 375.484116][T12811] bridge_slave_1: entered promiscuous mode [ 375.550584][ T9846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.573989][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.598639][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.634013][ T9846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.691813][T12811] team0: Port device team_slave_0 added [ 375.705271][T12811] team0: Port device team_slave_1 added [ 375.730337][ T9846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.805150][ T9846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.823201][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.830567][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.858260][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.872178][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.879161][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.912527][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.127759][T12811] hsr_slave_0: entered promiscuous mode [ 376.134639][T12811] hsr_slave_1: entered promiscuous mode [ 376.141253][T12811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.149429][T12811] Cannot create hsr debugfs directory [ 376.348356][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 376.486188][ T5166] Bluetooth: hci2: command tx timeout [ 376.496569][T12834] lo speed is unknown, defaulting to 1000 [ 376.541719][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.554559][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.563625][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.573951][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.584514][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.703132][ T9846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.795087][T12815] chnl_net:caif_netlink_parms(): no params data found [ 376.888037][ T9846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.039107][ T9846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.120947][ T5166] Bluetooth: hci0: command tx timeout [ 377.219069][ T9846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.235760][T12839] lo speed is unknown, defaulting to 1000 [ 377.388872][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.404490][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.413274][T12815] bridge_slave_0: entered allmulticast mode [ 377.426679][T12815] bridge_slave_0: entered promiscuous mode [ 377.471972][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.480933][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.488194][T12815] bridge_slave_1: entered allmulticast mode [ 377.508918][T12815] bridge_slave_1: entered promiscuous mode [ 377.817355][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.878957][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.890071][T12856] netlink: 'syz.4.1575': attribute type 13 has an invalid length. [ 377.897928][T12856] netlink: 'syz.4.1575': attribute type 17 has an invalid length. [ 377.958010][T12856] gre0: left promiscuous mode [ 377.997032][T12856] team0: left promiscuous mode [ 378.002204][T12856] team0: left allmulticast mode [ 378.012548][T12856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.029555][ T6837] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.071877][T12815] team0: Port device team_slave_0 added [ 378.085354][ T9846] bridge_slave_1: left allmulticast mode [ 378.091614][ T9846] bridge_slave_1: left promiscuous mode [ 378.097311][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.108283][ T9846] bridge_slave_0: left allmulticast mode [ 378.114792][ T9846] bridge_slave_0: left promiscuous mode [ 378.120905][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.132516][ T9846] bridge_slave_1: left allmulticast mode [ 378.138258][ T9846] bridge_slave_1: left promiscuous mode [ 378.144921][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.154834][ T9846] bridge_slave_0: left allmulticast mode [ 378.166992][ T9846] bridge_slave_0: left promiscuous mode [ 378.173290][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.175432][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.247582][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.327396][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.549554][ T6834] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.570006][ T5166] Bluetooth: hci2: command tx timeout [ 378.604341][ T9846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.616808][ T9846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.629512][ T9846] bond0 (unregistering): Released all slaves [ 378.650054][ T5166] Bluetooth: hci3: command tx timeout [ 378.926624][ T9846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.938645][ T9846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.949047][ T9846] bond0 (unregistering): Released all slaves [ 378.987175][T12815] team0: Port device team_slave_1 added [ 379.036690][T12858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1575'. [ 379.097858][T12857] lo speed is unknown, defaulting to 1000 [ 379.158722][T12815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.166305][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.193752][T12815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.210004][ T5166] Bluetooth: hci0: command tx timeout [ 379.288257][T12815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.296242][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.323416][T12815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.387917][ T64] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.400051][ T64] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.480247][T12811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.556770][T12811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.603427][T12815] hsr_slave_0: entered promiscuous mode [ 379.610730][T12815] hsr_slave_1: entered promiscuous mode [ 379.616982][T12815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.624694][T12815] Cannot create hsr debugfs directory [ 379.636360][T12811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.687307][T12839] chnl_net:caif_netlink_parms(): no params data found [ 379.748487][T12811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.391893][T12839] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.399069][T12839] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.407793][T12839] bridge_slave_0: entered allmulticast mode [ 380.459707][T12839] bridge_slave_0: entered promiscuous mode [ 380.480265][ T6847] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.625947][T12839] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.639981][ T5166] Bluetooth: hci2: command tx timeout [ 380.640929][T12839] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.659444][T12839] bridge_slave_1: entered allmulticast mode [ 380.680880][T12839] bridge_slave_1: entered promiscuous mode [ 380.720811][ T5166] Bluetooth: hci3: command tx timeout [ 380.734518][T12875] lo speed is unknown, defaulting to 1000 [ 380.913076][ T9846] hsr_slave_0: left promiscuous mode [ 380.927618][ T9846] hsr_slave_1: left promiscuous mode [ 380.935349][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.943876][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.953985][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.962037][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.984205][ T9846] hsr_slave_0: left promiscuous mode [ 380.997227][ T9846] hsr_slave_1: left promiscuous mode [ 381.003980][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.012696][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.028294][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.037145][ T9846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.086593][ T9846] veth1_macvtap: left promiscuous mode [ 381.092546][ T9846] veth0_macvtap: left promiscuous mode [ 381.098217][ T9846] veth1_vlan: left promiscuous mode [ 381.103739][ T9846] veth0_vlan: left promiscuous mode [ 381.111319][ T9846] veth1_macvtap: left promiscuous mode [ 381.116886][ T9846] veth0_macvtap: left promiscuous mode [ 381.123390][ T9846] veth1_vlan: left promiscuous mode [ 381.128752][ T9846] veth0_vlan: left promiscuous mode [ 381.279912][ T5166] Bluetooth: hci0: command tx timeout [ 381.675798][ T9846] team0 (unregistering): Port device team_slave_1 removed [ 381.715637][ T9846] team0 (unregistering): Port device team_slave_0 removed [ 382.438496][ T9846] team0 (unregistering): Port device team_slave_1 removed [ 382.482621][ T9846] team0 (unregistering): Port device team_slave_0 removed [ 382.721151][ T5166] Bluetooth: hci2: command tx timeout [ 382.800040][ T5166] Bluetooth: hci3: command tx timeout [ 382.887638][T12839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.934195][T12839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.042626][T12839] team0: Port device team_slave_0 added [ 383.082703][T12839] team0: Port device team_slave_1 added [ 383.158070][T12839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.173906][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.207183][T12839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.288498][T12839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.296726][T12839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.312550][T12885] xt_TCPMSS: Only works on TCP SYN packets [ 383.334559][T12839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.463843][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 383.518021][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.525182][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.723993][T12839] hsr_slave_0: entered promiscuous mode [ 383.730947][T12839] hsr_slave_1: entered promiscuous mode [ 383.737364][T12839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.746379][T12839] Cannot create hsr debugfs directory [ 383.826937][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.890021][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.897173][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.003125][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.010324][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.043332][T12815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.155039][T12815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.205010][T12815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.230023][T12815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.580039][T12897] lo speed is unknown, defaulting to 1000 [ 384.716186][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.880421][ T5166] Bluetooth: hci3: command tx timeout [ 384.891363][T12839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.926192][T12839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.955241][T12839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.004266][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.023512][T12904] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1584'. [ 385.035163][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.053938][T12839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.078562][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.085825][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.144897][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.152135][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.205635][T12910] Bluetooth: MGMT ver 1.23 [ 385.307958][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 385.359015][T12903] lo speed is unknown, defaulting to 1000 [ 385.695044][T12811] veth0_vlan: entered promiscuous mode [ 385.755118][T12811] veth1_vlan: entered promiscuous mode [ 385.857375][T12839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.058412][T12811] veth0_macvtap: entered promiscuous mode [ 386.106630][T12811] veth1_macvtap: entered promiscuous mode [ 386.145502][T12839] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.173834][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.181045][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.194819][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.222189][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.229412][ T9846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.333470][T12811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.398476][T12811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.462529][T12815] veth0_vlan: entered promiscuous mode [ 386.504097][ T2940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.540341][ T2940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.555401][ T2940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.606805][ T2940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.624153][T12815] veth1_vlan: entered promiscuous mode [ 386.771531][T12815] veth0_macvtap: entered promiscuous mode [ 386.840645][T12815] veth1_macvtap: entered promiscuous mode [ 386.873479][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.914812][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.997956][T12933] lo speed is unknown, defaulting to 1000 [ 387.005010][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.073875][T12935] veth0_to_team: entered promiscuous mode [ 387.073887][ T9848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.073907][ T9848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.080426][T12935] veth0_to_team: entered allmulticast mode [ 387.113290][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.146846][T12839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.158579][ T9836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.190558][ T9836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.234545][ T9836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.269856][ T9836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.571021][T12839] veth0_vlan: entered promiscuous mode [ 387.581652][ T9836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.606372][T12839] veth1_vlan: entered promiscuous mode [ 387.613518][ T9836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.797359][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.808475][T12940] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1586'. [ 387.831950][ T9848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.842246][ T9848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.090637][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.237922][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.285799][T12839] veth0_macvtap: entered promiscuous mode [ 388.324860][T12839] veth1_macvtap: entered promiscuous mode [ 388.377960][ T9836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.447539][T12839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.517423][T12839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.561847][ T9848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.590985][ T9848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.624360][ T9848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.654463][ T9848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.796809][ T9846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.822023][ T9846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.912897][ T9836] bridge_slave_1: left allmulticast mode [ 388.918594][ T9836] bridge_slave_1: left promiscuous mode [ 388.945724][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.970773][ T9836] bridge_slave_0: left allmulticast mode [ 388.976466][ T9836] bridge_slave_0: left promiscuous mode [ 388.987177][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.097864][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.107355][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.118931][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.128166][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.136523][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.383164][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.395639][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.406238][ T9836] bond0 (unregistering): Released all slaves [ 389.442163][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.454897][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.494776][T12946] lo speed is unknown, defaulting to 1000 [ 390.027752][ T9836] hsr_slave_0: left promiscuous mode [ 390.052324][ T9836] hsr_slave_1: left promiscuous mode [ 390.058204][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.065803][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.073990][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.085638][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.118355][ T9836] veth1_macvtap: left promiscuous mode [ 390.127248][ T9836] veth0_macvtap: left promiscuous mode [ 390.135189][ T9836] veth1_vlan: left promiscuous mode [ 390.143355][ T9836] veth0_vlan: left promiscuous mode [ 390.616305][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.627948][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.636340][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.644955][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.653421][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.764305][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 390.804033][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 391.201985][ T5166] Bluetooth: hci0: command tx timeout [ 391.220265][T12952] lo speed is unknown, defaulting to 1000 [ 391.437401][T12946] chnl_net:caif_netlink_parms(): no params data found [ 391.609089][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.617035][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.624708][T12946] bridge_slave_0: entered allmulticast mode [ 391.634398][T12946] bridge_slave_0: entered promiscuous mode [ 391.653333][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.662132][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.670245][T12946] bridge_slave_1: entered allmulticast mode [ 391.677445][T12946] bridge_slave_1: entered promiscuous mode [ 391.752097][ T9836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.773248][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.786299][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.842429][ T9836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.895668][T12946] team0: Port device team_slave_0 added [ 391.905058][T12946] team0: Port device team_slave_1 added [ 391.958042][ T9836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.995947][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.999500][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.005788][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.038969][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.053397][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.060464][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.087236][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.099771][T12952] chnl_net:caif_netlink_parms(): no params data found [ 392.213282][ T9836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.236224][T12964] netlink: 'syz.4.1593': attribute type 11 has an invalid length. [ 392.500069][T12946] hsr_slave_0: entered promiscuous mode [ 392.522459][T12946] hsr_slave_1: entered promiscuous mode [ 392.528902][T12946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.537930][T12946] Cannot create hsr debugfs directory [ 392.569866][T12977] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1596'. [ 392.581524][T12977] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1596'. [ 392.723374][ T5166] Bluetooth: hci2: command tx timeout [ 392.747363][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.758995][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.778326][T12952] bridge_slave_0: entered allmulticast mode [ 392.807222][T12952] bridge_slave_0: entered promiscuous mode [ 392.883787][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.895906][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.903806][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.916289][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.924039][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.947831][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.955949][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.964142][T12952] bridge_slave_1: entered allmulticast mode [ 392.972508][T12952] bridge_slave_1: entered promiscuous mode [ 393.083280][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.129003][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.159715][T12985] lo speed is unknown, defaulting to 1000 [ 393.280358][ T5166] Bluetooth: hci0: command tx timeout [ 393.292113][T12952] team0: Port device team_slave_0 added [ 393.345176][T12952] team0: Port device team_slave_1 added [ 393.553330][ T9836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.726000][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.736930][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.766116][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.859503][ T9836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.907277][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.935571][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.986253][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.161996][ T9836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.283856][T12952] hsr_slave_0: entered promiscuous mode [ 394.310524][T12952] hsr_slave_1: entered promiscuous mode [ 394.317059][T12952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.343094][T12952] Cannot create hsr debugfs directory [ 394.411619][ T9836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.806836][ T5166] Bluetooth: hci2: command tx timeout [ 394.965744][ T5166] Bluetooth: hci3: command tx timeout [ 395.124125][ T9836] bridge_slave_1: left allmulticast mode [ 395.133628][ T9836] bridge_slave_1: left promiscuous mode [ 395.149534][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.171899][ T9836] bridge_slave_0: left allmulticast mode [ 395.177582][ T9836] bridge_slave_0: left promiscuous mode [ 395.189555][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.214036][ T9836] bridge_slave_1: left allmulticast mode [ 395.229277][ T9836] bridge_slave_1: left promiscuous mode [ 395.235163][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.260125][ T9836] bridge_slave_0: left allmulticast mode [ 395.277466][ T9836] bridge_slave_0: left promiscuous mode [ 395.301858][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.359869][ T5166] Bluetooth: hci0: command tx timeout [ 395.703061][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 395.958396][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.975332][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.986680][ T9836] bond0 (unregistering): Released all slaves [ 396.448199][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.459941][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.470451][ T9836] bond0 (unregistering): Released all slaves [ 396.746441][T13025] netlink: 'syz.4.1607': attribute type 23 has an invalid length. [ 396.755365][T12985] chnl_net:caif_netlink_parms(): no params data found [ 396.780768][T12946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.809045][T12946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.881424][ T5166] Bluetooth: hci2: command tx timeout [ 396.889023][T12946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.948628][T12946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.041913][ T5166] Bluetooth: hci3: command tx timeout [ 397.101702][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.116755][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.125829][T12985] bridge_slave_0: entered allmulticast mode [ 397.148570][T12985] bridge_slave_0: entered promiscuous mode [ 397.201864][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.209186][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.216953][T12985] bridge_slave_1: entered allmulticast mode [ 397.228379][T12985] bridge_slave_1: entered promiscuous mode [ 397.373465][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.449847][ T5166] Bluetooth: hci0: command tx timeout [ 397.460435][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.734129][T12985] team0: Port device team_slave_0 added [ 397.788566][T12985] team0: Port device team_slave_1 added [ 397.836530][T13041] lo speed is unknown, defaulting to 1000 [ 397.966146][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.981908][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.008724][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.036917][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.045192][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.072574][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.960345][ T5166] Bluetooth: hci2: command tx timeout [ 399.120151][ T5166] Bluetooth: hci3: command tx timeout [ 399.606591][ T9836] hsr_slave_0: left promiscuous mode [ 399.613466][ T9836] hsr_slave_1: left promiscuous mode [ 399.627491][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.635543][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.648967][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.657761][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.675509][ T9836] hsr_slave_0: left promiscuous mode [ 399.682564][ T9836] hsr_slave_1: left promiscuous mode [ 399.690175][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.697590][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.707001][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.716030][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.766818][ T9836] veth1_macvtap: left promiscuous mode [ 399.773859][ T9836] veth0_macvtap: left promiscuous mode [ 399.780218][ T9836] veth1_vlan: left promiscuous mode [ 399.785585][ T9836] veth0_vlan: left promiscuous mode [ 399.795277][ T9836] veth1_macvtap: left promiscuous mode [ 399.801477][ T9836] veth0_macvtap: left promiscuous mode [ 399.807089][ T9836] veth1_vlan: left promiscuous mode [ 399.812782][ T9836] veth0_vlan: left promiscuous mode [ 400.334034][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 400.373821][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 401.077599][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 401.116689][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 401.200201][ T5166] Bluetooth: hci3: command tx timeout [ 401.573647][T12985] hsr_slave_0: entered promiscuous mode [ 401.581580][T12985] hsr_slave_1: entered promiscuous mode [ 401.587729][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.596092][T12985] Cannot create hsr debugfs directory [ 401.610471][T12952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.628260][T12952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.688972][T12952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.700604][T12952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.724268][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.991892][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.093392][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.100578][ T9848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.137366][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.144553][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.343476][T12952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.375138][T13063] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 402.434317][T13063] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 402.455216][T12952] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.486145][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.493386][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.520452][T13063] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 402.542641][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.549842][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.586315][T13063] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 402.812404][ T3444] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 402.840067][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.847095][T12985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.907259][ T9836] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 402.930599][T12985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.968317][ T9836] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 402.980231][T12985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 403.009819][T12985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.111015][ T64] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.278347][T12946] veth0_vlan: entered promiscuous mode [ 403.313715][T12952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.395345][T12946] veth1_vlan: entered promiscuous mode [ 403.473794][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 403.560459][T12952] veth0_vlan: entered promiscuous mode [ 403.583990][T12946] veth0_macvtap: entered promiscuous mode [ 403.598073][T12946] veth1_macvtap: entered promiscuous mode [ 403.616510][T12952] veth1_vlan: entered promiscuous mode [ 403.695451][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.707158][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.738402][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.762666][T12952] veth0_macvtap: entered promiscuous mode [ 403.785409][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.807854][ T3444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.825118][ T9849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.837253][T12952] veth1_macvtap: entered promiscuous mode [ 403.874475][ T9849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.885971][ T9849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.911055][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.918227][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.944923][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.952099][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.983712][T12952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.024551][T12952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.061231][ T9848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.074829][ T9848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.101231][ T9848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.118551][ T9848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.137323][T13109] siw: device registration error -23 [ 404.165348][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.176595][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.267496][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.297230][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.385086][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.416691][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 404.424682][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.562345][ T9848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.584695][ T9848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.746582][T13114] lo speed is unknown, defaulting to 1000 [ 404.920946][T13125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 405.222453][ T9849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.626565][ T9849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.686600][T13125] lo speed is unknown, defaulting to 1000 [ 405.858149][ T9849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.931594][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.993664][ T9849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.419565][T12985] veth0_vlan: entered promiscuous mode [ 406.493405][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.507740][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.514138][T12985] veth1_vlan: entered promiscuous mode [ 406.522763][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.532416][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.540731][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.566873][ T9849] bridge_slave_1: left allmulticast mode [ 406.573791][ T9849] bridge_slave_1: left promiscuous mode [ 406.582212][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.592423][ T9849] bridge_slave_0: left allmulticast mode [ 406.598068][ T9849] bridge_slave_0: left promiscuous mode [ 406.604868][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.917740][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.928996][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.940304][ T9849] bond0 (unregistering): Released all slaves [ 407.159551][T13138] lo speed is unknown, defaulting to 1000 [ 407.179217][T12985] veth0_macvtap: entered promiscuous mode [ 407.233625][T12985] veth1_macvtap: entered promiscuous mode [ 407.335594][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.370959][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.425928][ T9836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.481274][ T9836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.501470][ T9836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.526060][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.617143][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.640533][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.687264][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.698992][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.810414][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 408.037864][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 408.276011][ T9849] hsr_slave_0: left promiscuous mode [ 408.292745][ T9849] hsr_slave_1: left promiscuous mode [ 408.310453][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.329350][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.344669][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.357499][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.396654][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.405735][ T9849] veth1_macvtap: left promiscuous mode [ 408.412930][ T9849] veth0_macvtap: left promiscuous mode [ 408.418720][ T9849] veth1_vlan: left promiscuous mode [ 408.420391][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.434953][ T9849] veth0_vlan: left promiscuous mode [ 408.436067][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.461076][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.468853][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.642306][ T5166] Bluetooth: hci0: command tx timeout [ 409.182689][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 409.223939][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 409.279406][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.666671][T13155] lo speed is unknown, defaulting to 1000 [ 409.835586][T13138] chnl_net:caif_netlink_parms(): no params data found [ 409.968279][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.976079][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.987183][T13138] bridge_slave_0: entered allmulticast mode [ 409.997202][T13138] bridge_slave_0: entered promiscuous mode [ 410.012520][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.020640][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.027866][T13138] bridge_slave_1: entered allmulticast mode [ 410.036364][T13138] bridge_slave_1: entered promiscuous mode [ 410.077170][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.104407][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.175614][ T9849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.194847][T13138] team0: Port device team_slave_0 added [ 410.207224][T13138] team0: Port device team_slave_1 added [ 410.258465][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.266590][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.293125][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.305318][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.312365][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.338883][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.372698][ T9849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.438976][T13138] hsr_slave_0: entered promiscuous mode [ 410.446167][T13138] hsr_slave_1: entered promiscuous mode [ 410.452827][T13138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.460619][T13138] Cannot create hsr debugfs directory [ 410.486439][ T9849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.565532][ T5166] Bluetooth: hci2: command tx timeout [ 410.626370][ T9849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.719803][ T5166] Bluetooth: hci0: command tx timeout [ 410.801061][T13155] chnl_net:caif_netlink_parms(): no params data found [ 410.828113][T13175] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 411.023344][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.282159][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.293163][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.307992][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.323837][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.332952][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.354189][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.370278][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.377532][T13155] bridge_slave_0: entered allmulticast mode [ 411.388229][T13155] bridge_slave_0: entered promiscuous mode [ 411.505252][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.513717][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.521938][T13155] bridge_slave_1: entered allmulticast mode [ 411.530536][T13155] bridge_slave_1: entered promiscuous mode [ 411.612920][ T9849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.759802][T13189] lo speed is unknown, defaulting to 1000 [ 411.883197][ T9849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.943164][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.994942][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.156275][ T9849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.235613][T13155] team0: Port device team_slave_0 added [ 412.255901][T13196] lo speed is unknown, defaulting to 1000 [ 412.288992][ T9849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.331642][T13155] team0: Port device team_slave_1 added [ 412.537900][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.549836][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.582878][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.639989][ T51] Bluetooth: hci2: command tx timeout [ 412.666514][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.673802][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.703235][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.752083][T13138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.799673][ T51] Bluetooth: hci0: command tx timeout [ 412.835034][T13138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.848670][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 412.867222][T13138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.902006][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 412.925084][T13138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.026654][T13155] hsr_slave_0: entered promiscuous mode [ 413.033905][T13155] hsr_slave_1: entered promiscuous mode [ 413.040342][T13155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.047907][T13155] Cannot create hsr debugfs directory [ 413.058060][ T9849] bridge_slave_1: left allmulticast mode [ 413.063865][ T9849] bridge_slave_1: left promiscuous mode [ 413.068570][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 413.082779][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.097557][ T9849] bridge_slave_0: left allmulticast mode [ 413.107258][ T9849] bridge_slave_0: left promiscuous mode [ 413.115758][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.139001][ T9849] bridge_slave_1: left allmulticast mode [ 413.161304][ T9849] bridge_slave_1: left promiscuous mode [ 413.167041][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.208068][ T9849] bridge_slave_0: left allmulticast mode [ 413.217925][ T9849] bridge_slave_0: left promiscuous mode [ 413.228421][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.365351][ T51] Bluetooth: hci3: command tx timeout [ 413.667996][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.679111][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.693313][ T9849] bond0 (unregistering): Released all slaves [ 413.973925][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.986137][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.996195][ T9849] bond0 (unregistering): Released all slaves [ 414.285177][T13189] chnl_net:caif_netlink_parms(): no params data found [ 414.574625][T13223] lo: entered allmulticast mode [ 414.582116][T13223] lo: left allmulticast mode [ 414.719470][ T51] Bluetooth: hci2: command tx timeout [ 414.728917][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.755335][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.762224][T13228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.776364][T13189] bridge_slave_0: entered allmulticast mode [ 414.785197][T13189] bridge_slave_0: entered promiscuous mode [ 414.845939][T13232] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1646'. [ 414.855737][T13232] ip6gretap0: entered promiscuous mode [ 414.863461][T13232] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1646'. [ 414.876194][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.881080][ T51] Bluetooth: hci0: command tx timeout [ 414.886807][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.896201][T13189] bridge_slave_1: entered allmulticast mode [ 414.903694][T13189] bridge_slave_1: entered promiscuous mode [ 414.993306][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.045895][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.085691][T13237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.254416][T13189] team0: Port device team_slave_0 added [ 415.338413][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.410793][T13189] team0: Port device team_slave_1 added [ 415.446009][T13241] xt_bpf: check failed: parse error [ 415.449035][ T51] Bluetooth: hci3: command tx timeout [ 415.583538][T13248] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1652'. [ 415.633174][ T9849] hsr_slave_0: left promiscuous mode [ 415.648193][ T9849] hsr_slave_1: left promiscuous mode [ 415.654421][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.668269][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.680531][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.687983][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.714979][ T9849] hsr_slave_0: left promiscuous mode [ 415.721518][ T9849] hsr_slave_1: left promiscuous mode [ 415.727468][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.734958][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.743390][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.750888][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.791109][ T9849] veth1_macvtap: left promiscuous mode [ 415.796667][ T9849] veth0_macvtap: left promiscuous mode [ 415.802746][ T9849] veth1_vlan: left promiscuous mode [ 415.808100][ T9849] veth0_vlan: left promiscuous mode [ 415.815084][ T9849] veth1_macvtap: left promiscuous mode [ 415.821250][ T9849] veth0_macvtap: left promiscuous mode [ 415.826886][ T9849] veth1_vlan: left promiscuous mode [ 415.832270][ T9849] veth0_vlan: left promiscuous mode [ 416.384042][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 416.431123][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 416.800152][ T51] Bluetooth: hci2: command tx timeout [ 417.166991][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 417.204611][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 417.519845][ T51] Bluetooth: hci3: command tx timeout [ 417.564467][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.575918][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.584250][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.610544][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.627295][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.634955][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.667651][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.813163][T13189] hsr_slave_0: entered promiscuous mode [ 417.834790][T13189] hsr_slave_1: entered promiscuous mode [ 417.843846][T13189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.852214][T13189] Cannot create hsr debugfs directory [ 417.866058][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.873267][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.030838][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.038011][ T9846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.158827][T13265] syzkaller0: entered promiscuous mode [ 418.165930][T13265] syzkaller0: entered allmulticast mode [ 418.312909][T13155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.367306][T13155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.442765][T13155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.457641][T13155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.735817][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'. [ 419.376819][T13282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.599935][ T51] Bluetooth: hci3: command tx timeout [ 420.263990][T13288] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1661'. [ 420.291809][T13288] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 420.377523][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.391221][T13291] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 420.478476][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.525512][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.532721][ T9846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.574236][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.581455][ T9846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.628052][T13189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.647601][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.670497][T13189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.691026][T13296] tipc: Enabled bearer , priority 0 [ 420.702724][T13189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.726492][T13296] syzkaller0: entered promiscuous mode [ 420.738274][T13296] syzkaller0: entered allmulticast mode [ 420.758180][T13189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.782197][T13300] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 420.807293][T13296] tipc: Resetting bearer [ 420.827628][T13295] tipc: Resetting bearer [ 420.854906][T13295] tipc: Disabling bearer [ 420.918259][T13300] bond7: entered promiscuous mode [ 420.928216][T13300] 8021q: adding VLAN 0 to HW filter on device bond7 [ 420.963725][T13305] bond7: (slave bridge4): making interface the new active one [ 420.977623][T13305] bridge4: entered promiscuous mode [ 420.984480][T13305] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 421.111622][T13318] syz0: rxe_newlink: already configured on lo [ 421.165214][T13138] veth0_vlan: entered promiscuous mode [ 421.181329][T13316] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 421.192610][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 421.217323][T13321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.243872][T13138] veth1_vlan: entered promiscuous mode [ 421.328453][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.421377][T13189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.500678][T13138] veth0_macvtap: entered promiscuous mode [ 421.516304][T13138] veth1_macvtap: entered promiscuous mode [ 421.535860][T13189] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.572464][T13155] veth0_vlan: entered promiscuous mode [ 421.605305][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.616861][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.624082][ T9848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.666504][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.684866][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.692101][ T9848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.713528][T13155] veth1_vlan: entered promiscuous mode [ 421.781118][ T9836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.793952][ T9836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.817710][T13331] lo speed is unknown, defaulting to 1000 [ 421.855158][ T9836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.866448][ T9836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.942298][T13155] veth0_macvtap: entered promiscuous mode [ 421.976450][T13189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.031262][T13155] veth1_macvtap: entered promiscuous mode [ 422.145907][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.228493][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.273247][ T9848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.282833][ T9848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.291515][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.307980][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.336654][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.345881][T13330] netlink: 'syz.3.1672': attribute type 4 has an invalid length. [ 422.368300][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.454830][ T6830] lo speed is unknown, defaulting to 1000 [ 422.475313][ T6830] syz0: Port: 1 Link ACTIVE [ 422.559525][ T6830] lo speed is unknown, defaulting to 1000 [ 422.688586][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.707402][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.717654][ T9836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.735077][ T9836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.820995][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.972946][T13347] lo speed is unknown, defaulting to 1000 [ 422.993619][ T9848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.017329][ T9848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.235765][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.291452][T13189] veth0_vlan: entered promiscuous mode [ 423.326560][T13189] veth1_vlan: entered promiscuous mode [ 423.506581][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.666249][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.807062][T13189] veth0_macvtap: entered promiscuous mode [ 423.893304][ T9836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.966564][T13189] veth1_macvtap: entered promiscuous mode [ 424.086255][T13189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.107570][T13189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.208238][ T9848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.238128][ T9848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.284461][ T9848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.351640][ T9848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.473078][ T9836] bridge_slave_1: left allmulticast mode [ 424.478779][ T9836] bridge_slave_1: left promiscuous mode [ 424.491871][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.512139][ T9836] bridge_slave_0: left allmulticast mode [ 424.517837][ T9836] bridge_slave_0: left promiscuous mode [ 424.535089][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.569970][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.580221][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.588100][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.598013][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.612133][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.916782][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.928145][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.938662][ T9836] bond0 (unregistering): Released all slaves [ 425.045733][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.071588][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.088584][T13352] lo speed is unknown, defaulting to 1000 [ 425.218498][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.234410][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.343962][T13348] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 425.355905][T13348] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 425.364352][T13348] CPU: 1 UID: 0 PID: 13348 Comm: kbnepd bnep0 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 425.376617][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.386696][T13348] RIP: 0010:klist_del+0x49/0x110 [ 425.391671][T13348] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 b1 bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b b1 bc f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 425.411301][T13348] RSP: 0018:ffffc900039a7768 EFLAGS: 00010202 [ 425.417380][T13348] RAX: 000000000000000b RBX: ffff88806fc38460 RCX: ffff888030c03c00 [ 425.425347][T13348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 425.433316][T13348] RBP: ffffc900039a7890 R08: ffff88804d0711e3 R09: 1ffff11009a0e23c [ 425.441289][T13348] R10: dffffc0000000000 R11: ffffed1009a0e23d R12: dffffc0000000000 [ 425.449282][T13348] R13: 1ffff1100df8708c R14: 0000000000000000 R15: ffff888067f90750 [ 425.457252][T13348] FS: 0000000000000000(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 425.466171][T13348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.472750][T13348] CR2: 00007fff27afdf68 CR3: 000000000df38000 CR4: 00000000003526f0 [ 425.480724][T13348] Call Trace: [ 425.484001][T13348] [ 425.486932][T13348] device_del+0x280/0x8e0 [ 425.491274][T13348] ? _raw_spin_unlock_irq+0x2e/0x50 [ 425.496481][T13348] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 425.502550][T13348] ? __pfx_device_del+0x10/0x10 [ 425.507443][T13348] ? netdev_unregister_kobject+0x344/0x450 [ 425.513284][T13348] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 425.519700][T13348] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 425.526503][T13348] ? rtnl_net_dev_lock+0x257/0x2f0 [ 425.531621][T13348] unregister_netdevice_queue+0x33c/0x380 [ 425.537347][T13348] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 425.543590][T13348] ? rtnl_net_dev_lock+0x36/0x2f0 [ 425.548618][T13348] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 425.553726][T13348] unregister_netdev+0x1f/0x60 [ 425.558490][T13348] bnep_session+0x294d/0x2b40 [ 425.563160][T13348] ? trace_sched_exit_tp+0x38/0x120 [ 425.568454][T13348] ? __lock_acquire+0xab9/0xd20 [ 425.573313][T13348] ? __pfx_bnep_session+0x10/0x10 [ 425.578333][T13348] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.584215][T13348] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.590546][T13348] ? __pfx_woken_wake_function+0x10/0x10 [ 425.596186][T13348] ? __kthread_parkme+0x7b/0x200 [ 425.601126][T13348] ? __kthread_parkme+0x1a1/0x200 [ 425.606148][T13348] kthread+0x70e/0x8a0 [ 425.610218][T13348] ? __pfx_bnep_session+0x10/0x10 [ 425.615245][T13348] ? __pfx_kthread+0x10/0x10 [ 425.619835][T13348] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.625026][T13348] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.630227][T13348] ? __pfx_kthread+0x10/0x10 [ 425.634820][T13348] ret_from_fork+0x3fc/0x770 [ 425.639420][T13348] ? __pfx_ret_from_fork+0x10/0x10 [ 425.644548][T13348] ? __switch_to_asm+0x39/0x70 [ 425.649313][T13348] ? __switch_to_asm+0x33/0x70 [ 425.654074][T13348] ? __pfx_kthread+0x10/0x10 [ 425.658665][T13348] ret_from_fork_asm+0x1a/0x30 [ 425.663430][T13348] [ 425.666454][T13348] Modules linked in: [ 425.672271][T13348] ---[ end trace 0000000000000000 ]--- [ 425.677969][T13348] RIP: 0010:klist_del+0x49/0x110 SYZFAIL: failed to send rpc [ 425.692718][T13348] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 b1 bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b b1 bc f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 425.712708][T13348] RSP: 0018:ffffc900039a7768 EFLAGS: 00010202 [ 425.718824][T13348] RAX: 000000000000000b RBX: ffff88806fc38460 RCX: ffff888030c03c00 [ 425.726885][T13348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 425.735328][T13348] RBP: ffffc900039a7890 R08: ffff88804d0711e3 R09: 1ffff11009a0e23c fd=3 want=115808 sent=0 n=-1 (errno 32: Broken pipe) [ 425.743393][T13348] R10: dffffc0000000000 R11: ffffed1009a0e23d R12: dffffc0000000000 [ 425.751559][T13348] R13: 1ffff1100df8708c R14: 0000000000000000 R15: ffff888067f90750 [ 425.763013][T13348] FS: 0000000000000000(0000) GS:ffff888125c11000(0000) knlGS:0000000000000000 [ 425.772649][T13348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.779372][T13348] CR2: 00007f9edb581ab8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 425.787390][T13348] Kernel panic - not syncing: Fatal exception [ 425.793791][T13348] Kernel Offset: disabled [ 425.798111][T13348] Rebooting in 86400 seconds..