last executing test programs: 1m32.714338229s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 1m27.700597723s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 1m27.270246311s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 1m14.720504611s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 1m13.370880707s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 1m11.089409831s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 57.788490557s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 56.565678721s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 52.282292674s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 41.091378992s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 40.605895043s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 38.334689795s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 25.468128706s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 24.11867577s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 22.56257879s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 10.200105537s ago: executing program 1 (id=1101): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0xcbcb2000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 8.406559821s ago: executing program 3 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000000000002d97c518434e725ea3d2362013b6425cd92e3fca69b6be4895684a6ee1507fad877b14b1f2826824716083e9afc4a47b0d34aa8974550500000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="6400000002060102000034e40000000000000000050001000700000005000400000000000900020073797a32000000000500050002000000140007800800060000000000080013400000000015000300686173683a69706738929259138ceb74006300001aa958f131f8b7514888d40020902154b1b24e589df1b3dde6aae2cce56a9285b4ef5200b157da5111cb708f65d27a0b39f69edfa55d3e51a24fd1e47b113e0216d274451a620689402cedf16128eed92a4a28c95c982ca4f1a0c17ce90cef978933534e7dac94b6290c84431f9e1f41726700d9fad1c0aa805451837a38f00dabacbacfa130d96aa36b2f55d95090d1066200b479eb4a08694351e2bce7d329035741104725b0d9947ded42195e86759b7406bcc3df3019ff148f45f7ef75d5ff22e07f75b52f82dc81ee3cf7d0edb615c2b49cc7a2d8e8720c6efc4371f5fca2ddc66cc1fdc9c23da66d4a84f8c71d5b725f84c891c7a25de4abfbeebe6b9d1a21be2cc8276b43f68d34c7a91f4a8a5c75ff1de287c514de906d6dd267b6b06dacce77d592ba349013e32e74aa7a2bd3f51d19a7954a31e62790a161f1d4160248ab0e30"], 0x64}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r0}, 0x8) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/163, 0xa3}], 0x3) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000001000000400185a000006f28abf13d7f25170c0f91a7130051100000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0504551e0d00400000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='afs_cb_call\x00', r5, 0x0, 0x6}, 0x18) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r6, r5, 0x2f, 0x34, 0x0, @void, @void, @void, @value}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xd) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) (async, rerun: 64) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001340), &(0x7f0000001500)=0x8) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0}, 0x4050) 4.782241808s ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "000500ffffffffff", "9d042411fa938089c72994d2c0d83d25cf6af6da585eeb6a00000000000000f1", "0b5cc422"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4bb802bd50aaa3c4", "9608b5a451280d92e2c8ff798f2a99db", "2c1062f6", "0f5be1016d9dec8f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a929ab3fd5ed7db6", "3c3d1a06246538aa5ff8577dd349ab7c", "218d79c5", "eaf90dc01456b3d7"}, 0x28) 2.449307409s ago: executing program 2 (id=1820): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="9a82caf91ee84b53e65ecd5d1927d04e239a7931abfb7621830eae0f8cd443a89b0fdfd95faa8d5dabf11b966a3696673d9672db379c7eba045d1fe23df42131a735185e81b0304ef46d643a4cc7d6e5821c625d50da1a852a8c893d026e64f8faf34d152f71775f9467cc5da37aa097f9cef3c4a24a3489da3e61509f1ded4634167b62a00ac1b38ceed74171cd140e49498e8a72e3fcd859db71"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$netlink(0x10, 0x3, 0x1a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x4, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44050000080a03000000000000000000030000040c0006400000000000000002080009400000000108000b40000000010900010073797a31000000000c0006400000000000000005f40404800c000180080001006e617400ec01018008000100636d7000e00102800800024000000000100003800c000280080003400000000408000240000000040800014000000011b401038028000280080003400000000108000340000000030900020073797a310000000008000180fffffffcf50001009c8bca6e494f8596e377fe143a951a92152da19a3b0ec2e55d5c969ef62914df36eb1d0391ecc2b5349526dd2bd5c9ce4dec4de34965978bb18f5a2729de3a6d4ff2c3e1788e86994430dbd88805b64928629fe30eec702c16145b083f11ccc627bba32345ce2d508bf43bdfeb39273a0b796c9a7c69024ade58870ace2b774997558571b3dfe0fa14449f790834a6fe157d0435c7700f54ed0334a3c3c2f0f649dc984aca7e70a1e270f7ac49626d58ec6409b2f900c25baf3f1650c779a906a3260b5b5c3b2d4538862dd03b30102f06746b140560bdf315557941932d9ebe4a3839e81fdeb0875137e8683b6a7a8d4c0000008f000100ff43603379d0a44ac5166b4eb21335f934aa4503e69a6865a1ff0cd45b157616ccc9ccbe0de76b8c02429df2b8e05b9ad138a9ccb82a6f4733032de488ad6499b00eb5a9d4d6400c83c7c496cf720cf07c0ac4a8a7f188ce9cadc07131d5b913f2cab8b9503934e526039dac438b1f083930f71e403d18e75dce4cd7f74c98bbc90346d7a3edbb759336b34410125200100001800b00010074756e6e656c0000100001800900010068617368000000001c0001800b00010064796e73657400000c0002800800034000000000880201800a00010072616e676500000078020280040003800800014000000016c40004805400028008000180fffffffb0900020073797a31000000000900020073797a300000000008000180ffffffff080003400000000308000180fffffffd08000180fffffffe080003400000000108000340000000033c000100a1fbcfe7ac1c0a1c61662984fce433b652d618d96701fd0723f27a9fda13c1a24b0aad0b2f8a78eb9b27c1dcd61f6d7e0637e6c44c380e69300002800900020073797a320000000008000180fffffffc0800034000000002080003400000000308000180fffffffd0800024000000000940104801c0002800900020073797a30000000000900020073797a32000000005900010077a63ec9c58b469b8af1ce47dc7e9d6ed06d29ac7628302e046972482dee06675042b80747b2b5d828c1d191b2e7d6ab2117e09e0ff069d861d0846f4dca700930759a8efa74406d493ce25e621f9c2745c83341c200000004000100e60001008809ed5d38ccdd08ea721ca85115767273bf3f43018cb04c2d8cdec5d7b15875f930387c3e01b9c2fc02954baf8e05e7ce351d1bd630879f2a9fe965428e6d08eb2c5c9d88b695ad4f90bdf2bb407186f3426e1f923c3acd5f68ad8d2cc683d36cf12a005d360896098bbdadd7101d0afef2ed14ab07ebe407b90b6b6bd8717b1ba9025f9ad24d45985f6500cff49eeddc404862638ef6879e85a4d2cc44c093437c07e4208e9a878e04b26d9902c54602f58264dbc80ab6a4abca74651d05e475796f07d1f225e7dc64a14a776394f3966cc37201d0708c1413e78d37afe800000c00028008000340000000021f00010028351021ea0528e2944d1c16a2c3c3163cc35c96e2a978d961b735000800024000000000140001800e000100636f6e6e6c696d6974000000207c8d7a4b1d7c0daa43d60001800e000100627974656f726465720000000c00028008000540000000a308000940000000021400000011000100000000000000000025570e8f254b38e0bf2142d6ef611df313270daf9c9c5f28585555df89e4e8f085cc5681e8c6e3a64a22e22f0a307f8a4ae85fe0789bc0942c8ef5824887a0322a3f6b140a07bd88466522dd74c3ca78512860e0bad2487075ae5693b7009b076428fff0eb55f826eb416e9423231da22ec05d0df67cec9f8874f84fbefa923fd2f1c880ae0c8984e810c91b19f87cf2ee0c3f6f27a345729d874bace22920ec3214cb19748a4e188b3238880f8d"], 0x56c}, 0x1, 0x0, 0x0, 0x51}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.335223971s ago: executing program 4 (id=1821): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.303396009s ago: executing program 4 (id=1822): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) (async) r1 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000001c0)=0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x458, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r6, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x158, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x908}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x48000) syz_init_net_socket$ax25(0x3, 0x5, 0xce) 1.205470027s ago: executing program 2 (id=1823): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="480000002e000100000000000000000004000080340018802d001c800800cf00", @ANYRES32=0x0, @ANYBLOB="f3cc50fe634d094ec09b27ebad7974a937072cfa35788800"/36], 0x48}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.101396205s ago: executing program 2 (id=1824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x10001, 0x4, 0xb, 0x798, 0xc}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) 913.481163ms ago: executing program 2 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x2c, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0x7, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@empty}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28000}, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x3, 0x8, 0x6}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x55ebed23ccbb8744}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x14008000}, 0x48800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) 845.242814ms ago: executing program 4 (id=1826): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000080000000000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="3e201a5270a68eb95963e205129474b94262d5cf5b937b473a2a380bbe4c8ad97a81509488adda117321859db8d738134d18e676286a591dd58399388a41e4ad39cbff1df6cbbd2386a51b69ede51ce2cc89217bc7e1f26cca4f6b9423a85aec98c76ba21480332da936d579fe02548102a27e7ea396764ef755a20c8427e4554b4cc6f844ff56fda78b44f358df301bdff76da8a9176708d9ba50359c311c859d8c2be202d47d6abca76fc864eab36328a2bc6ed894e27076b8651db801569f3a3c04d4767b6da50c25412ad47307e6c81c53c7c81ca551e37fe5c1b99dff1fe550e9ece71247099b3eb89c7fa568", 0xef}, {&(0x7f0000000000)="01a329be5cc9bcb7", 0x8}, {&(0x7f0000000080)="572a64248bf9ca42c52e281b02f14f41ad9b897d91faecad97e3b7ccc99c35f022debe72c72f2131fc25e469a84d0d285a2a123f0a59937e23a7682d1b280178f2226d75ab428a6e4284bded40653902ba9775c0ac1e52988469d390c2fd52afd4da43d9c1024689c6", 0x69}, {&(0x7f0000000400)="70743c2e4fdc26b7d33c5f9f5e8ef5c12188c5ffda7534b581047cd806af97a0e8690be1db50201db4f3b746318909dc120644fc290add079f5be27d8ee03153c615827bfd2b3162093863dfcd336b1d312bfd901223566c8873015aa9933019c5c33f51d850badfd2311e613b50232b0ae390870ae1ee530c0db1947824eac827705995853f67b86694241eda11ef181237de55c8564c42ba27368bc5f55b3a1b1a8895dd9c8e48bc7282cf35b42884f51de929c40b71b64f2feacc80a560b96e22b947fafbd896d1a45898f65c6e52c11b8379d9d5ebbf0a9a7aef7510009b98e4d29a4bdfbab0cb50273dc53bcde7e3", 0xf1}, {&(0x7f0000000200)="e0a9d695dbff8ef9263dc23672c80fe7248e1da5ae915dd9050e666f2a7c3389b92957a80868c50d7a70021746be409d38edc34d9cf82ce73224841b3920f34dc5898aeb1dd2e982035410aef77cf42a180cd666281b23c36ffaaa81be5a392ad6e9c4f8cdab4c", 0x67}, {&(0x7f0000000500)="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", 0xfb}], 0x6}, 0x40) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007065574d000000000000000071100200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000080000000000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="3e201a5270a68eb95963e205129474b94262d5cf5b937b473a2a380bbe4c8ad97a81509488adda117321859db8d738134d18e676286a591dd58399388a41e4ad39cbff1df6cbbd2386a51b69ede51ce2cc89217bc7e1f26cca4f6b9423a85aec98c76ba21480332da936d579fe02548102a27e7ea396764ef755a20c8427e4554b4cc6f844ff56fda78b44f358df301bdff76da8a9176708d9ba50359c311c859d8c2be202d47d6abca76fc864eab36328a2bc6ed894e27076b8651db801569f3a3c04d4767b6da50c25412ad47307e6c81c53c7c81ca551e37fe5c1b99dff1fe550e9ece71247099b3eb89c7fa568", 0xef}, {&(0x7f0000000000)="01a329be5cc9bcb7", 0x8}, {&(0x7f0000000080)="572a64248bf9ca42c52e281b02f14f41ad9b897d91faecad97e3b7ccc99c35f022debe72c72f2131fc25e469a84d0d285a2a123f0a59937e23a7682d1b280178f2226d75ab428a6e4284bded40653902ba9775c0ac1e52988469d390c2fd52afd4da43d9c1024689c6", 0x69}, {&(0x7f0000000400)="70743c2e4fdc26b7d33c5f9f5e8ef5c12188c5ffda7534b581047cd806af97a0e8690be1db50201db4f3b746318909dc120644fc290add079f5be27d8ee03153c615827bfd2b3162093863dfcd336b1d312bfd901223566c8873015aa9933019c5c33f51d850badfd2311e613b50232b0ae390870ae1ee530c0db1947824eac827705995853f67b86694241eda11ef181237de55c8564c42ba27368bc5f55b3a1b1a8895dd9c8e48bc7282cf35b42884f51de929c40b71b64f2feacc80a560b96e22b947fafbd896d1a45898f65c6e52c11b8379d9d5ebbf0a9a7aef7510009b98e4d29a4bdfbab0cb50273dc53bcde7e3", 0xf1}, {&(0x7f0000000200)="e0a9d695dbff8ef9263dc23672c80fe7248e1da5ae915dd9050e666f2a7c3389b92957a80868c50d7a70021746be409d38edc34d9cf82ce73224841b3920f34dc5898aeb1dd2e982035410aef77cf42a180cd666281b23c36ffaaa81be5a392ad6e9c4f8cdab4c", 0x67}, {&(0x7f0000000500)="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", 0xfb}], 0x6}, 0x40) (async) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007065574d000000000000000071100200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 662.911569ms ago: executing program 4 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x88f7, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x2e) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) 593.505248ms ago: executing program 2 (id=1828): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) 478.616534ms ago: executing program 2 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000100000008000100000082"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000100000008000100000082"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) (async) 400.69191ms ago: executing program 4 (id=1830): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0xdcc2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xc, 0x9, 0x6c4d}) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "2fa8ff8d27cedcdc9dac1f76044a3c852a49a47984de2b01c4e104752efc2313", 0x4, 0x3ff, 0x80000000, 0x1}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x0, 0x10, 0x101, 0x5, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@lsrr={0x83, 0x1b, 0x7a, [@dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100, @local, @remote, @private=0xa010101, @remote]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) r5 = openat$cgroup_ro(r2, &(0x7f00000004c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xc2, &(0x7f0000000200)=""/194, 0x41000, 0x70, '\x00', r3, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x8, 0xde4, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r2, r4, r2, r5], &(0x7f0000000540)=[{0x3, 0x4, 0x1, 0x4}, {0x0, 0x2, 0x3, 0x6}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x5, 0x0, 0x1}, {0x5, 0x4, 0xd, 0xc}, {0x3, 0x2, 0xf, 0xa}], 0x10, 0x4, @void, @value}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1b0, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xf862}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fe5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x9}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0x2, 0x5}, {0x7, 0xf}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000a40)={@private=0xa010101, @loopback, 0x0, "9bd632f9ca2b292468b82038d77e0526775864f6a70f4ea58a655f64ccb1f5b7", 0x4, 0x1, 0x20000000, 0x8}, 0x3c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x60002014}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x128, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f267c3722829999e6056e726f3e321adcd72f9c62e825eff"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc778895c6a5cb2e45989d742b7f3e5146adeebc9fdfaf9f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0ec43277e49e1ba8cda828127062ccf62a79be6185aa8d28"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e6d9c3e84a5d7c3eeb580d95581bc6ea8ec31fad10c0fdc"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4fcfe5e1795dae5ea924174c4e9869f4311ae4cfe881686a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008000}, 0x8005) r9 = accept$netrom(r5, &(0x7f0000000cc0)={{0x3, @default}, [@default, @bcast, @netrom, @remote, @remote, @rose, @null, @rose]}, &(0x7f0000000d40)=0x48) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000d80)={'veth1_to_hsr\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000dc0)={0x3, [0x3, 0x4, 0x7]}, &(0x7f0000000e00)=0xa) connect$netrom(0xffffffffffffffff, &(0x7f0000000e40)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48) connect$netrom(r5, &(0x7f0000000ec0)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f80), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r11, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) r12 = accept$nfc_llcp(r2, 0x0, &(0x7f0000001080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001480)={'batadv0\x00', 0x0}) sendmsg$inet(r12, &(0x7f00000015c0)={&(0x7f00000010c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001100)="9d8d1c5000d48da45febb67ea190295bee82ccf2ed8d98565f4c5cd6cdc3d435fd74a4ecfa2fd87c879e364d526daa52bb45c266ce65fdcb5ad60be24ff4076b6297f28189549e02c3286758b90a1b70ca0ec5600fbf2f3fb54f01618039f2198549", 0x62}, {&(0x7f0000001180)="e92dd3c8d3cf7fef3b89a8e3c3f9f80b15eecf0c5384df9bd8523a1712b3a2c43da6f184bda1ad37d3a91c42ae5ded0bdf26715b0c4ed5ab0defd06bf8127d3326d09c1bf366407863954912e0d2e475a98c81c99df93be96b20f0773cd0a15349133e777e054f5dec0ca2466a57065d440d02a3f24ecc423c5f7fd0d345f16007cc951044d2bd7e09a91e8f68efaaec70abdfe9e0e18430fcccb55007e6a5e586fdb4615a9a6c1c311c6d324213e2a2c355413ff5dd", 0xb6}, {&(0x7f0000001240)="678b45f99bad5332e1373b1aae9950c4ad2922c078a17808b42469c34a14250b45fd286b23deed481e5c4a769a831d8e21a6c37d8a0346d760facafc581632fd948c3d69397470bc4135d3fef117caaeba0f29404ef34492b945c62df552a84b4aab1891af1a7335e86decf646c519df7d532e7ee9ce4d603d5c30b3dd0d6851b691eebf9c704ed99baf443a2e87da477d4ef5721f2f337e59ddc7cfb45b3183d12dc4cc", 0xa4}, {&(0x7f0000001300)="56f94026f999a1323218ad84e0f24915cde931c47ce82fcf68be57333d4bbd6e6c1b6fc2508c", 0x26}, {&(0x7f0000001340)="dc3eb340797d", 0x6}, {&(0x7f0000001380)="f8734b9ef7e52add054b9c1aa981ed5ff457685aa4b7ef793779e27ee8d33efee6dac568b693ddfe2917d9f733d85818af261706ffc1718cb968cc094f31b1d30d2e8987bb193b118e871a14b125194b9847e0ad22d90d70e43146829752df111bcf47cb747debf0bf33dfcd8ad8", 0x6e}], 0x6, &(0x7f00000014c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr=0x64010102, @rand_addr=0x64010101}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x1, [{0x1, 0xc, "459cafc0cd600298baf2"}, {0x7, 0x5, "4fa397"}, {0x5, 0x6, "b6142505"}, {0x6, 0x5, "2fc038"}, {0x7, 0x9, "662a2003798500"}, {0x6, 0x12, "767b10263770f8d64736c5beaca3671d"}]}, @noop, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7557}}], 0xf8}, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8011) 0s ago: executing program 4 (id=1831): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r2, 0x0, 0x3, 0x9) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x1a) kernel console output (not intermixed with test programs): evsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.313105][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.320986][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.374187][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.382069][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.416114][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.486337][T11903] veth0_vlan: entered promiscuous mode [ 303.500308][T11903] veth1_vlan: entered promiscuous mode [ 303.556272][T11903] veth0_macvtap: entered promiscuous mode [ 303.567315][T11903] veth1_macvtap: entered promiscuous mode [ 303.586767][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.597697][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.608960][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.619961][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.629917][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.640941][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.650925][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.661855][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.674809][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.692354][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.710373][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.720763][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.731636][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.742546][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.753441][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.775802][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.786704][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.797513][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.828406][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.856519][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 303.857162][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.906174][T11903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.925920][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 303.942306][T11903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.951067][T11903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.970062][T11903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.039818][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.231271][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.241770][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.251910][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.260273][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.271942][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.281084][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.376758][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.450933][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.473280][T12066] syzkaller0 speed is unknown, defaulting to 1000 [ 304.581457][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.596760][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.725034][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.752915][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.762858][T12066] chnl_net:caif_netlink_parms(): no params data found [ 304.785060][ T35] bridge_slave_1: left allmulticast mode [ 304.790804][ T35] bridge_slave_1: left promiscuous mode [ 304.797440][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.808369][ T35] bridge_slave_0: left allmulticast mode [ 304.815562][ T35] bridge_slave_0: left promiscuous mode [ 304.821281][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.095702][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 305.126281][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 305.396360][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.411543][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.424411][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.443401][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.452858][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.460251][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.719684][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.734104][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.747115][ T35] bond0 (unregistering): Released all slaves [ 305.964362][T12098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 306.175311][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.187160][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.204351][T12066] bridge_slave_0: entered allmulticast mode [ 306.213451][T12066] bridge_slave_0: entered promiscuous mode [ 306.252689][T12102] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1562'. [ 306.351327][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.362418][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.370390][T12066] bridge_slave_1: entered allmulticast mode [ 306.378300][T12066] bridge_slave_1: entered promiscuous mode [ 306.403594][ T54] Bluetooth: hci0: command tx timeout [ 306.429239][T12086] syzkaller0 speed is unknown, defaulting to 1000 [ 306.437992][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.466952][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.513279][ T35] hsr_slave_0: left promiscuous mode [ 306.522419][ T35] hsr_slave_1: left promiscuous mode [ 306.546128][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.559549][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.586868][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.594536][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.625933][ T35] veth1_macvtap: left promiscuous mode [ 306.631609][ T35] veth0_macvtap: left promiscuous mode [ 306.637408][ T35] veth1_vlan: left promiscuous mode [ 306.643080][ T35] veth0_vlan: left promiscuous mode [ 307.156901][ T35] team0 (unregistering): Port device team_slave_1 removed [ 307.213672][ T35] team0 (unregistering): Port device team_slave_0 removed [ 307.500006][ T54] Bluetooth: hci1: command tx timeout [ 307.810525][T12066] team0: Port device team_slave_0 added [ 307.850459][T12066] team0: Port device team_slave_1 added [ 307.912132][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.922723][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.948998][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.962044][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.969108][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.995646][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.082558][T12066] hsr_slave_0: entered promiscuous mode [ 308.089350][T12066] hsr_slave_1: entered promiscuous mode [ 308.095940][T12066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.103814][T12066] Cannot create hsr debugfs directory [ 308.290293][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 308.317783][T12086] chnl_net:caif_netlink_parms(): no params data found [ 308.472500][ T54] Bluetooth: hci0: command tx timeout [ 308.707288][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.717683][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.726752][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.754981][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.763743][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.771165][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.968648][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.161467][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.321843][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.361302][T12086] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.368759][T12086] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.386900][T12086] bridge_slave_0: entered allmulticast mode [ 309.398038][T12086] bridge_slave_0: entered promiscuous mode [ 309.406399][T12086] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.413978][T12086] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.421540][T12086] bridge_slave_1: entered allmulticast mode [ 309.429022][T12086] bridge_slave_1: entered promiscuous mode [ 309.510698][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.549987][T12147] bridge0: port 1(vlan3) entered blocking state [ 309.556696][T12147] bridge0: port 1(vlan3) entered disabled state [ 309.563577][T12147] vlan3: entered allmulticast mode [ 309.570798][T12147] vlan3: left allmulticast mode [ 309.575793][ T5845] Bluetooth: hci1: command tx timeout [ 309.591817][T12129] syzkaller0 speed is unknown, defaulting to 1000 [ 309.631781][T12086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.679006][T12086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.770707][T12086] team0: Port device team_slave_0 added [ 309.823617][T12086] team0: Port device team_slave_1 added [ 309.981538][T12086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.990400][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.026171][T12160] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 310.040203][T12086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.090099][T12066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.117788][T12086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.125168][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.153434][T12086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.171771][T12163] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1577'. [ 310.185267][T12162] team0: Port device wg2 added [ 310.195422][T12066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.205871][T12066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.291435][T12166] netlink: 'syz.2.1578': attribute type 32 has an invalid length. [ 310.307308][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.347841][T12066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.481102][T12170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.491379][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.532719][ T5845] Bluetooth: hci0: command tx timeout [ 310.561014][T12086] hsr_slave_0: entered promiscuous mode [ 310.587533][T12086] hsr_slave_1: entered promiscuous mode [ 310.610833][T12086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.619315][T12086] Cannot create hsr debugfs directory [ 310.660479][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.853687][ T5845] Bluetooth: hci2: command tx timeout [ 310.856823][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.065066][T12129] chnl_net:caif_netlink_parms(): no params data found [ 311.101060][T12189] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1585'. [ 311.301728][ T35] bridge_slave_1: left allmulticast mode [ 311.312381][ T35] bridge_slave_1: left promiscuous mode [ 311.318217][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.357782][T12196] can: request_module (can-proto-3) failed. [ 311.364870][ T35] bridge_slave_0: left allmulticast mode [ 311.370731][ T35] bridge_slave_0: left promiscuous mode [ 311.377754][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.382388][ T29] audit: type=1107 audit(1735185866.620:2): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÚAFñ' [ 311.403273][ T35] bridge_slave_1: left allmulticast mode [ 311.409082][ T35] bridge_slave_1: left promiscuous mode [ 311.415682][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.464513][ T35] bridge_slave_0: left allmulticast mode [ 311.482268][ T35] bridge_slave_0: left promiscuous mode [ 311.488035][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.653460][ T5845] Bluetooth: hci1: command tx timeout [ 311.774608][T12217] netlink: 'syz.2.1592': attribute type 62 has an invalid length. [ 311.998324][T12221] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1593'. [ 312.008722][T12221] openvswitch: netlink: Flow actions attr not present in new flow. [ 312.382872][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.395189][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.406392][ T35] bond0 (unregistering): Released all slaves [ 312.548121][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.560806][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.573602][ T35] bond0 (unregistering): Released all slaves [ 312.616804][ T5845] Bluetooth: hci0: command tx timeout [ 312.671144][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 312.864003][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.871267][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.879432][T12129] bridge_slave_0: entered allmulticast mode [ 312.887252][T12129] bridge_slave_0: entered promiscuous mode [ 312.930247][T12227] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 312.932583][ T5845] Bluetooth: hci2: command tx timeout [ 312.947866][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.975408][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.000973][T12129] bridge_slave_1: entered allmulticast mode [ 313.025575][T12129] bridge_slave_1: entered promiscuous mode [ 313.187151][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.210137][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.241359][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.342004][T12129] team0: Port device team_slave_0 added [ 313.348318][T12238] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 313.359361][T12237] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 313.369935][T12129] team0: Port device team_slave_1 added [ 313.453937][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.591297][T12247] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 313.592849][T12248] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 313.615816][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.623390][T12247] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 313.631782][T12248] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 313.633463][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.667193][T12248] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1601'. [ 313.683463][T12247] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1601'. [ 313.712508][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.726758][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.740563][ T5845] Bluetooth: hci1: command tx timeout [ 313.740599][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.757145][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.796090][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.822060][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.829228][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.896081][ T35] hsr_slave_0: left promiscuous mode [ 313.933462][ T35] hsr_slave_1: left promiscuous mode [ 313.941495][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.952971][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.963345][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.970834][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.995374][T12259] delete_channel: no stack [ 314.001244][ T35] hsr_slave_0: left promiscuous mode [ 314.032654][ T35] hsr_slave_1: left promiscuous mode [ 314.053744][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.061263][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.074529][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.082744][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.157291][ T35] veth1_macvtap: left promiscuous mode [ 314.165119][ T35] veth0_macvtap: left promiscuous mode [ 314.171119][ T35] veth1_vlan: left promiscuous mode [ 314.177184][ T35] veth0_vlan: left promiscuous mode [ 314.194542][ T35] veth1_macvtap: left promiscuous mode [ 314.202368][ T35] veth0_macvtap: left promiscuous mode [ 314.208015][ T35] veth1_vlan: left promiscuous mode [ 314.229219][ T35] veth0_vlan: left promiscuous mode [ 314.388589][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 314.853241][ T35] team0 (unregistering): Port device team_slave_1 removed [ 314.910931][ T35] team0 (unregistering): Port device team_slave_0 removed [ 315.012605][ T5845] Bluetooth: hci2: command tx timeout [ 315.819547][ T35] team0 (unregistering): Port device team_slave_1 removed [ 315.867226][ T35] team0 (unregistering): Port device team_slave_0 removed [ 316.434893][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.442048][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.622841][T12129] hsr_slave_0: entered promiscuous mode [ 316.635279][T12129] hsr_slave_1: entered promiscuous mode [ 316.661597][T12129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.669665][T12129] Cannot create hsr debugfs directory [ 316.684383][T12086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.696997][T12086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.744156][T12086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.826149][T12086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.093905][ T5845] Bluetooth: hci2: command tx timeout [ 317.189448][T12299] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1615'. [ 317.219960][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 317.340975][ T5883] hid-generic 0005:07C0:0058.0003: item fetching failed at offset 0/1 [ 317.356550][ T5883] hid-generic 0005:07C0:0058.0003: probe with driver hid-generic failed with error -22 [ 317.365109][T12086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.457402][T12086] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.490550][T12086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.509092][T12086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.558142][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.565349][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.591239][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.598417][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.610679][T12306] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.636937][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.757991][T12066] veth0_vlan: entered promiscuous mode [ 317.803482][T12066] veth1_vlan: entered promiscuous mode [ 317.913972][T12066] veth0_macvtap: entered promiscuous mode [ 317.957180][T12066] veth1_macvtap: entered promiscuous mode [ 318.020668][T12129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.040769][T12129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.064202][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.078140][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.096903][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.120387][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.135081][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.145455][T12129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.168610][T12086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.180169][T12129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.264982][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.291894][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.319800][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.348943][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.362586][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.383593][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.403381][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.424796][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 318.441650][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 318.453756][T12326] netlink: 'syz.4.1622': attribute type 3 has an invalid length. [ 318.482121][T12066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.491429][T12066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.511836][T12066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.521954][T12066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.721841][T12336] ip6t_rpfilter: unknown options [ 318.755305][T12086] veth0_vlan: entered promiscuous mode [ 318.818994][T12086] veth1_vlan: entered promiscuous mode [ 318.877858][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.887774][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.989354][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.997973][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.005512][T12086] veth0_macvtap: entered promiscuous mode [ 319.039917][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.086381][T12086] veth1_macvtap: entered promiscuous mode [ 319.166375][T12129] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.201824][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.213676][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.232307][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.256997][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.269082][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.281709][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.294562][T12086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.392661][T12344] syzkaller0 speed is unknown, defaulting to 1000 [ 319.441783][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.472461][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.484524][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.502446][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.522381][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.542323][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.565968][T12086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.579967][T12086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.591998][T12086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.616339][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.623563][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.681059][T12086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.702390][T12086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.713467][T12086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.722524][T12086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.825662][ T3443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.892400][ T54] Bluetooth: hci2: command tx timeout [ 320.020775][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.028176][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.085354][ T3443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.288949][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.301923][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.340237][ T3443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.387495][T11379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.400021][T11379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.521056][T12129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.623686][ T3443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.677675][T12129] veth0_vlan: entered promiscuous mode [ 320.690598][T12129] veth1_vlan: entered promiscuous mode [ 320.747034][T12129] veth0_macvtap: entered promiscuous mode [ 320.759785][T12129] veth1_macvtap: entered promiscuous mode [ 320.890767][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.922483][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.962353][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.983666][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.015104][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.042364][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.062797][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.082495][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.105521][T12129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.118771][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.171990][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.201978][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.222408][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.242459][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.257431][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.269277][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.280131][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.290037][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.300792][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.311964][T12129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.323416][ T3443] bridge_slave_1: left allmulticast mode [ 321.329378][ T3443] bridge_slave_1: left promiscuous mode [ 321.341863][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.343880][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.363279][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.371649][ T3443] bridge_slave_0: left allmulticast mode [ 321.377742][ T3443] bridge_slave_0: left promiscuous mode [ 321.383954][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.391159][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.400741][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.418084][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.429096][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.852735][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.903075][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.931863][ T3443] bond0 (unregistering): Released all slaves [ 321.980668][T12129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.002263][T12129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.022331][T12129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.031116][T12129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.146423][T12370] syzkaller0 speed is unknown, defaulting to 1000 [ 322.253404][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 322.266364][T12386] netlink: 'syz.2.1639': attribute type 11 has an invalid length. [ 322.302114][T12386] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1639'. [ 322.315167][T12384] vxcan1: tx drop: invalid da for name 0xfffffffffffffffa [ 322.393913][T12391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1638'. [ 322.454903][T12394] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 322.463304][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 322.519695][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.531911][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.549804][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.572116][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.580735][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.592980][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.678323][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.690928][ T3443] hsr_slave_0: left promiscuous mode [ 322.703844][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.731136][ T3443] hsr_slave_1: left promiscuous mode [ 322.737708][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.745288][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.754914][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.762531][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.790579][ T3443] veth1_macvtap: left promiscuous mode [ 322.796410][ T3443] veth0_macvtap: left promiscuous mode [ 322.802206][ T3443] veth1_vlan: left promiscuous mode [ 322.807817][ T3443] veth0_vlan: left promiscuous mode [ 323.507207][ T5845] Bluetooth: hci0: command tx timeout [ 323.596645][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 323.661661][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 324.204607][T12413] netem: incorrect ge model size [ 324.214805][T12413] netem: change failed [ 324.329726][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.338157][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.354911][T12399] syzkaller0 speed is unknown, defaulting to 1000 [ 324.585672][T12370] chnl_net:caif_netlink_parms(): no params data found [ 324.693504][ T5845] Bluetooth: hci1: command tx timeout [ 324.811710][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1652'. [ 325.000817][T12370] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.031937][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.050286][T12370] bridge_slave_0: entered allmulticast mode [ 325.057518][T12370] bridge_slave_0: entered promiscuous mode [ 325.067726][T12370] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.075339][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.082858][T12370] bridge_slave_1: entered allmulticast mode [ 325.089902][T12370] bridge_slave_1: entered promiscuous mode [ 325.118613][T12464] sit0: entered promiscuous mode [ 325.175698][T12464] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 325.185063][T12469] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 325.222521][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 325.232533][T12464] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1655'. [ 325.282735][T12399] chnl_net:caif_netlink_parms(): no params data found [ 325.436792][ T3443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.463401][T12370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.515946][ T3443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.539435][T12370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.572394][ T5845] Bluetooth: hci0: command tx timeout [ 325.613546][ T3443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.631279][T12370] team0: Port device team_slave_0 added [ 325.646042][T12370] team0: Port device team_slave_1 added [ 325.683966][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.691098][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.698660][T12399] bridge_slave_0: entered allmulticast mode [ 325.706641][T12399] bridge_slave_0: entered promiscuous mode [ 325.714799][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.721902][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.731818][T12399] bridge_slave_1: entered allmulticast mode [ 325.740272][T12399] bridge_slave_1: entered promiscuous mode [ 325.767188][ T3443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.781917][T12370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.789299][T12370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.816951][T12370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.831121][T12370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.838200][T12370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.868316][T12370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.938042][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.983222][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.032089][ T3443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.054572][T12370] hsr_slave_0: entered promiscuous mode [ 326.061315][T12370] hsr_slave_1: entered promiscuous mode [ 326.068604][T12370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.076810][T12370] Cannot create hsr debugfs directory [ 326.140707][ T3443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.164989][T12399] team0: Port device team_slave_0 added [ 326.182713][T12399] team0: Port device team_slave_1 added [ 326.230587][ T3443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.266423][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.277009][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.308046][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.338893][ T3443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.355720][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.364069][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.403841][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.496722][T12399] hsr_slave_0: entered promiscuous mode [ 326.504812][T12399] hsr_slave_1: entered promiscuous mode [ 326.511056][T12399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.520216][T12399] Cannot create hsr debugfs directory [ 326.614334][ T3443] bridge_slave_1: left allmulticast mode [ 326.620049][ T3443] bridge_slave_1: left promiscuous mode [ 326.632217][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.641106][ T3443] bridge_slave_0: left allmulticast mode [ 326.648344][ T3443] bridge_slave_0: left promiscuous mode [ 326.654631][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.668143][ T3443] bridge_slave_1: left allmulticast mode [ 326.674441][ T3443] bridge_slave_1: left promiscuous mode [ 326.680191][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.689221][ T3443] bridge_slave_0: left allmulticast mode [ 326.695847][ T3443] bridge_slave_0: left promiscuous mode [ 326.701545][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.772957][ T5845] Bluetooth: hci1: command tx timeout [ 327.228515][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 327.453661][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.463637][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.486652][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.503401][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.512273][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.519827][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.652413][ T5845] Bluetooth: hci0: command tx timeout [ 327.689092][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.703761][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.721539][ T3443] bond0 (unregistering): Released all slaves [ 327.879663][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.891082][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.904196][ T3443] bond0 (unregistering): Released all slaves [ 328.058388][T12486] syzkaller0 speed is unknown, defaulting to 1000 [ 328.115362][T12491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1660'. [ 328.574984][T12486] chnl_net:caif_netlink_parms(): no params data found [ 328.638155][ T3443] hsr_slave_0: left promiscuous mode [ 328.645801][ T3443] hsr_slave_1: left promiscuous mode [ 328.652001][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.660065][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.668310][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.676384][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.689415][ T3443] hsr_slave_0: left promiscuous mode [ 328.696494][ T3443] hsr_slave_1: left promiscuous mode [ 328.702649][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.710109][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.721862][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.730018][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.774917][ T3443] veth1_macvtap: left promiscuous mode [ 328.780513][ T3443] veth0_macvtap: left promiscuous mode [ 328.786700][ T3443] veth1_vlan: left promiscuous mode [ 328.791999][ T3443] veth0_vlan: left promiscuous mode [ 328.798926][ T3443] veth1_macvtap: left promiscuous mode [ 328.804676][ T3443] veth0_macvtap: left promiscuous mode [ 328.810259][ T3443] veth1_vlan: left promiscuous mode [ 328.816066][ T3443] veth0_vlan: left promiscuous mode [ 328.852516][ T5845] Bluetooth: hci1: command tx timeout [ 329.050811][T12503] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 329.060367][T12503] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003 [ 329.543954][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 329.572724][ T5845] Bluetooth: hci2: command tx timeout [ 329.599462][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 329.732440][ T5845] Bluetooth: hci0: command tx timeout [ 330.531630][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 330.586806][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 330.932701][ T5845] Bluetooth: hci1: command tx timeout [ 331.232214][T12509] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1664'. [ 331.331762][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.349806][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.369780][T12486] bridge_slave_0: entered allmulticast mode [ 331.378165][T12486] bridge_slave_0: entered promiscuous mode [ 331.399201][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.431181][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.455025][T12486] bridge_slave_1: entered allmulticast mode [ 331.462060][T12486] bridge_slave_1: entered promiscuous mode [ 331.581171][T12370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.627306][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.645313][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.656698][ T5845] Bluetooth: hci2: command tx timeout [ 331.683753][T12370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.705383][T12370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.753947][T12522] netlink: 'syz.4.1667': attribute type 3 has an invalid length. [ 331.779611][T12486] team0: Port device team_slave_0 added [ 331.791023][T12486] team0: Port device team_slave_1 added [ 331.802698][T12370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.900826][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.919079][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.979173][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.003360][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.010550][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.072527][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.099655][T12399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.124926][T12399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.159082][T12399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.184138][T12531] veth0: entered promiscuous mode [ 332.241095][T12399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.253050][T12531] veth0: left promiscuous mode [ 332.341643][T12486] hsr_slave_0: entered promiscuous mode [ 332.348700][T12486] hsr_slave_1: entered promiscuous mode [ 332.359393][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.367280][T12486] Cannot create hsr debugfs directory [ 332.391062][T12536] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1672'. [ 332.408542][T12536] netlink: 'syz.2.1672': attribute type 9 has an invalid length. [ 332.600450][T12370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.640613][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1676'. [ 332.730048][T12370] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.794346][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.878904][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.886186][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.941036][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.948257][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.014766][T12399] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.119449][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.126670][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.150523][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 333.151366][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.166658][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.231504][T12370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.272721][T12370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.616447][T12486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.633220][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 333.688942][T12486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.732322][ T5845] Bluetooth: hci2: command tx timeout [ 333.767029][T12486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.873009][T12486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.930546][T12370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.956511][T12399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.196898][T12370] veth0_vlan: entered promiscuous mode [ 334.245116][T12399] veth0_vlan: entered promiscuous mode [ 334.264101][T12399] veth1_vlan: entered promiscuous mode [ 334.279312][T12592] : entered promiscuous mode [ 334.286512][T12370] veth1_vlan: entered promiscuous mode [ 334.374127][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.470560][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.479506][T12399] veth0_macvtap: entered promiscuous mode [ 334.527551][T12370] veth0_macvtap: entered promiscuous mode [ 334.567001][T12399] veth1_macvtap: entered promiscuous mode [ 334.587309][T12370] veth1_macvtap: entered promiscuous mode [ 334.624639][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.631812][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.656503][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.663710][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.699325][T12370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.710184][T12608] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.710254][T12370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.736790][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1687'. [ 334.746685][T12370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.757714][T12370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.770575][T12370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.791084][T12370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.812405][T12370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.827805][T12370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.839763][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 334.849810][T12613] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 334.860414][T12370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.872883][T12370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.896369][T12370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.907930][T12370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.933259][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.947993][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.962970][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.981418][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.991654][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.003763][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.021867][T12399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.055427][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.069640][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.080390][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.091630][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.103089][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.118046][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.128865][T12399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.139720][T12399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.151528][T12399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.162848][T12370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.171598][T12370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.198072][T12370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.220043][T12370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.273795][T12399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.296389][T12399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.311299][T12399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.329893][T12399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.370931][T12629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.581210][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.591305][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.701883][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.731472][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.812604][ T5845] Bluetooth: hci2: command tx timeout [ 335.867341][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.890382][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.908239][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.926064][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.931687][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.065601][T12486] veth0_vlan: entered promiscuous mode [ 336.116229][T12486] veth1_vlan: entered promiscuous mode [ 336.206311][T12656] xt_CT: No such helper "pptp" [ 336.283150][T12658] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 336.298453][T12658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 336.477111][ T3443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.540904][T12486] veth0_macvtap: entered promiscuous mode [ 336.575809][T12486] veth1_macvtap: entered promiscuous mode [ 336.699008][ T3443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.736002][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.758341][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.769896][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.780788][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.793219][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.813034][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.862642][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.874117][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.889254][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.946283][ T3443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.013183][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.047290][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.067269][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.082342][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.102524][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.122847][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.142121][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.163566][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.182229][T12486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.202211][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.203245][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.216000][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.225605][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.250391][ T3443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.263536][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.277197][T12486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.286525][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.299164][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.302282][T12486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.315631][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.326371][T12486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.343766][T12486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.421509][T12676] syzkaller0 speed is unknown, defaulting to 1000 [ 337.592395][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.600367][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.749881][ T3443] bridge_slave_1: left allmulticast mode [ 337.765116][ T3443] bridge_slave_1: left promiscuous mode [ 337.778409][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.817330][ T3443] bridge_slave_0: left allmulticast mode [ 337.823503][ T3443] bridge_slave_0: left promiscuous mode [ 337.829281][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.189332][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.218824][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.227912][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.249359][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.260053][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.274521][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.480128][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.492515][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.510065][ T3443] bond0 (unregistering): Released all slaves [ 338.522058][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.531131][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.643304][T12692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.797525][T12698] syzkaller0 speed is unknown, defaulting to 1000 [ 338.868165][T12692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.016832][T12692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.124224][T12692] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.168665][ T3443] hsr_slave_0: left promiscuous mode [ 339.202391][ T3443] hsr_slave_1: left promiscuous mode [ 339.208811][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.217382][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.226659][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.234434][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.270292][ T3443] veth1_macvtap: left promiscuous mode [ 339.276296][ T3443] veth0_macvtap: left promiscuous mode [ 339.282079][ T3443] veth1_vlan: left promiscuous mode [ 339.287706][ T3443] veth0_vlan: left promiscuous mode [ 339.412998][ T54] Bluetooth: hci0: command tx timeout [ 339.878607][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 339.934883][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 340.294639][ T54] Bluetooth: hci1: command tx timeout [ 340.490975][T12676] chnl_net:caif_netlink_parms(): no params data found [ 340.546583][T12692] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.604153][T12692] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.691520][T12692] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.728922][T12692] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.777675][T12698] chnl_net:caif_netlink_parms(): no params data found [ 340.819020][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.826381][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.833904][T12676] bridge_slave_0: entered allmulticast mode [ 340.840710][T12676] bridge_slave_0: entered promiscuous mode [ 340.871880][T12676] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.880097][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.887612][T12676] bridge_slave_1: entered allmulticast mode [ 340.895173][T12676] bridge_slave_1: entered promiscuous mode [ 340.964484][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.976843][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.039741][T12698] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.051374][T12698] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.059405][T12698] bridge_slave_0: entered allmulticast mode [ 341.066593][T12698] bridge_slave_0: entered promiscuous mode [ 341.161598][ T3443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.260862][T12676] team0: Port device team_slave_0 added [ 341.294966][T12676] team0: Port device team_slave_1 added [ 341.343915][T12698] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.351064][T12698] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.379900][T12722] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.389973][T12698] bridge_slave_1: entered allmulticast mode [ 341.422552][T12698] bridge_slave_1: entered promiscuous mode [ 341.493612][ T54] Bluetooth: hci0: command tx timeout [ 341.515054][ T3443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.526583][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.550625][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.559529][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.569689][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.577573][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.609972][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.611328][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.629422][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.636975][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.687576][T12728] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1712'. [ 341.756112][ T3443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.778483][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.792518][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.821414][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.841691][T12698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.889121][ T3443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.919831][T12698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.948067][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 341.969644][T12698] team0: Port device team_slave_0 added [ 341.995030][T12676] hsr_slave_0: entered promiscuous mode [ 342.001627][T12676] hsr_slave_1: entered promiscuous mode [ 342.010136][T12676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.018338][T12676] Cannot create hsr debugfs directory [ 342.040639][T12698] team0: Port device team_slave_1 added [ 342.051766][T12737] openvswitch: netlink: EtherType 50a is less than min 600 [ 342.064655][T12725] syzkaller0 speed is unknown, defaulting to 1000 [ 342.135379][T12698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.143024][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.169480][T12698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.195571][T12698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.203524][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.230610][T12698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.373291][ T54] Bluetooth: hci1: command tx timeout [ 342.384657][T12698] hsr_slave_0: entered promiscuous mode [ 342.391397][T12698] hsr_slave_1: entered promiscuous mode [ 342.398616][T12698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.406533][T12698] Cannot create hsr debugfs directory [ 342.491278][ T3443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.610647][ T3443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.733243][ T3443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.849029][ T3443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.924225][T12725] chnl_net:caif_netlink_parms(): no params data found [ 343.060692][ T3443] bridge_slave_1: left allmulticast mode [ 343.067698][ T3443] bridge_slave_1: left promiscuous mode [ 343.073678][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.089193][ T3443] bridge_slave_0: left allmulticast mode [ 343.098568][ T3443] bridge_slave_0: left promiscuous mode [ 343.105114][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.143719][ T3443] bridge_slave_1: left allmulticast mode [ 343.149460][ T3443] bridge_slave_1: left promiscuous mode [ 343.172433][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.203574][ T3443] bridge_slave_0: left allmulticast mode [ 343.209302][ T3443] bridge_slave_0: left promiscuous mode [ 343.225955][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.229194][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 343.489737][T12761] nbd: must specify a device to reconfigure [ 343.496999][T12762] nbd: must specify a device to reconfigure [ 343.573201][ T54] Bluetooth: hci0: command tx timeout [ 343.733582][ T5845] Bluetooth: hci2: command tx timeout [ 344.194406][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.206333][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.218393][ T3443] bond0 (unregistering): Released all slaves [ 344.352489][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.370287][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.382412][ T3443] bond0 (unregistering): Released all slaves [ 344.452443][ T54] Bluetooth: hci1: command tx timeout [ 344.577439][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.623384][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.630719][T12725] bridge_slave_0: entered allmulticast mode [ 344.646338][T12725] bridge_slave_0: entered promiscuous mode [ 344.671628][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.699889][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.727023][T12725] bridge_slave_1: entered allmulticast mode [ 344.751862][T12725] bridge_slave_1: entered promiscuous mode [ 344.899669][T12725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.925733][T12725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.047546][T12796] sctp: [Deprecated]: syz.4.1728 (pid 12796) Use of int in max_burst socket option deprecated. [ 345.047546][T12796] Use struct sctp_assoc_value instead [ 345.081327][T12676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.163373][T12676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.242500][T12725] team0: Port device team_slave_0 added [ 345.248840][T12676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.288103][T12725] team0: Port device team_slave_1 added [ 345.311969][T12676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.349008][T12725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.363347][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.394287][T12725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.509162][T12725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.517218][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.543707][T12725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.609518][ T3443] hsr_slave_0: left promiscuous mode [ 345.616044][ T3443] hsr_slave_1: left promiscuous mode [ 345.635836][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.644926][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.660109][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.675838][ T54] Bluetooth: hci0: command tx timeout [ 345.681460][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.699642][ T3443] hsr_slave_0: left promiscuous mode [ 345.705779][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 345.723397][ T3443] hsr_slave_1: left promiscuous mode [ 345.730446][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.749267][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.761291][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.776389][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.812993][ T54] Bluetooth: hci2: command tx timeout [ 345.829513][ T3443] veth1_macvtap: left promiscuous mode [ 345.835281][ T3443] veth0_macvtap: left promiscuous mode [ 345.841018][ T3443] veth1_vlan: left promiscuous mode [ 345.846927][ T3443] veth0_vlan: left promiscuous mode [ 345.862891][ T3443] veth1_macvtap: left promiscuous mode [ 345.868419][ T3443] veth0_macvtap: left promiscuous mode [ 345.882294][ T3443] veth1_vlan: left promiscuous mode [ 345.887674][ T3443] veth0_vlan: left promiscuous mode [ 346.539018][ T54] Bluetooth: hci1: command tx timeout [ 346.572429][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 346.625921][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 347.619009][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 347.674736][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 347.902506][ T54] Bluetooth: hci2: command tx timeout [ 348.240317][T12818] netlink: 'syz.4.1735': attribute type 15 has an invalid length. [ 348.249140][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 348.357896][T12822] netlink: 'syz.2.1736': attribute type 10 has an invalid length. [ 348.395576][T12824] sctp: [Deprecated]: syz.4.1737 (pid 12824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.395576][T12824] Use struct sctp_sack_info instead [ 348.415474][T12725] hsr_slave_0: entered promiscuous mode [ 348.433478][T12725] hsr_slave_1: entered promiscuous mode [ 348.453135][T12725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.472496][T12725] Cannot create hsr debugfs directory [ 348.480098][T12822] syz_tun: entered promiscuous mode [ 348.572892][T12826] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1738'. [ 348.799766][T12830] netlink: 'syz.2.1740': attribute type 28 has an invalid length. [ 348.803675][T12676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.816943][T12830] netlink: 'syz.2.1740': attribute type 3 has an invalid length. [ 348.824905][T12676] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.837959][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1740'. [ 348.855451][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.862681][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.885653][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.892861][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.022523][T12698] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.025263][T12842] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 349.045326][T12843] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 349.054082][T12840] netlink: 1344 bytes leftover after parsing attributes in process `syz.4.1742'. [ 349.094989][T12698] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.108412][T12698] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.152997][T12698] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.211202][T12843] bond0: (slave team0): Releasing backup interface [ 349.230379][T12843] batman_adv: batadv0: Adding interface: team0 [ 349.237719][T12843] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.293160][T12843] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 349.617091][T12698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.679332][T12676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.740735][T12698] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.766833][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.774021][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.789490][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.796674][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.895371][T12676] veth0_vlan: entered promiscuous mode [ 349.945138][T12725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.973455][ T54] Bluetooth: hci2: command tx timeout [ 349.978978][T12725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.989875][T12725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.016586][T12676] veth1_vlan: entered promiscuous mode [ 350.035356][T12725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.165212][T12676] veth0_macvtap: entered promiscuous mode [ 350.216599][T12676] veth1_macvtap: entered promiscuous mode [ 350.298102][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.320668][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.332829][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.354792][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.378374][T12676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.401907][T12725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.417514][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.430121][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.440824][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.452378][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.482466][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.502596][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.524512][T12676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.562014][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.573326][T12676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.582088][T12676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.610835][T12676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.621755][T12676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.658696][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.665949][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.721219][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.722867][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1753'. [ 350.728549][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.807685][T12698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.033500][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.063981][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.166466][T12698] veth0_vlan: entered promiscuous mode [ 351.207861][T12698] veth1_vlan: entered promiscuous mode [ 351.247703][T11379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.283472][T11379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.366130][T12698] veth0_macvtap: entered promiscuous mode [ 351.406026][T12698] veth1_macvtap: entered promiscuous mode [ 351.595946][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.627839][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.650332][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.676282][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.696703][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.717762][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.739307][T12698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.759241][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 351.767611][T12725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.785676][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.796905][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.807862][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.819440][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.829676][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.840654][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.850795][T12698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.861676][T12698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.873399][T12698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.929366][T12698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.948615][T12698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.961322][T12698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.980211][T12698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.080478][T11379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.224857][T12725] veth0_vlan: entered promiscuous mode [ 352.307112][T11379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.462049][T11379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.507560][T12725] veth1_vlan: entered promiscuous mode [ 352.530895][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.548023][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.573462][T11379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.630671][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.639746][T12725] veth0_macvtap: entered promiscuous mode [ 352.640388][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.664160][T12725] veth1_macvtap: entered promiscuous mode [ 352.685485][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.698153][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.710385][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.720980][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.731108][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.742446][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.752698][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.764351][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.776440][T12725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.796139][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.807535][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.818517][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.829630][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.839591][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.850193][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.861736][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.872693][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.882901][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.893557][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.910112][T12725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.940808][T12725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.950461][T12725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.959709][T12725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.969370][T12725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.105763][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.120780][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.151639][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.152029][T11379] bridge_slave_1: left allmulticast mode [ 353.160325][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.173483][T11379] bridge_slave_1: left promiscuous mode [ 353.173687][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.194626][T11379] bridge_slave_0: left allmulticast mode [ 353.200320][T11379] bridge_slave_0: left promiscuous mode [ 353.206646][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.776850][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.805331][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.816768][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.860532][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.878307][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.896324][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.977794][T11379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.993460][T11379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.004827][T11379] bond0 (unregistering): Released all slaves [ 354.060183][T12940] syzkaller0 speed is unknown, defaulting to 1000 [ 354.307092][T12940] chnl_net:caif_netlink_parms(): no params data found [ 354.401313][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.409136][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.416892][T12940] bridge_slave_0: entered allmulticast mode [ 354.425462][T12940] bridge_slave_0: entered promiscuous mode [ 354.435331][T12940] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.443823][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.451132][T12940] bridge_slave_1: entered allmulticast mode [ 354.497013][T12940] bridge_slave_1: entered promiscuous mode [ 354.529178][T11379] hsr_slave_0: left promiscuous mode [ 354.544421][T11379] hsr_slave_1: left promiscuous mode [ 354.560357][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.585234][T11379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.607794][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.628141][T11379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.653887][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1765'. [ 354.689155][T11379] veth1_macvtap: left promiscuous mode [ 354.712013][T11379] veth0_macvtap: left promiscuous mode [ 354.722763][T11379] veth1_vlan: left promiscuous mode [ 354.728218][T11379] veth0_vlan: left promiscuous mode [ 354.783490][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.795139][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.804251][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.814051][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.823368][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.830851][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.459622][T11379] team0 (unregistering): Port device team_slave_1 removed [ 355.511247][T11379] team0 (unregistering): Port device team_slave_0 removed [ 355.972872][ T5845] Bluetooth: hci0: command tx timeout [ 356.018358][T12940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.071090][T12940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.161506][T12940] team0: Port device team_slave_0 added [ 356.194247][T12940] team0: Port device team_slave_1 added [ 356.243273][T12958] syzkaller0 speed is unknown, defaulting to 1000 [ 356.285842][T12940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.293711][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.337077][T12940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.373402][T12951] infiniband syz1: set down [ 356.378291][T12951] infiniband syz1: added ipvlan1 [ 356.389714][T12940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.395394][T12951] syz1: rxe_create_cq: returned err = -12 [ 356.396927][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.429101][T12940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.439943][T12951] infiniband syz1: Couldn't create ib_mad CQ [ 356.447541][T12951] infiniband syz1: Couldn't open port 1 [ 356.471358][T12951] RDS/IB: syz1: added [ 356.476427][T12951] smc: adding ib device syz1 with port count 1 [ 356.483335][T12951] smc: ib device syz1 port 1 has pnetid [ 356.527139][T12940] hsr_slave_0: entered promiscuous mode [ 356.538498][T12940] hsr_slave_1: entered promiscuous mode [ 356.557946][T12940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.571791][T12940] Cannot create hsr debugfs directory [ 356.651548][T11379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.768005][T11379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.855683][ T5845] Bluetooth: hci1: command tx timeout [ 356.896014][T11379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.946763][T12958] chnl_net:caif_netlink_parms(): no params data found [ 357.033906][T12965] netlink: 'syz.4.1766': attribute type 10 has an invalid length. [ 357.076536][T11379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.392786][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 357.491192][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.504278][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.524062][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.535406][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.542746][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.550008][T12958] bridge_slave_0: entered allmulticast mode [ 357.557301][T12958] bridge_slave_0: entered promiscuous mode [ 357.567465][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.576203][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.584038][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.620677][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.628954][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.642907][T12958] bridge_slave_1: entered allmulticast mode [ 357.659984][T12958] bridge_slave_1: entered promiscuous mode [ 357.736483][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.754142][T12979] wg0: entered allmulticast mode [ 357.807446][T11379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.834175][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.968399][T11379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.992094][T12976] syzkaller0 speed is unknown, defaulting to 1000 [ 358.005624][T12958] team0: Port device team_slave_0 added [ 358.016760][T12958] team0: Port device team_slave_1 added [ 358.025350][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 358.052830][ T5845] Bluetooth: hci0: command tx timeout [ 358.183413][T11379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.209386][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.218427][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.247139][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.264104][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.271116][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.299661][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.401203][T11379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.436278][T12940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.463456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.534280][T12991] netlink: 'syz.4.1771': attribute type 2 has an invalid length. [ 358.546420][T12940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.697169][T12996] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 358.731089][T12940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.800107][T12958] hsr_slave_0: entered promiscuous mode [ 358.807588][T12958] hsr_slave_1: entered promiscuous mode [ 358.815740][T12958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.823772][T12958] Cannot create hsr debugfs directory [ 358.829884][T12996] batman_adv: batadv0: Removing interface: team0 [ 358.844609][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.870660][T12996] bond0: (slave team0): Enslaving as an active interface with an up link [ 358.911961][T12940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.932658][ T5845] Bluetooth: hci1: command tx timeout [ 359.385420][T11379] bridge_slave_1: left allmulticast mode [ 359.391134][T11379] bridge_slave_1: left promiscuous mode [ 359.397793][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.417461][T11379] bridge_slave_0: left allmulticast mode [ 359.432407][T11379] bridge_slave_0: left promiscuous mode [ 359.438238][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.466377][T11379] bridge_slave_1: left allmulticast mode [ 359.476858][T11379] bridge_slave_1: left promiscuous mode [ 359.487554][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.504379][T11379] bridge_slave_0: left allmulticast mode [ 359.518699][T11379] bridge_slave_0: left promiscuous mode [ 359.532839][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.652849][ T5845] Bluetooth: hci2: command tx timeout [ 360.133573][ T5845] Bluetooth: hci0: command tx timeout [ 360.321652][T11379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.342406][T11379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.361081][T11379] bond0 (unregistering): Released all slaves [ 360.520388][T11379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.532030][T11379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.547624][T11379] bond0 (unregistering): Released all slaves [ 360.911481][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.937817][T12976] chnl_net:caif_netlink_parms(): no params data found [ 361.012313][ T5845] Bluetooth: hci1: command tx timeout [ 361.193323][T12940] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.266164][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.273869][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.281263][T12976] bridge_slave_0: entered allmulticast mode [ 361.290024][T12976] bridge_slave_0: entered promiscuous mode [ 361.300312][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.307476][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.407656][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.424979][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.435942][T12976] bridge_slave_1: entered allmulticast mode [ 361.445534][T12976] bridge_slave_1: entered promiscuous mode [ 361.460270][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.467518][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.580587][T13045] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1782'. [ 361.624697][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.650577][T12958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.720410][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.732875][ T5845] Bluetooth: hci2: command tx timeout [ 361.756552][T12958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.909540][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1784'. [ 361.923345][T13047] vlan0: entered allmulticast mode [ 361.953681][T13047] bond0: entered allmulticast mode [ 361.958880][T13047] bond_slave_0: entered allmulticast mode [ 362.012819][T13047] bond_slave_1: entered allmulticast mode [ 362.018861][T13047] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 362.040972][T13047] team0: entered allmulticast mode [ 362.056121][T13047] team_slave_0: entered allmulticast mode [ 362.062032][T13047] team_slave_1: entered allmulticast mode [ 362.072360][T13047] batadv1: entered allmulticast mode [ 362.089674][T13047] bond0: left allmulticast mode [ 362.097034][T13047] bond_slave_0: left allmulticast mode [ 362.100112][T13056] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1786'. [ 362.102726][T13047] bond_slave_1: left allmulticast mode [ 362.102753][T13047] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 362.102800][T13047] team0: left allmulticast mode [ 362.102817][T13047] team_slave_0: left allmulticast mode [ 362.102891][T13047] team_slave_1: left allmulticast mode [ 362.102909][T13047] batadv1: left allmulticast mode [ 362.170681][T12958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.207234][T11379] hsr_slave_0: left promiscuous mode [ 362.213958][ T5845] Bluetooth: hci0: command tx timeout [ 362.244162][T11379] hsr_slave_1: left promiscuous mode [ 362.250422][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.258761][T11379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.292632][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.300144][T11379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.315773][T13058] Bluetooth: MGMT ver 1.23 [ 362.332980][T11379] hsr_slave_0: left promiscuous mode [ 362.347066][T11379] hsr_slave_1: left promiscuous mode [ 362.362025][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.383363][T11379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.393511][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.400999][T11379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.466503][T11379] veth1_macvtap: left promiscuous mode [ 362.472110][T11379] veth0_macvtap: left promiscuous mode [ 362.477950][T11379] veth1_vlan: left promiscuous mode [ 362.486207][T11379] veth0_vlan: left promiscuous mode [ 362.496136][T11379] veth1_macvtap: left promiscuous mode [ 362.501778][T11379] veth0_macvtap: left promiscuous mode [ 362.507609][T11379] veth1_vlan: left promiscuous mode [ 362.513346][T11379] veth0_vlan: left promiscuous mode [ 363.102616][ T5845] Bluetooth: hci1: command tx timeout [ 363.148432][T11379] team0 (unregistering): Port device team_slave_1 removed [ 363.196819][T11379] team0 (unregistering): Port device team_slave_0 removed [ 363.812438][ T5845] Bluetooth: hci2: command tx timeout [ 364.161120][T11379] team0 (unregistering): Port device team_slave_1 removed [ 364.221432][T11379] team0 (unregistering): Port device team_slave_0 removed [ 364.785848][T12940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.814296][T12958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.838134][T12976] team0: Port device team_slave_0 added [ 364.908109][T12976] team0: Port device team_slave_1 added [ 364.994807][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.001814][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.046733][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.060197][T13069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1790'. [ 365.061036][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.089828][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.131244][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.381044][T12976] hsr_slave_0: entered promiscuous mode [ 365.406788][T12976] hsr_slave_1: entered promiscuous mode [ 365.434115][T12976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.447353][T12976] Cannot create hsr debugfs directory [ 365.466290][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.622436][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.651943][T12940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.721850][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.729072][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.840968][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.848172][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.893286][ T5845] Bluetooth: hci2: command tx timeout [ 365.961757][T12940] veth0_vlan: entered promiscuous mode [ 366.007849][T12940] veth1_vlan: entered promiscuous mode [ 366.147007][T12940] veth0_macvtap: entered promiscuous mode [ 366.186265][T13099] xt_ecn: cannot match TCP bits for non-tcp packets [ 366.195980][T12940] veth1_macvtap: entered promiscuous mode [ 366.218044][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.231478][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.242866][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.254008][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.265701][T12940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.303240][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.329920][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.339866][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.350467][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.360361][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.370987][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.383296][T12940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.407877][T12940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.427326][T12940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.440077][T12940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.452670][T12940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.507013][T12958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.661279][T12976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.700735][T12976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.708049][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.717223][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.728546][T12976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.782360][T12976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.830752][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.851350][T12958] veth0_vlan: entered promiscuous mode [ 366.872708][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.957888][T12958] veth1_vlan: entered promiscuous mode [ 367.066883][T12958] veth0_macvtap: entered promiscuous mode [ 367.097267][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 367.110050][T12958] veth1_macvtap: entered promiscuous mode [ 367.128260][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.139336][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.149500][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.160088][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.171467][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.182860][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.200004][T12958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.344989][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.424713][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.441905][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.453248][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.464281][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.474739][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.485741][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.496171][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.507618][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.519356][T12958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.563726][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.589403][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.599972][T12958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.610013][T12958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.619466][T12958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.629227][T12958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.676044][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.760755][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.784653][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.798004][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.805154][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.847290][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.854458][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.929122][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.946917][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.020448][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.029061][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.067151][ T3462] bridge_slave_1: left allmulticast mode [ 368.082415][ T3462] bridge_slave_1: left promiscuous mode [ 368.088294][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.108823][ T3462] bridge_slave_0: left allmulticast mode [ 368.116080][ T3462] bridge_slave_0: left promiscuous mode [ 368.122743][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.506883][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.518559][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.531014][ T3462] bond0 (unregistering): Released all slaves [ 368.914722][T13122] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.1803'. [ 368.925637][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1804'. [ 369.244086][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.273501][T13135] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1805'. [ 369.399502][T12976] veth0_vlan: entered promiscuous mode [ 369.417785][T12976] veth1_vlan: entered promiscuous mode [ 369.429917][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.452838][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.461739][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.475091][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.493060][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.501666][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.505490][T12976] veth0_macvtap: entered promiscuous mode [ 369.555096][ T3462] hsr_slave_0: left promiscuous mode [ 369.561235][ T3462] hsr_slave_1: left promiscuous mode [ 369.583607][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.591126][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.599422][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.606940][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.629906][ T3462] veth1_macvtap: left promiscuous mode [ 369.635915][ T3462] veth0_macvtap: left promiscuous mode [ 369.641592][ T3462] veth1_vlan: left promiscuous mode [ 369.648306][ T3462] veth0_vlan: left promiscuous mode [ 370.160148][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 370.210085][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 370.787207][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.804912][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.842407][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.853229][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.865861][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.875237][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.106850][T12976] veth1_macvtap: entered promiscuous mode [ 371.165495][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.189641][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.201497][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.212347][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.222339][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.233405][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.246118][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.289907][T13156] syzkaller0 speed is unknown, defaulting to 1000 [ 371.310700][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.342070][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.362246][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.373593][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.384196][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.406006][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.426607][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.452491][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.484558][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.498583][T13136] syzkaller0 speed is unknown, defaulting to 1000 [ 371.537217][T12976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.552523][T12976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.561494][T12976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.570364][T12976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.589692][ T5845] Bluetooth: hci0: command tx timeout [ 371.860376][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.902292][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.044523][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.080045][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.230824][ T3462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.270936][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 372.295734][T13176] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 372.384301][ T3462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.571833][ T3462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.637006][T13156] chnl_net:caif_netlink_parms(): no params data found [ 372.848127][ T3462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.937621][ T5845] Bluetooth: hci1: command tx timeout [ 373.015558][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.029001][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.038173][T13156] bridge_slave_0: entered allmulticast mode [ 373.051025][T13156] bridge_slave_0: entered promiscuous mode [ 373.061354][T13136] chnl_net:caif_netlink_parms(): no params data found [ 373.076075][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.083622][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.090994][T13156] bridge_slave_1: entered allmulticast mode [ 373.100140][T13156] bridge_slave_1: entered promiscuous mode [ 373.164243][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.209417][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.241686][ T3462] bridge_slave_1: left allmulticast mode [ 373.247662][ T3462] bridge_slave_1: left promiscuous mode [ 373.254187][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.264594][ T3462] bridge_slave_0: left allmulticast mode [ 373.270282][ T3462] bridge_slave_0: left promiscuous mode [ 373.276191][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.659115][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.667866][ T5845] Bluetooth: hci0: command tx timeout [ 373.678251][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.688804][ T3462] bond0 (unregistering): Released all slaves [ 373.724419][T13156] team0: Port device team_slave_0 added [ 373.788637][T13156] team0: Port device team_slave_1 added [ 373.814262][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.830260][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.838058][T13136] bridge_slave_0: entered allmulticast mode [ 373.846215][T13136] bridge_slave_0: entered promiscuous mode [ 373.889067][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.902364][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.909666][T13136] bridge_slave_1: entered allmulticast mode [ 373.917368][T13136] bridge_slave_1: entered promiscuous mode [ 373.933803][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.940788][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.967209][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.982554][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.989560][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.016256][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.052091][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.094774][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.133977][T13136] team0: Port device team_slave_0 added [ 374.176871][T13156] hsr_slave_0: entered promiscuous mode [ 374.190644][T13156] hsr_slave_1: entered promiscuous mode [ 374.197444][T13156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.205188][T13156] Cannot create hsr debugfs directory [ 374.213303][T13136] team0: Port device team_slave_1 added [ 374.370615][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.388262][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.423372][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.436253][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.443592][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.470567][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.487409][ T3462] hsr_slave_0: left promiscuous mode [ 374.499548][ T3462] hsr_slave_1: left promiscuous mode [ 374.507211][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.515147][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.527079][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.536773][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.560987][ T3462] veth1_macvtap: left promiscuous mode [ 374.567090][ T3462] veth0_macvtap: left promiscuous mode [ 374.573487][ T3462] veth1_vlan: left promiscuous mode [ 374.578807][ T3462] veth0_vlan: left promiscuous mode [ 375.004835][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.030228][ T5849] Bluetooth: hci1: command tx timeout [ 375.042836][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.052479][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.071729][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.094949][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 375.131722][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.153838][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 375.457377][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 375.514099][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 375.734193][ T54] Bluetooth: hci0: command tx timeout [ 376.054023][T13211] vlan3: entered allmulticast mode [ 376.223704][T13208] syzkaller0 speed is unknown, defaulting to 1000 [ 376.236896][T13219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 376.254534][T13136] hsr_slave_0: entered promiscuous mode [ 376.270228][T13136] hsr_slave_1: entered promiscuous mode [ 376.333193][T13136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.340830][T13136] Cannot create hsr debugfs directory [ 376.681047][T13229] netlink: 'syz.2.1825': attribute type 7 has an invalid length. [ 376.967578][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 377.084681][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.095718][ T54] Bluetooth: hci1: command tx timeout [ 377.237194][T11379] smc: removing ib device syz1 [ 377.254781][ T54] Bluetooth: hci2: command tx timeout [ 377.454043][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.485085][ T5886] ================================================================== [ 377.493198][ T5886] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 377.502022][ T5886] Read of size 8 at addr ffff888065e502e8 by task kworker/0:4/5886 [ 377.510018][ T5886] [ 377.512382][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:4 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 377.523268][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.533347][ T5886] Workqueue: events smc_ib_port_event_work [ 377.539306][ T5886] Call Trace: [ 377.542605][ T5886] [ 377.545545][ T5886] dump_stack_lvl+0x241/0x360 [ 377.550262][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.555510][ T5886] ? __pfx__printk+0x10/0x10 [ 377.560138][ T5886] ? _printk+0xd5/0x120 [ 377.564504][ T5886] ? __virt_addr_valid+0x183/0x530 [ 377.569650][ T5886] ? __virt_addr_valid+0x183/0x530 [ 377.574793][ T5886] print_report+0x169/0x550 [ 377.579329][ T5886] ? __virt_addr_valid+0x183/0x530 [ 377.584457][ T5886] ? __virt_addr_valid+0x183/0x530 [ 377.589595][ T5886] ? __virt_addr_valid+0x45f/0x530 [ 377.594731][ T5886] ? __phys_addr+0xba/0x170 [ 377.599302][ T5886] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 377.605303][ T5886] kasan_report+0x143/0x180 [ 377.609829][ T5886] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 377.615845][ T5886] __ethtool_get_link_ksettings+0x6e/0x190 [ 377.621682][ T5886] ib_get_eth_speed+0x160/0x800 [ 377.626552][ T5886] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 377.631944][ T5886] ? rxe_query_port+0x4f/0x260 [ 377.636819][ T5886] rxe_query_port+0x76/0x260 [ 377.641428][ T5886] ib_query_port+0x166/0x7d0 [ 377.646042][ T5886] smc_ib_port_event_work+0x14e/0xa50 [ 377.651447][ T5886] ? process_scheduled_works+0x976/0x1840 [ 377.657185][ T5886] process_scheduled_works+0xa66/0x1840 [ 377.662790][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.668792][ T5886] ? assign_work+0x364/0x3d0 [ 377.673394][ T5886] worker_thread+0x870/0xd30 [ 377.678018][ T5886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 377.683941][ T5886] ? __kthread_parkme+0x169/0x1d0 [ 377.689011][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 377.694144][ T5886] kthread+0x2f0/0x390 [ 377.698229][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 377.703355][ T5886] ? __pfx_kthread+0x10/0x10 [ 377.707965][ T5886] ret_from_fork+0x4b/0x80 [ 377.712394][ T5886] ? __pfx_kthread+0x10/0x10 [ 377.716996][ T5886] ret_from_fork_asm+0x1a/0x30 [ 377.721776][ T5886] [ 377.724822][ T5886] [ 377.727152][ T5886] Allocated by task 5844: [ 377.731478][ T5886] kasan_save_track+0x3f/0x80 [ 377.736163][ T5886] __kasan_kmalloc+0x98/0xb0 [ 377.740778][ T5886] __kmalloc_node_noprof+0x290/0x4d0 [ 377.746104][ T5886] __kvmalloc_node_noprof+0x72/0x190 [ 377.751407][ T5886] alloc_netdev_mqs+0xa4/0x1080 [ 377.756277][ T5886] rtnl_create_link+0x2f9/0xc20 [ 377.761140][ T5886] rtnl_newlink_create+0x210/0xa40 [ 377.766269][ T5886] rtnl_newlink+0x1c7e/0x2210 [ 377.770962][ T5886] rtnetlink_rcv_msg+0x791/0xcf0 [ 377.775912][ T5886] netlink_rcv_skb+0x1e3/0x430 [ 377.780680][ T5886] netlink_unicast+0x7f6/0x990 [ 377.785462][ T5886] netlink_sendmsg+0x8e4/0xcb0 [ 377.790232][ T5886] __sock_sendmsg+0x221/0x270 [ 377.794925][ T5886] __sys_sendto+0x363/0x4c0 [ 377.799433][ T5886] __x64_sys_sendto+0xde/0x100 [ 377.804207][ T5886] do_syscall_64+0xf3/0x230 [ 377.808729][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.814660][ T5886] [ 377.816989][ T5886] Freed by task 13244: [ 377.821061][ T5886] kasan_save_track+0x3f/0x80 [ 377.825749][ T5886] kasan_save_free_info+0x40/0x50 [ 377.830794][ T5886] __kasan_slab_free+0x59/0x70 [ 377.835592][ T5886] kfree+0x196/0x430 [ 377.839589][ T5886] device_release+0x99/0x1c0 [ 377.844336][ T5886] kobject_put+0x22f/0x480 [ 377.848778][ T5886] netdev_run_todo+0xe79/0x1000 [ 377.853645][ T5886] rtnl_dellink+0x760/0x8d0 [ 377.858164][ T5886] rtnetlink_rcv_msg+0x791/0xcf0 [ 377.863117][ T5886] netlink_rcv_skb+0x1e3/0x430 [ 377.867926][ T5886] netlink_unicast+0x7f6/0x990 [ 377.872794][ T5886] netlink_sendmsg+0x8e4/0xcb0 [ 377.877575][ T5886] __sock_sendmsg+0x221/0x270 [ 377.882265][ T5886] ____sys_sendmsg+0x52a/0x7e0 [ 377.887047][ T5886] __sys_sendmsg+0x269/0x350 [ 377.891645][ T5886] do_syscall_64+0xf3/0x230 [ 377.896196][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.902125][ T5886] [ 377.904463][ T5886] The buggy address belongs to the object at ffff888065e50000 [ 377.904463][ T5886] which belongs to the cache kmalloc-cg-4k of size 4096 [ 377.918784][ T5886] The buggy address is located 744 bytes inside of [ 377.918784][ T5886] freed 4096-byte region [ffff888065e50000, ffff888065e51000) [ 377.932681][ T5886] [ 377.935010][ T5886] The buggy address belongs to the physical page: [ 377.941437][ T5886] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65e50 [ 377.950206][ T5886] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 377.958804][ T5886] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 377.966385][ T5886] page_type: f5(slab) [ 377.970376][ T5886] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 377.978974][ T5886] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 377.987576][ T5886] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 377.996253][ T5886] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 378.004935][ T5886] head: 00fff00000000003 ffffea0001979401 ffffffffffffffff 0000000000000000 [ 378.013711][ T5886] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 378.022643][ T5886] page dumped because: kasan: bad access detected [ 378.029071][ T5886] page_owner tracks the page as allocated [ 378.034803][ T5886] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 78063785805, free_ts 78026036136 [ 378.058031][ T5886] post_alloc_hook+0x1f3/0x230 [ 378.062854][ T5886] get_page_from_freelist+0x365c/0x37a0 [ 378.068412][ T5886] __alloc_pages_noprof+0x292/0x710 [ 378.073616][ T5886] alloc_pages_mpol_noprof+0x3e8/0x680 [ 378.079088][ T5886] alloc_slab_page+0x6a/0x110 [ 378.083774][ T5886] allocate_slab+0x5a/0x2b0 [ 378.088284][ T5886] ___slab_alloc+0xc27/0x14a0 [ 378.093064][ T5886] __slab_alloc+0x58/0xa0 [ 378.097416][ T5886] __kmalloc_node_noprof+0x2ee/0x4d0 [ 378.102713][ T5886] __kvmalloc_node_noprof+0x72/0x190 [ 378.108093][ T5886] alloc_netdev_mqs+0xa4/0x1080 [ 378.112955][ T5886] rtnl_create_link+0x2f9/0xc20 [ 378.117820][ T5886] rtnl_newlink_create+0x210/0xa40 [ 378.122945][ T5886] rtnl_newlink+0x1c7e/0x2210 [ 378.127640][ T5886] rtnetlink_rcv_msg+0x791/0xcf0 [ 378.132596][ T5886] netlink_rcv_skb+0x1e3/0x430 [ 378.137372][ T5886] page last free pid 5835 tgid 5835 stack trace: [ 378.144137][ T5886] free_unref_page+0xd3f/0x1010 [ 378.149015][ T5886] __slab_free+0x2c2/0x380 [ 378.153446][ T5886] qlist_free_all+0x9a/0x140 [ 378.158086][ T5886] kasan_quarantine_reduce+0x14f/0x170 [ 378.163821][ T5886] __kasan_slab_alloc+0x23/0x80 [ 378.168778][ T5886] __kmalloc_cache_noprof+0x1d9/0x390 [ 378.174166][ T5886] netdevice_event+0x37d/0x950 [ 378.178942][ T5886] notifier_call_chain+0x1a5/0x3f0 [ 378.184062][ T5886] __netdev_upper_dev_link+0x4c3/0x670 [ 378.189535][ T5886] netdev_master_upper_dev_link+0xb1/0x100 [ 378.195357][ T5886] team_add_slave+0xf17/0x2760 [ 378.200138][ T5886] do_setlink+0xe40/0x4210 [ 378.204570][ T5886] rtnl_newlink+0x1bb6/0x2210 [ 378.209260][ T5886] rtnetlink_rcv_msg+0x791/0xcf0 [ 378.214212][ T5886] netlink_rcv_skb+0x1e3/0x430 [ 378.218986][ T5886] netlink_unicast+0x7f6/0x990 [ 378.223860][ T5886] [ 378.226186][ T5886] Memory state around the buggy address: [ 378.232169][ T5886] ffff888065e50180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.240332][ T5886] ffff888065e50200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.248399][ T5886] >ffff888065e50280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.256465][ T5886] ^ [ 378.263927][ T5886] ffff888065e50300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.271999][ T5886] ffff888065e50380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.280065][ T5886] ================================================================== [ 378.290048][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 378.297280][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:4 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 378.308051][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.318118][ T5886] Workqueue: events smc_ib_port_event_work [ 378.323949][ T5886] Call Trace: [ 378.327236][ T5886] [ 378.330177][ T5886] dump_stack_lvl+0x241/0x360 [ 378.334874][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.340091][ T5886] ? __pfx__printk+0x10/0x10 [ 378.344695][ T5886] ? preempt_schedule+0xe1/0xf0 [ 378.349563][ T5886] ? vscnprintf+0x5d/0x90 [ 378.353904][ T5886] panic+0x349/0x880 [ 378.357830][ T5886] ? check_panic_on_warn+0x21/0xb0 [ 378.362958][ T5886] ? __pfx_panic+0x10/0x10 [ 378.367396][ T5886] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 378.373392][ T5886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.379731][ T5886] ? print_report+0x502/0x550 [ 378.384424][ T5886] check_panic_on_warn+0x86/0xb0 [ 378.389376][ T5886] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 378.395374][ T5886] end_report+0x77/0x160 [ 378.399632][ T5886] kasan_report+0x154/0x180 [ 378.404150][ T5886] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 378.410145][ T5886] __ethtool_get_link_ksettings+0x6e/0x190 [ 378.415969][ T5886] ib_get_eth_speed+0x160/0x800 [ 378.420844][ T5886] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 378.426263][ T5886] ? rxe_query_port+0x4f/0x260 [ 378.431045][ T5886] rxe_query_port+0x76/0x260 [ 378.435655][ T5886] ib_query_port+0x166/0x7d0 [ 378.440268][ T5886] smc_ib_port_event_work+0x14e/0xa50 [ 378.445664][ T5886] ? process_scheduled_works+0x976/0x1840 [ 378.451396][ T5886] process_scheduled_works+0xa66/0x1840 [ 378.457049][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.463047][ T5886] ? assign_work+0x364/0x3d0 [ 378.467650][ T5886] worker_thread+0x870/0xd30 [ 378.472344][ T5886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.478261][ T5886] ? __kthread_parkme+0x169/0x1d0 [ 378.483297][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 378.488429][ T5886] kthread+0x2f0/0x390 [ 378.492522][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 378.497665][ T5886] ? __pfx_kthread+0x10/0x10 [ 378.502268][ T5886] ret_from_fork+0x4b/0x80 [ 378.506694][ T5886] ? __pfx_kthread+0x10/0x10 [ 378.511334][ T5886] ret_from_fork_asm+0x1a/0x30 [ 378.516140][ T5886] [ 378.519500][ T5886] Kernel Offset: disabled [ 378.523864][ T5886] Rebooting in 86400 seconds..