Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts.
2020/10/21 12:00:29 fuzzer started
2020/10/21 12:00:29 dialing manager at 10.128.0.26:43017
2020/10/21 12:00:30 syscalls: 3450
2020/10/21 12:00:30 code coverage: enabled
2020/10/21 12:00:30 comparison tracing: enabled
2020/10/21 12:00:30 extra coverage: enabled
2020/10/21 12:00:30 setuid sandbox: enabled
2020/10/21 12:00:30 namespace sandbox: enabled
2020/10/21 12:00:30 Android sandbox: /sys/fs/selinux/policy does not exist
2020/10/21 12:00:30 fault injection: enabled
2020/10/21 12:00:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/10/21 12:00:30 net packet injection: enabled
2020/10/21 12:00:30 net device setup: enabled
2020/10/21 12:00:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/10/21 12:00:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/10/21 12:00:30 USB emulation: enabled
2020/10/21 12:00:30 hci packet injection: enabled
2020/10/21 12:00:30 wifi device emulation: enabled
12:01:05 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @random="6c25e5d72615", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1d0040", 0xc, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

12:01:05 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

12:01:05 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:06 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000050021"], 0x28}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

12:01:06 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x4c, 0x148, 0x138, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xd8, 0x138, 0x0, {0x6c000000}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[], 0x3}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xae)

12:01:06 executing program 5:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

syzkaller login: [  100.578983][ T8474] IPVS: ftp: loaded support on port[0] = 21
[  100.740732][ T8476] IPVS: ftp: loaded support on port[0] = 21
[  100.827390][ T8474] chnl_net:caif_netlink_parms(): no params data found
[  100.937567][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.946496][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.956287][ T8474] device bridge_slave_0 entered promiscuous mode
[  100.984987][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.000156][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.012731][ T8478] IPVS: ftp: loaded support on port[0] = 21
[  101.032619][ T8474] device bridge_slave_1 entered promiscuous mode
[  101.094194][ T8474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.139378][ T8474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.173063][ T8476] chnl_net:caif_netlink_parms(): no params data found
[  101.265924][ T8480] IPVS: ftp: loaded support on port[0] = 21
[  101.290769][ T8474] team0: Port device team_slave_0 added
[  101.332886][ T8474] team0: Port device team_slave_1 added
[  101.415659][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.425341][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.462390][ T8474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.526573][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.554587][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.582720][ T8474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.605820][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.615513][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.625242][ T8476] device bridge_slave_0 entered promiscuous mode
[  101.667719][ T8478] chnl_net:caif_netlink_parms(): no params data found
[  101.692557][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.699869][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.707745][ T8476] device bridge_slave_1 entered promiscuous mode
[  101.723105][ T8482] IPVS: ftp: loaded support on port[0] = 21
[  101.800309][ T8474] device hsr_slave_0 entered promiscuous mode
[  101.811791][ T8474] device hsr_slave_1 entered promiscuous mode
[  101.828451][ T8495] IPVS: ftp: loaded support on port[0] = 21
[  101.839170][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.853484][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.954784][ T8476] team0: Port device team_slave_0 added
[  102.012622][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.020151][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.027849][ T8478] device bridge_slave_0 entered promiscuous mode
[  102.038291][ T8476] team0: Port device team_slave_1 added
[  102.067514][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.075313][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.084690][ T8478] device bridge_slave_1 entered promiscuous mode
[  102.122446][ T8480] chnl_net:caif_netlink_parms(): no params data found
[  102.174167][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.185526][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.212616][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.227574][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.234627][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.262293][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.281195][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.294892][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.394229][ T8478] team0: Port device team_slave_0 added
[  102.446336][ T8476] device hsr_slave_0 entered promiscuous mode
[  102.455775][ T8476] device hsr_slave_1 entered promiscuous mode
[  102.463442][ T8476] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.471927][ T8476] Cannot create hsr debugfs directory
[  102.478586][ T8478] team0: Port device team_slave_1 added
[  102.500894][   T12] Bluetooth: hci0: command 0x0409 tx timeout
[  102.546300][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.553872][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.562285][ T8480] device bridge_slave_0 entered promiscuous mode
[  102.653940][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.665537][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.675750][ T8480] device bridge_slave_1 entered promiscuous mode
[  102.689659][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.696738][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.723496][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.737642][ T8495] chnl_net:caif_netlink_parms(): no params data found
[  102.749705][   T12] Bluetooth: hci1: command 0x0409 tx timeout
[  102.780701][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.787673][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.814455][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.830670][ T8482] chnl_net:caif_netlink_parms(): no params data found
[  102.897672][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.934414][ T8478] device hsr_slave_0 entered promiscuous mode
[  102.941877][ T8478] device hsr_slave_1 entered promiscuous mode
[  102.948357][ T8478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.956426][ T8478] Cannot create hsr debugfs directory
[  102.967546][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.987892][ T8474] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.994870][   T12] Bluetooth: hci2: command 0x0409 tx timeout
[  103.067650][ T8480] team0: Port device team_slave_0 added
[  103.084280][ T8474] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  103.107872][ T8480] team0: Port device team_slave_1 added
[  103.117924][ T8474] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  103.160219][ T8474] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.219619][ T4925] Bluetooth: hci3: command 0x0409 tx timeout
[  103.236499][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.244515][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.276543][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.313109][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.325328][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.333804][ T8482] device bridge_slave_0 entered promiscuous mode
[  103.354036][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.361697][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.388673][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.409611][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.416700][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.425540][ T8482] device bridge_slave_1 entered promiscuous mode
[  103.437666][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.445647][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.453857][ T8495] device bridge_slave_0 entered promiscuous mode
[  103.460513][ T3188] Bluetooth: hci4: command 0x0409 tx timeout
[  103.514135][ T8480] device hsr_slave_0 entered promiscuous mode
[  103.522779][ T8480] device hsr_slave_1 entered promiscuous mode
[  103.529308][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.538317][ T8480] Cannot create hsr debugfs directory
[  103.549085][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.558010][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.566371][ T8495] device bridge_slave_1 entered promiscuous mode
[  103.620969][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.630376][ T8476] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.643567][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.664979][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.682524][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.693467][ T8476] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.705758][ T8476] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.709562][ T4925] Bluetooth: hci5: command 0x0409 tx timeout
[  103.745012][ T8476] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.814947][ T8495] team0: Port device team_slave_0 added
[  103.851258][ T8482] team0: Port device team_slave_0 added
[  103.860385][ T8495] team0: Port device team_slave_1 added
[  103.910429][ T8482] team0: Port device team_slave_1 added
[  103.968769][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.977764][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.004729][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.018970][ T8478] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.058528][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.067381][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.094924][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.106739][ T8478] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.122432][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.135150][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.162535][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.178228][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.185624][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.211790][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.229602][ T8478] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.241706][ T8478] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  104.304363][ T8495] device hsr_slave_0 entered promiscuous mode
[  104.311840][ T8495] device hsr_slave_1 entered promiscuous mode
[  104.319237][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.327412][ T8495] Cannot create hsr debugfs directory
[  104.400877][ T8480] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.434683][ T8482] device hsr_slave_0 entered promiscuous mode
[  104.442377][ T8482] device hsr_slave_1 entered promiscuous mode
[  104.448851][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.456693][ T8482] Cannot create hsr debugfs directory
[  104.467693][ T8480] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.496481][ T8474] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.537775][ T8480] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.554909][ T8480] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.567974][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.581430][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.590262][ T3188] Bluetooth: hci0: command 0x041b tx timeout
[  104.638254][ T8474] 8021q: adding VLAN 0 to HW filter on device team0
[  104.672538][ T8476] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.728395][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.737952][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.747321][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.754701][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.763699][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.774819][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.783425][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.790619][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.801746][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.830995][ T3188] Bluetooth: hci1: command 0x041b tx timeout
[  104.847155][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.857074][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.898401][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.916040][ T8495] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.928111][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.943532][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.953723][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.962874][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.993992][ T8476] 8021q: adding VLAN 0 to HW filter on device team0
[  105.006676][ T8495] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.026280][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.060305][ T4925] Bluetooth: hci2: command 0x041b tx timeout
[  105.070646][ T8495] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.094819][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.108852][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.118919][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.126039][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.138766][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.147799][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.156676][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.165228][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.184337][ T8478] 8021q: adding VLAN 0 to HW filter on device team0
[  105.208940][ T8495] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.234501][ T8474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.245879][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.256582][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.265004][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.272978][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.283755][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.292981][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.301871][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.310957][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.320464][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.327515][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.335244][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.344519][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.353037][ T2875] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.360184][ T2875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.368508][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.377864][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.386830][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.395418][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.402554][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.420308][ T2875] Bluetooth: hci3: command 0x041b tx timeout
[  105.428604][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.466747][ T8482] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.496848][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.506153][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.520499][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.529000][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.538528][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.539341][   T23] Bluetooth: hci4: command 0x041b tx timeout
[  105.551026][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.562628][ T8482] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.593016][ T8482] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.608619][ T8478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.625212][ T8478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.643084][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.656270][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.665012][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.678161][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.688776][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.702661][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.712981][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.724967][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.735774][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.747570][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.757699][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.773412][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.784727][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.793107][ T4925] Bluetooth: hci5: command 0x041b tx timeout
[  105.825008][ T8482] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.851681][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.861731][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.870586][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.878907][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.888357][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.896812][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.910740][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.925141][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.954612][ T8480] 8021q: adding VLAN 0 to HW filter on device team0
[  105.982473][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.993137][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.001802][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.010519][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.017946][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.026071][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.055742][ T8476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.067586][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.077073][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.086498][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.095467][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.104520][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.111819][ T4925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.119891][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.128618][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.137633][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.144743][ T4925] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.153576][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.163929][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.203464][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.212466][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.250531][ T8474] device veth0_vlan entered promiscuous mode
[  106.258429][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.268013][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.277496][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.286906][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.296392][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.305171][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.313544][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.345665][ T8474] device veth1_vlan entered promiscuous mode
[  106.368355][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.377008][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.391493][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.401194][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.410583][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.419807][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.428358][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.442291][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.456877][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.470109][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.487677][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.506022][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  106.531471][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.540834][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.550258][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.558482][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.568220][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.595633][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.610120][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.633545][ T8495] 8021q: adding VLAN 0 to HW filter on device team0
[  106.647988][ T8478] device veth0_vlan entered promiscuous mode
[  106.664680][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  106.676458][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.685023][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.697840][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.707023][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.715477][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.724258][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.732478][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.786405][ T8478] device veth1_vlan entered promiscuous mode
[  106.829283][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.837488][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.854939][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.866138][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.878420][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.889690][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.896762][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.899313][ T4925] Bluetooth: hci1: command 0x040f tx timeout
[  106.912557][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.921762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.930696][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.937850][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.945960][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.955061][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.969956][ T8476] device veth0_vlan entered promiscuous mode
[  106.978624][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.987675][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.001974][ T8474] device veth0_macvtap entered promiscuous mode
[  107.055584][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.066317][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  107.075835][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.084679][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.097083][ T8474] device veth1_macvtap entered promiscuous mode
[  107.141566][ T3188] Bluetooth: hci2: command 0x040f tx timeout
[  107.162062][ T8476] device veth1_vlan entered promiscuous mode
[  107.181632][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.190737][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  107.198650][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.206899][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.216043][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.226232][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.234457][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.243202][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.255028][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.264883][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.276639][ T8482] 8021q: adding VLAN 0 to HW filter on device team0
[  107.296181][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.309833][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  107.318507][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.329562][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.337942][ T2875] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.345073][ T2875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.353489][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.362517][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.371543][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.380902][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  107.389478][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.396539][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.428350][ T8495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.439047][ T8495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.462386][ T4925] Bluetooth: hci3: command 0x040f tx timeout
[  107.464223][ T8478] device veth0_macvtap entered promiscuous mode
[  107.478647][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.487586][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.495926][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.504633][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.513314][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.523100][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.537251][ T8480] device veth0_vlan entered promiscuous mode
[  107.562872][ T8478] device veth1_macvtap entered promiscuous mode
[  107.577447][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.588468][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.602048][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.612480][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  107.619493][   T23] Bluetooth: hci4: command 0x040f tx timeout
[  107.625094][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  107.635021][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.643865][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.654286][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  107.666831][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  107.709812][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.718354][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.729185][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.738122][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.747203][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.758466][ T8476] device veth0_macvtap entered promiscuous mode
[  107.768781][ T8480] device veth1_vlan entered promiscuous mode
[  107.782814][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.794705][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.806847][ T8478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  107.820382][ T8478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.832119][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.845071][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.854066][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.862991][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.872264][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.883707][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.892667][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.903792][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.913460][ T4925] Bluetooth: hci5: command 0x040f tx timeout
[  107.920688][ T8474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.930823][ T8474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.942265][ T8474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.951603][ T8474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.965416][ T8478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  107.980145][ T8478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.992961][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.013581][ T8476] device veth1_macvtap entered promiscuous mode
[  108.044190][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  108.054675][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  108.064722][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.074288][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.083685][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.093223][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.103008][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.112132][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.126837][ T8478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.141479][ T8478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.150998][ T8478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.160128][ T8478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.189851][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.197779][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.209313][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.215607][ T8482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.230994][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.260263][ T8480] device veth0_macvtap entered promiscuous mode
[  108.285512][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.297406][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.308029][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.319231][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.330761][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.338050][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.348141][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.356834][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.365964][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.374597][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.383296][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.415208][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.426809][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.439661][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.450521][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.461970][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.473260][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.482508][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.491577][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.534461][ T8476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.548654][ T8476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.558940][ T8476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.568062][ T8476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.589374][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.597424][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.606646][ T8480] device veth1_macvtap entered promiscuous mode
[  108.623588][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.710784][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.722141][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.733154][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.749059][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.749440][ T9770] Bluetooth: hci0: command 0x0419 tx timeout
[  108.778816][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.799120][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.820771][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.872535][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  108.881978][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.900535][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.911354][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.920236][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.931657][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.942746][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.954379][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.964919][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.974861][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.985773][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.989253][ T9770] Bluetooth: hci1: command 0x0419 tx timeout
[  108.997268][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.031254][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.042645][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.052300][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.061958][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.073420][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.083724][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.104585][ T8480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.114502][ T8480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.124123][ T8480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.133299][ T8480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.147285][ T8495] device veth0_vlan entered promiscuous mode
[  109.157235][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.170469][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.210928][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.230359][ T2875] Bluetooth: hci2: command 0x0419 tx timeout
[  109.235879][ T8495] device veth1_vlan entered promiscuous mode
[  109.268861][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.304552][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.332353][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.363682][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  109.376986][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.386680][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.410104][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.418151][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.455212][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.512977][ T8482] device veth0_vlan entered promiscuous mode
[  109.519192][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.521329][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.545080][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.561585][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.570668][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.578591][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.603558][    T5] Bluetooth: hci3: command 0x0419 tx timeout
[  109.643867][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.645630][ T8495] device veth0_macvtap entered promiscuous mode
12:01:15 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1)

[  109.693299][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.710125][ T3188] Bluetooth: hci4: command 0x0419 tx timeout
[  109.725578][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.745594][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.757837][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.772532][ T8495] device veth1_macvtap entered promiscuous mode
[  109.802719][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.802739][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.812174][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.847083][ T8482] device veth1_vlan entered promiscuous mode
[  109.848659][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.910486][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.915888][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.931026][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.944381][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.946679][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.985416][    C0] hrtimer: interrupt took 54317 ns
[  109.989381][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  110.017098][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
12:01:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  110.030039][   T23] Bluetooth: hci5: command 0x0419 tx timeout
[  110.053939][ T9871] xt_TCPMSS: Only works on TCP SYN packets
[  110.067122][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.089164][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  110.109766][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.127194][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  110.139786][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.150528][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  110.162017][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
12:01:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  110.190317][ T9879] xt_TCPMSS: Only works on TCP SYN packets
[  110.194983][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.253953][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.266902][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.311220][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  110.311644][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.350769][ T9884] xt_TCPMSS: Only works on TCP SYN packets
12:01:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  110.359668][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.380638][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  110.404474][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.405000][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.446460][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  110.464553][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.489110][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  110.507975][ T9890] xt_TCPMSS: Only works on TCP SYN packets
12:01:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  110.511117][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
12:01:16 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

12:01:16 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1)

[  110.610789][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1
12:01:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  110.670629][ T9899] xt_TCPMSS: Only works on TCP SYN packets
[  110.689141][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  110.697171][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
12:01:17 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

[  110.729427][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.765727][ T8495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.805116][ T8495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.805150][ T9907] xt_TCPMSS: Only works on TCP SYN packets
[  110.841829][ T8495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.888920][ T8495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.942787][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.955890][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  111.003691][ T8482] device veth0_macvtap entered promiscuous mode
12:01:17 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000050021"], 0x28}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

[  111.077057][ T8482] device veth1_macvtap entered promiscuous mode
[  111.160793][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  111.181465][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.193928][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  111.205526][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.222003][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  111.233567][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.245380][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  111.256922][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.268013][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  111.280322][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.293289][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.308654][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  111.327112][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  111.336128][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.353375][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.406937][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  111.428218][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.450805][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  111.478481][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.518545][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  111.539516][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.558481][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  111.579642][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.598473][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  111.619062][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.652321][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.670574][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.689655][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.722396][ T8482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.729012][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.740001][ T8482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.750578][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.766529][ T8482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.778324][ T8482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.799970][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.838707][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.846872][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.871813][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  112.055927][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.069119][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.125985][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  112.147150][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.167039][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.196916][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:01:18 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x4c, 0x148, 0x138, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xd8, 0x138, 0x0, {0x6c000000}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[], 0x3}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xae)

12:01:18 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:18 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

12:01:18 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000050021"], 0x28}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

12:01:18 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1)

12:01:18 executing program 5:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

12:01:18 executing program 5:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

[  112.388799][ T9976] xt_TCPMSS: Only works on TCP SYN packets
12:01:18 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

12:01:18 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x4c, 0x148, 0x138, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xd8, 0x138, 0x0, {0x6c000000}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[], 0x3}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xae)

12:01:18 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x10eef0f1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000050021"], 0x28}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

12:01:18 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:18 executing program 5:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

12:01:19 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  112.699703][ T9991] xt_TCPMSS: Only works on TCP SYN packets
12:01:19 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x4c, 0x148, 0x138, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xd8, 0x138, 0x0, {0x6c000000}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}, {[], 0x3}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xae)

12:01:19 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

[  112.835719][ T9998] xt_TCPMSS: Only works on TCP SYN packets
[  112.859883][ T9999] xt_TCPMSS: Only works on TCP SYN packets
12:01:19 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1)

12:01:19 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:19 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000200)=[{0x0, 0x8001}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

12:01:19 executing program 4:
prlimit64(0x0, 0x7, &(0x7f0000005c80), 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:01:19 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x2009, 0x1, {0xb, @pix={0x0, 0x1f}}})

12:01:19 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000080))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

12:01:19 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r1, 0x0, 0x1ffe00)

12:01:19 executing program 4:
prlimit64(0x0, 0x7, &(0x7f0000005c80), 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:01:19 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

12:01:19 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000200)=[{0x0, 0x8001}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

12:01:19 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8e000000, &(0x7f0000000100)=[{&(0x7f0000000980)="89000000120081ae08060c0f00ffffff7f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef5680277bec00123d000200789977a0bdad446b9bbc7a46e39882d3f868fecea4e455366883b180e02d5c5568c4324f72cbeb13ad14955f947ee2b49e3b6f8afa02002347", 0x89}], 0x1}, 0x0)

12:01:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

12:01:20 executing program 4:
prlimit64(0x0, 0x7, &(0x7f0000005c80), 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:01:20 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000200)=[{0x0, 0x8001}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

12:01:20 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8e000000, &(0x7f0000000100)=[{&(0x7f0000000980)="89000000120081ae08060c0f00ffffff7f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef5680277bec00123d000200789977a0bdad446b9bbc7a46e39882d3f868fecea4e455366883b180e02d5c5568c4324f72cbeb13ad14955f947ee2b49e3b6f8afa02002347", 0x89}], 0x1}, 0x0)

12:01:20 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r1, 0x0, 0x1ffe00)

12:01:20 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r1, 0x0, 0x1ffe00)

12:01:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

12:01:20 executing program 4:
prlimit64(0x0, 0x7, &(0x7f0000005c80), 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:01:20 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8e000000, &(0x7f0000000100)=[{&(0x7f0000000980)="89000000120081ae08060c0f00ffffff7f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef5680277bec00123d000200789977a0bdad446b9bbc7a46e39882d3f868fecea4e455366883b180e02d5c5568c4324f72cbeb13ad14955f947ee2b49e3b6f8afa02002347", 0x89}], 0x1}, 0x0)

12:01:21 executing program 5:
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000200)=[{0x0, 0x8001}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

12:01:21 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r1, 0x0, 0x1ffe00)

12:01:21 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

12:01:21 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8e000000, &(0x7f0000000100)=[{&(0x7f0000000980)="89000000120081ae08060c0f00ffffff7f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef5680277bec00123d000200789977a0bdad446b9bbc7a46e39882d3f868fecea4e455366883b180e02d5c5568c4324f72cbeb13ad14955f947ee2b49e3b6f8afa02002347", 0x89}], 0x1}, 0x0)

12:01:21 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

12:01:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48)
close_range(r2, 0xffffffffffffffff, 0x0)

12:01:21 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="aa", 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r1, 0x0, 0x1ffe00)

12:01:21 executing program 3:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82)
write$qrtrtun(r0, &(0x7f0000000000)="0121213998aaf039d62cf3501a475652195686000000000000000000feffffff", 0x20)
write$qrtrtun(r0, &(0x7f0000000000)="0121213998aaf039d62cf3501a475652195686000000000000000000feffffff", 0x20)

[  115.502739][T10082] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  115.676766][   T27] ------------[ cut here ]------------
[  115.682416][   T27] refcount_t: addition on 0; use-after-free.
[  115.688608][   T27] WARNING: CPU: 1 PID: 27 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0
[  115.697824][   T27] Modules linked in:
[  115.701724][   T27] CPU: 1 PID: 27 Comm: kworker/u4:2 Not tainted 5.9.0-syzkaller #0
[  115.709590][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  115.719628][   T27] Workqueue: qrtr_ns_handler qrtr_ns_worker
[  115.725541][   T27] RIP: 0010:refcount_warn_saturate+0x169/0x1e0
[  115.731669][   T27] Code: 09 31 ff 89 de e8 27 f9 bc fd 84 db 0f 85 36 ff ff ff e8 0a 01 bd fd 48 c7 c7 00 e7 9c 89 c6 05 7e d5 25 09 01 e8 ea 27 f6 04 <0f> 0b e9 17 ff ff ff e8 eb 00 bd fd 0f b6 1d 63 d5 25 09 31 ff 89
[  115.751247][   T27] RSP: 0018:ffffc90000e1f9f8 EFLAGS: 00010086
[  115.757292][   T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  115.765239][   T27] RDX: ffff888011043480 RSI: ffffffff81581365 RDI: fffff520001c3f31
[  115.773197][   T27] RBP: 0000000000000002 R08: 0000000000000001 R09: ffff8880b9f2005b
[  115.781145][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881407e0000
[  115.789222][   T27] R13: ffff8880279e2400 R14: ffff8880136ed530 R15: ffff8880136ed534
[  115.797170][   T27] FS:  0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
[  115.806074][   T27] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.812635][   T27] CR2: 0000001b2d725000 CR3: 0000000028093000 CR4: 00000000001526e0
[  115.820585][   T27] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  115.828533][   T27] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  115.836489][   T27] Call Trace:
[  115.839760][   T27]  qrtr_recvmsg+0x845/0x970
[  115.844246][   T27]  ? qrtr_node_enqueue+0x1250/0x1250
[  115.850180][   T27]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  115.855448][   T27]  ? security_socket_recvmsg+0x8f/0xc0
[  115.860897][   T27]  ? qrtr_node_enqueue+0x1250/0x1250
[  115.866162][   T27]  kernel_recvmsg+0x110/0x160
[  115.870830][   T27]  qrtr_ns_worker+0x15a/0x1740
[  115.875584][   T27]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  115.881541][   T27]  ? ctrl_cmd_bye+0xc20/0xc20
[  115.886228][   T27]  process_one_work+0x933/0x15a0
[  115.891147][   T27]  ? lock_release+0x710/0x710
[  115.895829][   T27]  ? pwq_dec_nr_in_flight+0x320/0x320
[  115.901182][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  115.906093][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[  115.911099][   T27]  worker_thread+0x64c/0x1120
[  115.915773][   T27]  ? process_one_work+0x15a0/0x15a0
[  115.920953][   T27]  kthread+0x3b5/0x4a0
[  115.924997][   T27]  ? kthread_create_worker_on_cpu+0xf0/0xf0
[  115.930867][   T27]  ret_from_fork+0x1f/0x30
[  115.935267][   T27] Kernel panic - not syncing: panic_on_warn set ...
[  115.941831][   T27] CPU: 1 PID: 27 Comm: kworker/u4:2 Not tainted 5.9.0-syzkaller #0
[  115.949691][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  115.959727][   T27] Workqueue: qrtr_ns_handler qrtr_ns_worker
[  115.965597][   T27] Call Trace:
[  115.968877][   T27]  dump_stack+0x107/0x163
[  115.973193][   T27]  panic+0x306/0x73d
[  115.977065][   T27]  ? __warn_printk+0xf3/0xf3
[  115.981648][   T27]  ? __warn.cold+0x1d/0xbb
[  115.986039][   T27]  ? __warn.cold+0x14/0xbb
[  115.990435][   T27]  ? refcount_warn_saturate+0x169/0x1e0
[  115.995958][   T27]  __warn.cold+0x38/0xbb
[  116.000249][   T27]  ? wake_up_klogd.part.0+0x8e/0xd0
[  116.005447][   T27]  ? refcount_warn_saturate+0x169/0x1e0
[  116.010982][   T27]  report_bug+0x1bd/0x210
[  116.015299][   T27]  handle_bug+0x3c/0x60
[  116.019439][   T27]  exc_invalid_op+0x14/0x40
[  116.023927][   T27]  asm_exc_invalid_op+0x12/0x20
[  116.028762][   T27] RIP: 0010:refcount_warn_saturate+0x169/0x1e0
[  116.034893][   T27] Code: 09 31 ff 89 de e8 27 f9 bc fd 84 db 0f 85 36 ff ff ff e8 0a 01 bd fd 48 c7 c7 00 e7 9c 89 c6 05 7e d5 25 09 01 e8 ea 27 f6 04 <0f> 0b e9 17 ff ff ff e8 eb 00 bd fd 0f b6 1d 63 d5 25 09 31 ff 89
[  116.054536][   T27] RSP: 0018:ffffc90000e1f9f8 EFLAGS: 00010086
[  116.060629][   T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  116.068584][   T27] RDX: ffff888011043480 RSI: ffffffff81581365 RDI: fffff520001c3f31
[  116.076531][   T27] RBP: 0000000000000002 R08: 0000000000000001 R09: ffff8880b9f2005b
[  116.084478][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881407e0000
[  116.093556][   T27] R13: ffff8880279e2400 R14: ffff8880136ed530 R15: ffff8880136ed534
[  116.101521][   T27]  ? vprintk_func+0x95/0x1e0
[  116.106093][   T27]  ? refcount_warn_saturate+0x169/0x1e0
[  116.111615][   T27]  qrtr_recvmsg+0x845/0x970
[  116.117069][   T27]  ? qrtr_node_enqueue+0x1250/0x1250
[  116.122345][   T27]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  116.127604][   T27]  ? security_socket_recvmsg+0x8f/0xc0
[  116.133038][   T27]  ? qrtr_node_enqueue+0x1250/0x1250
[  116.138299][   T27]  kernel_recvmsg+0x110/0x160
[  116.142953][   T27]  qrtr_ns_worker+0x15a/0x1740
[  116.147696][   T27]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  116.153655][   T27]  ? ctrl_cmd_bye+0xc20/0xc20
[  116.158329][   T27]  process_one_work+0x933/0x15a0
[  116.163249][   T27]  ? lock_release+0x710/0x710
[  116.167903][   T27]  ? pwq_dec_nr_in_flight+0x320/0x320
[  116.173256][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  116.178167][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[  116.183185][   T27]  worker_thread+0x64c/0x1120
[  116.187845][   T27]  ? process_one_work+0x15a0/0x15a0
[  116.193020][   T27]  kthread+0x3b5/0x4a0
[  116.197076][   T27]  ? kthread_create_worker_on_cpu+0xf0/0xf0
[  116.202946][   T27]  ret_from_fork+0x1f/0x30
[  117.289810][   T27] Shutting down cpus with NMI
[  117.295266][   T27] Kernel Offset: disabled
[  117.299790][   T27] Rebooting in 86400 seconds..