last executing test programs: 1m43.067505221s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 1m42.206520065s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m40.191618892s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m27.551408245s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m24.158878591s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m21.792677714s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 1m10.2256325s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m8.996747835s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m7.188823517s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 50.231135609s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 49.747237704s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 49.05216922s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 36.014635942s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 34.642755338s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 32.53282013s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 20.170504167s ago: executing program 1 (id=451): r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 18.767846664s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4090, 0xffa}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18) 17.002089352s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x709}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}}, 0x880) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="8101000000000000000002000000080001001f"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.448673556s ago: executing program 3 (id=1318): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) sendto$rose(r1, &(0x7f0000000100)="e57c48d112b1415b2bf3573085a0e113b2abf7943182d9e8a0e811cf5e7a753999f31dcbf103b24f78e1e1ef13225a2ad4a02970af403b36ae7c63391710618063ef6aa826a63f5f5031cda387b44a987dc934eeb170fffcb080f5f3d0a7ef8d1b5bb45ddd3d8fdc20b5f83dd1aa1eca12c9dda6ad8e53e114d894679b", 0x7d, 0x40000c4, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000001c0)=0x84) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000026c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x38}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000003c0)={0xee}, 0x1) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="7f00d301ffffff01000005030000007f0101017f0000010000000000"], 0x1c) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 1.077047931s ago: executing program 3 (id=1319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8080}], 0x1, 0x40000) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 1.070775587s ago: executing program 4 (id=1320): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wlan0\x00', {0x2, 0xffff, @broadcast}}) sendto$inet(r0, &(0x7f0000000040)="903ff43601252d46bad47756f3697cdbcdae97c6e3420525cc5808bc960a467a069e8f3df669b2c445b92e949beada1815cdc804b1304972167ac7f77e6efd54aa683192952b128718f8c361aacf6a8e12b61c0599380bceef6d87e04f773be1068ed8f51d70cfdca1e729cd49380c8c41c9a84219628cbea3c1dde5e6b3cba66350d9ecac9396c6be5e952e71579b019c6897bd4eee58d84296e7c7a7d3edddb6863c385afe259d8152b02a15752822c5e8a4f27932d72e5b09a2817cde966128e67eba347d27af867ec28dc37d984e3507e5dfca5bab8c6ef8c1", 0xdb, 0x40, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 711.031283ms ago: executing program 3 (id=1321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$inet6(r3, 0x0, 0x0) (async, rerun: 32) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000d40)={0x1d, r6, 0x0, {0x1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 710.417277ms ago: executing program 4 (id=1322): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc4, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe6f, 0x2b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9f6505c16f6d78d731025e7856"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a833080dde568fe5c58f77dcdc"}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c02df84a9ab5899cc9fbabeda3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06cca7119c"}, @NL80211_KEY_MODE={0x5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4041}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYBLOB="5d30b30c9cdb8cb48c7a9c0240548895777b9b784ce8548ce253103ca3051a6bcb7b6b68f75d94aaa5e80064991593d88b47451d9b52334caa05e1110922cd9c165050761e919103a3873cfb9c0bb5f7fe834c90affab0c42e021a708245987e634f5e7fb4aa5546c784", @ANYRESOCT=r0, @ANYRES8=r1, @ANYBLOB="0a0006000802614b7222b99bc4661100000000000c0011800400030004000200"], 0x34}}, 0x0) 579.890225ms ago: executing program 4 (id=1323): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x1, 0x81, 0x40, {{0x1f, 0x4, 0x3, 0x1f, 0x7c, 0x68, 0x0, 0x80, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x44, 0x19, 0x1, 0xc, [{@broadcast, 0x1fb5df55}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}, {@loopback}, {@rand_addr=0x64010102, 0x1}, {@multicast1}, {@rand_addr=0x64010101, 0x4}]}, @timestamp={0x44, 0x24, 0x32, 0x0, 0x9, [0x1, 0x100, 0xfffffff9, 0x165bc880, 0x3ff, 0x6, 0xf3a, 0xffffffff]}]}}}}}) socketpair(0xf, 0x5, 0x76, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x7, r1, 0x3e, r2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r4 = accept4$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xce, 0xce, 0x8, [@union={0x1, 0x5, 0x0, 0x5, 0x0, 0x80000001, [{0x8, 0x0, 0x6fa48f10}, {0x1, 0x5, 0x8}, {0xf, 0x2, 0x401}, {0x6, 0x1, 0x1}, {0x3, 0x0, 0x800}]}, @const={0xb, 0x0, 0x0, 0xa, 0x4}, @datasec={0x8, 0x9, 0x0, 0xf, 0x2, [{0x5, 0x6, 0x9}, {0x2, 0x1, 0x1}, {0x2, 0xfffff800}, {0x3, 0x7, 0x638}, {0x1, 0x3, 0x8c}, {0x2, 0x0, 0x8}, {0x3, 0x0, 0x677}, {0x1, 0x80000001, 0x10}, {0x2, 0x1, 0x80000001}], "032e"}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000400)=""/12, 0xf0, 0xc, 0x1, 0xd, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7bb, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x18, 0x9, 0x12000000, 0x2, 0x51040, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x8}], &(0x7f0000000280)='syzkaller\x00', 0xfffff679, 0x32, &(0x7f00000002c0)=""/50, 0x41000, 0x0, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, r6, r7, r8], &(0x7f0000000680), 0x10, 0x3ff, @void, @value}, 0x94) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$SIOCRSACCEPT(r3, 0x89e3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x5, 0x0}, 0x8) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x1, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000840)='syzkaller\x00', 0x1ff, 0xf6, &(0x7f0000000880)=""/246, 0x41100, 0x4, '\x00', 0x0, @fallback=0xb, r4, 0x8, &(0x7f0000000980)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x10, 0xfffffffa, 0x2}, 0x10, r9, r10, 0x0, &(0x7f0000000ac0)=[r8], 0x0, 0x10, 0xf, @void, @value}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4010, r5, 0x35530000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000bc0)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000c80)=0x71c34394bef9fc73, 0x4) r13 = accept4$tipc(r12, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000d40)={'batadv_slave_0\x00'}) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x80, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x24040051) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xab01, 0x4, 0x310]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x2, '\x00', r11, r5, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001080)=@generic={&(0x7f0000000fc0)='./file0\x00', r14}, 0x18) openat$cgroup_ro(r12, &(0x7f00000010c0)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000001240)={0x0, 0x1}, &(0x7f0000001280)=0x8) 531.354196ms ago: executing program 3 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0xd094) 336.085577ms ago: executing program 4 (id=1325): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x4010) (async) close(r2) (async) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev}, {@empty}, {@dev}, {@broadcast}]}, @cipso={0x86, 0x11, 0x0, [{0x0, 0x2}, {0x0, 0x9, "7bd145794862b0"}]}]}}}}}}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4c68, 0x396e}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x2, 0xa2b}, &(0x7f0000000300)=0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000006bc109279bbeaa00000000000400000085000000510000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 318.211296ms ago: executing program 3 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x3, @mcast2}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 235.467395ms ago: executing program 4 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff2}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 110.370208ms ago: executing program 3 (id=1328): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x8, 0x2}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9573732a6bbae2b4140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x3, 0x6, @random="7d101a168a01"}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=1329): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x400) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close(r7) accept$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="80010000", @ANYBLOB="080026bd7000fbdbdf250500000008000500050000003c000180080003000200000008000300030000000800030000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="28010380240103801c0001800c00020062617461647630000400030004000300040003004c00018008000100010100000c000200657468746f6f6c00110002006563622873657270656e742900000000080001000c000000080001000f00000008000100080000000600020021000000040001801800018008000200182c26000400030008000200c47efa3754000180080001000900000008000100440000000c0002006261746164763000080001000900000012"], 0x180}, 0x1, 0x0, 0x0, 0x8001}, 0x2008000) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): [ 207.577911][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1024'. [ 207.768502][ T9833] chnl_net:caif_netlink_parms(): no params data found [ 207.838425][ T9905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.005849][ T54] Bluetooth: hci4: command tx timeout [ 208.111100][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.125136][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.133396][ T9833] bridge_slave_0: entered allmulticast mode [ 208.142509][ T9833] bridge_slave_0: entered promiscuous mode [ 208.200463][ T9677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.221788][ T9677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.274895][ T2896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.292036][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.299323][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.310160][ T9833] bridge_slave_1: entered allmulticast mode [ 208.318379][ T9833] bridge_slave_1: entered promiscuous mode [ 208.361298][ T9677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.460936][ T2896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.520693][ T9677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.567630][ T54] Bluetooth: hci2: command tx timeout [ 208.597722][ T2896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.616006][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.628572][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.712156][ T2896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.742141][ T9833] team0: Port device team_slave_0 added [ 208.769000][ T9833] team0: Port device team_slave_1 added [ 208.835204][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.845483][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.873267][ T9833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.888779][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.895957][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.930258][ T9833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.071412][ T9833] hsr_slave_0: entered promiscuous mode [ 209.084437][ T9833] hsr_slave_1: entered promiscuous mode [ 209.097771][ T9833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.111685][ T9833] Cannot create hsr debugfs directory [ 209.242463][ T9758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.258717][ T2896] bridge_slave_1: left allmulticast mode [ 209.264678][ T2896] bridge_slave_1: left promiscuous mode [ 209.271098][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.291620][ T2896] bridge_slave_0: left allmulticast mode [ 209.297672][ T2896] bridge_slave_0: left promiscuous mode [ 209.303614][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.770632][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.782187][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.793408][ T2896] bond0 (unregistering): Released all slaves [ 209.805576][ T9758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.906835][ T9758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.928276][ T9758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.038751][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1039'. [ 210.084627][ T54] Bluetooth: hci4: command tx timeout [ 210.141055][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.178618][ T2896] hsr_slave_0: left promiscuous mode [ 210.196612][ T2896] hsr_slave_1: left promiscuous mode [ 210.211740][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.227811][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.235855][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.257873][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.290384][ T2896] veth1_macvtap: left promiscuous mode [ 210.304734][ T2896] veth0_macvtap: left promiscuous mode [ 210.310868][ T2896] veth1_vlan: left promiscuous mode [ 210.322630][ T2896] veth0_vlan: left promiscuous mode [ 210.641110][ T54] Bluetooth: hci2: command tx timeout [ 210.754597][ T2896] team0 (unregistering): Port device team_slave_1 removed [ 210.795230][ T2896] team0 (unregistering): Port device team_slave_0 removed [ 211.297373][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.354916][ T9974] batadv_slave_0: entered promiscuous mode [ 211.367033][ T9973] batadv_slave_0: left promiscuous mode [ 211.488043][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.495163][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.546099][ T9982] sctp: [Deprecated]: syz.4.1045 (pid 9982) Use of int in max_burst socket option. [ 211.546099][ T9982] Use struct sctp_assoc_value instead [ 211.592182][ T9982] sctp: [Deprecated]: syz.4.1045 (pid 9982) Use of int in maxseg socket option. [ 211.592182][ T9982] Use struct sctp_assoc_value instead [ 211.603366][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.613646][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.761794][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.792814][ T9677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.870095][ T9758] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.973048][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.980272][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.018947][ T9833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.042368][ T9833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.077906][ T9833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.115303][ T9833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.164246][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.171422][ T9768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.264326][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.431169][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 212.464122][T10011] netlink: 'syz.4.1050': attribute type 3 has an invalid length. [ 212.487141][T10011] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1050'. [ 212.501157][ T9758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.588541][ T9677] veth0_vlan: entered promiscuous mode [ 212.602257][ T9677] veth1_vlan: entered promiscuous mode [ 212.717564][ T54] Bluetooth: hci2: command tx timeout [ 212.743159][ T9677] veth0_macvtap: entered promiscuous mode [ 212.795870][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.818636][ T9677] veth1_macvtap: entered promiscuous mode [ 212.872442][ T9833] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.908880][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.930277][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.951551][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.976453][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.992822][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.055363][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.062579][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.073447][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.080600][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.105089][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 213.136430][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1053'. [ 213.148254][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.163076][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 213.177760][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.193110][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 213.203513][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.222745][T10035] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.229559][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.248213][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.271022][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.284310][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.324476][T10034] geneve3: entered promiscuous mode [ 213.330286][T10034] geneve3: entered allmulticast mode [ 213.339185][T10034] bridge2: port 1(geneve3) entered blocking state [ 213.345986][T10034] bridge2: port 1(geneve3) entered disabled state [ 213.366154][T10034] bridge2: port 1(geneve3) entered blocking state [ 213.372747][T10034] bridge2: port 1(geneve3) entered listening state [ 213.445931][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.468606][ T9677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.484336][ T9677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.495509][ T9677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.516518][ T9677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.581736][T10050] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.913594][ T9758] veth0_vlan: entered promiscuous mode [ 213.921389][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.930283][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.938381][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.972875][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.102124][ T9758] veth1_vlan: entered promiscuous mode [ 214.179422][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.235156][ T9758] veth0_macvtap: entered promiscuous mode [ 214.308320][ T9758] veth1_macvtap: entered promiscuous mode [ 214.331696][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.343647][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.354225][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.369698][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.380535][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.392450][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.404706][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.438746][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.486338][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.506890][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.523878][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.546280][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.571309][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.591931][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.602982][T10084] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1058'. [ 214.615720][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.631466][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.675594][ T9758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.734009][ T9758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.771118][ T9758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.792702][ T9758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.839069][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.873504][ T9833] veth0_vlan: entered promiscuous mode [ 214.930606][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.971110][ T9833] veth1_vlan: entered promiscuous mode [ 215.031197][ T9833] veth0_macvtap: entered promiscuous mode [ 215.061190][ T9833] veth1_macvtap: entered promiscuous mode [ 215.084908][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.101159][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.130060][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.178487][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.186343][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.189886][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.198271][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.224424][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.236404][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.253050][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.264160][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.274474][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.285951][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.298276][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.318730][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.331831][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.342370][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.353075][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.363076][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.374105][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.384889][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.395593][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.406001][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.416818][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.428119][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.486766][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.530946][ T9833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.545826][ T9833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.560872][ T9833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.587131][ T9833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.794846][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.820112][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.901432][ T5980] bridge_slave_1: left allmulticast mode [ 215.914629][ T5980] bridge_slave_1: left promiscuous mode [ 215.966451][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.992126][ T5980] bridge_slave_0: left allmulticast mode [ 216.013968][ T5980] bridge_slave_0: left promiscuous mode [ 216.022553][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.093897][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.116555][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.125977][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.135031][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.143374][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.153685][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.450111][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.464137][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.488047][ T5980] bond0 (unregistering): Released all slaves [ 216.568872][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.587989][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.939650][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.950621][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.959653][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.967756][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.976495][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.983873][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.109536][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 217.131360][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 217.367884][ T5980] hsr_slave_0: left promiscuous mode [ 217.417157][ T5980] hsr_slave_1: left promiscuous mode [ 217.443795][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.466612][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.493821][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.506519][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.548662][ T5980] veth1_macvtap: left promiscuous mode [ 217.554728][ T5980] veth0_macvtap: left promiscuous mode [ 217.560579][ T5980] veth1_vlan: left promiscuous mode [ 217.565948][ T5980] veth0_vlan: left promiscuous mode [ 218.051194][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 218.099231][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 218.238176][ T5235] Bluetooth: hci3: command tx timeout [ 218.709246][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.726061][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.736479][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.751983][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.771747][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.787021][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.904064][T10100] chnl_net:caif_netlink_parms(): no params data found [ 219.117651][ T54] Bluetooth: hci4: command tx timeout [ 219.154770][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 219.172796][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 219.241700][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.266344][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.273774][T10100] bridge_slave_0: entered allmulticast mode [ 219.317817][T10100] bridge_slave_0: entered promiscuous mode [ 219.332605][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.340180][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.347966][T10100] bridge_slave_1: entered allmulticast mode [ 219.355282][T10100] bridge_slave_1: entered promiscuous mode [ 219.524659][T10176] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.538743][T10176] netlink: 'syz.3.1072': attribute type 2 has an invalid length. [ 219.579691][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 219.627042][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.727529][T10113] chnl_net:caif_netlink_parms(): no params data found [ 219.740978][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.846877][T10100] team0: Port device team_slave_0 added [ 219.851955][T10191] netlink: 'syz.3.1075': attribute type 9 has an invalid length. [ 219.884945][T10191] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1075'. [ 219.901195][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.915471][T10202] xt_hashlimit: size too large, truncated to 1048576 [ 219.954444][T10100] team0: Port device team_slave_1 added [ 220.097133][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.125061][T10211] xt_ipcomp: unknown flags B [ 220.149162][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.169891][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.197378][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.210007][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.223270][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.253930][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.307386][T10144] chnl_net:caif_netlink_parms(): no params data found [ 220.326639][ T54] Bluetooth: hci3: command tx timeout [ 220.370489][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.384205][T10216] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 220.447800][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.455186][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.486497][T10113] bridge_slave_0: entered allmulticast mode [ 220.508512][T10113] bridge_slave_0: entered promiscuous mode [ 220.649911][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.690781][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.718884][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.742066][T10113] bridge_slave_1: entered allmulticast mode [ 220.759546][T10113] bridge_slave_1: entered promiscuous mode [ 220.804846][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1083'. [ 220.869905][T10100] hsr_slave_0: entered promiscuous mode [ 220.877518][ T54] Bluetooth: hci2: command tx timeout [ 220.884824][T10100] hsr_slave_1: entered promiscuous mode [ 220.893519][T10100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.906301][T10100] Cannot create hsr debugfs directory [ 221.005258][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.017718][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.110690][T10113] team0: Port device team_slave_0 added [ 221.206362][ T54] Bluetooth: hci4: command tx timeout [ 221.217728][T10113] team0: Port device team_slave_1 added [ 221.240191][T10263] netlink: 'syz.3.1088': attribute type 7 has an invalid length. [ 221.267596][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.274577][T10263] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1088'. [ 221.288892][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.296278][T10144] bridge_slave_0: entered allmulticast mode [ 221.303432][T10144] bridge_slave_0: entered promiscuous mode [ 221.339316][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.357457][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.384359][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.425097][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.435253][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.444641][T10144] bridge_slave_1: entered allmulticast mode [ 221.452596][T10144] bridge_slave_1: entered promiscuous mode [ 221.460541][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.476617][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.521383][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.719409][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.789826][ T5980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.811297][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.829710][T10113] hsr_slave_0: entered promiscuous mode [ 221.841209][T10113] hsr_slave_1: entered promiscuous mode [ 221.862263][T10113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.875899][T10113] Cannot create hsr debugfs directory [ 221.950803][ T5980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.123853][ T5980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.171756][T10144] team0: Port device team_slave_0 added [ 222.193598][T10144] team0: Port device team_slave_1 added [ 222.299237][ T5980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.375223][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 222.403253][ T54] Bluetooth: hci3: command tx timeout [ 222.438116][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.445316][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.478315][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.491928][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.499441][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.526116][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.760187][T10144] hsr_slave_0: entered promiscuous mode [ 222.778290][T10144] hsr_slave_1: entered promiscuous mode [ 222.785805][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.801856][T10144] Cannot create hsr debugfs directory [ 222.956437][ T54] Bluetooth: hci2: command tx timeout [ 223.275759][ T5980] bridge_slave_1: left allmulticast mode [ 223.282010][ T54] Bluetooth: hci4: command tx timeout [ 223.318097][ T5980] bridge_slave_1: left promiscuous mode [ 223.323902][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.379375][ T5980] bridge_slave_0: left allmulticast mode [ 223.395451][ T5980] bridge_slave_0: left promiscuous mode [ 223.405896][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.419245][ T5980] bridge_slave_1: left allmulticast mode [ 223.436613][ T5980] bridge_slave_1: left promiscuous mode [ 223.442369][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.465721][ T5980] bridge_slave_0: left allmulticast mode [ 223.475235][ T5980] bridge_slave_0: left promiscuous mode [ 223.489271][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.989994][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 224.213506][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.226083][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.238545][ T5980] bond0 (unregistering): Released all slaves [ 224.353553][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.365321][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.378292][ T5980] bond0 (unregistering): Released all slaves [ 224.406859][T10338] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 224.420647][T10338] bond0: (slave bond_slave_0): Releasing backup interface [ 224.474340][T10341] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 224.482395][ T5235] Bluetooth: hci3: command tx timeout [ 224.545192][T10342] tipc: Started in network mode [ 224.550430][T10342] tipc: Node identity ac148fef, cluster identity 4711 [ 224.562428][T10342] tipc: Enabling of bearer rejected, failed to enable media [ 224.703801][T10100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.821370][T10100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.906345][T10100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.915649][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 224.927608][T10100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.041740][ T5235] Bluetooth: hci2: command tx timeout [ 225.269655][ T5980] hsr_slave_0: left promiscuous mode [ 225.275657][ T5980] hsr_slave_1: left promiscuous mode [ 225.282696][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.293985][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.302310][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.311546][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.324452][ T5980] hsr_slave_0: left promiscuous mode [ 225.330856][ T5980] hsr_slave_1: left promiscuous mode [ 225.347400][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.354866][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.362109][ T5235] Bluetooth: hci4: command tx timeout [ 225.369168][T10361] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 225.378108][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.385584][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.472351][ T5980] veth1_macvtap: left promiscuous mode [ 225.484095][ T5980] veth0_macvtap: left promiscuous mode [ 225.493400][ T5980] veth1_vlan: left promiscuous mode [ 225.504571][ T5980] veth0_vlan: left promiscuous mode [ 225.511347][ T5980] veth1_macvtap: left promiscuous mode [ 225.517309][ T5980] veth0_macvtap: left promiscuous mode [ 225.523028][ T5980] veth1_vlan: left promiscuous mode [ 225.528664][ T5980] veth0_vlan: left promiscuous mode [ 226.064011][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 226.109968][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 226.804811][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 226.843632][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 227.117522][ T5235] Bluetooth: hci2: command 0x0419 tx timeout [ 227.242705][T10363] wg2: entered promiscuous mode [ 227.255838][T10363] wg2: entered allmulticast mode [ 227.312153][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.444031][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.509033][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.516418][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.552218][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.559462][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.121162][T10144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.159046][T10144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.210047][T10144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.296919][T10144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.362106][T10113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.390001][T10113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.398453][ C1] bridge2: port 1(geneve3) entered learning state [ 228.451568][T10113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.501122][T10113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.642043][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.671204][T10404] syz.4.1111[10404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.671318][T10404] syz.4.1111[10404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.697487][ T5980] bridge_slave_1: left allmulticast mode [ 228.737922][ T5980] bridge_slave_1: left promiscuous mode [ 228.743950][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.775988][ T5980] bridge_slave_0: left allmulticast mode [ 228.786220][ T5980] bridge_slave_0: left promiscuous mode [ 228.792012][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.206442][ T54] Bluetooth: hci2: command 0x0419 tx timeout [ 229.661061][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.672517][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.693928][ T5980] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 229.705432][ T5980] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 229.720257][ T5980] bond0 (unregistering): Released all slaves [ 229.741702][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 229.764830][T10424] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 229.874054][ T5980] tipc: Disabling bearer [ 229.886871][ T5980] tipc: Left network mode [ 229.937485][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.938030][T10440] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 229.955717][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.123060][T10100] veth0_vlan: entered promiscuous mode [ 230.180504][ T5980] debugfs: Directory 'netdev:phy8-monitor' with parent 'phy8' already present! [ 230.311881][T10144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.322784][T10144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.338108][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.345292][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.414985][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.422217][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.514956][T10453] wg2: left promiscuous mode [ 230.521763][T10453] wg2: left allmulticast mode [ 230.536493][T10453] team0: Device wg2 is of different type [ 230.709769][T10100] veth1_vlan: entered promiscuous mode [ 230.837220][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.974911][ T5980] hsr_slave_0: left promiscuous mode [ 231.006067][ T5980] hsr_slave_1: left promiscuous mode [ 231.018405][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.035150][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.104741][ T5980] veth1_macvtap: left promiscuous mode [ 231.135278][ T5980] veth0_macvtap: left promiscuous mode [ 231.143947][ T5980] veth1_vlan: left promiscuous mode [ 231.150663][ T5980] veth0_vlan: left promiscuous mode [ 232.429139][T10100] veth0_macvtap: entered promiscuous mode [ 232.489107][T10100] veth1_macvtap: entered promiscuous mode [ 232.511354][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.553531][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.594288][T10144] veth0_vlan: entered promiscuous mode [ 232.647967][T10144] veth1_vlan: entered promiscuous mode [ 232.657889][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.665053][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.729326][T10144] veth0_macvtap: entered promiscuous mode [ 232.739459][T10144] veth1_macvtap: entered promiscuous mode [ 232.761132][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.768345][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.788201][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.798856][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.809042][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.819765][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.831822][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.841748][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.852315][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.862301][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.872851][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.884183][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.905563][T10113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.919827][T10113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.953496][T10100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.963134][T10100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.972743][T10100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.985873][T10100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.003355][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.023680][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.034103][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.053659][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.064010][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.080896][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.094106][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.110536][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.132467][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.142754][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.153791][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.164192][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.175122][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.186700][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.195178][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1123'. [ 233.275864][T10144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.296462][T10144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.305236][T10144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.336621][T10144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.427725][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.533417][T10565] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1124'. [ 233.562395][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.592389][T10566] ip6t_REJECT: ECHOREPLY is not supported [ 233.598516][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.607639][T10565] netlink: 'syz.3.1124': attribute type 10 has an invalid length. [ 233.668803][T10113] veth0_vlan: entered promiscuous mode [ 233.722589][ T9768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.738705][ T9768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.760018][T10113] veth1_vlan: entered promiscuous mode [ 233.913503][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.957836][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.127968][ T9768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.129367][T10113] veth0_macvtap: entered promiscuous mode [ 234.136661][ T9768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.171237][T10113] veth1_macvtap: entered promiscuous mode [ 234.205770][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.218127][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.230007][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.241315][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.253199][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.265496][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.275912][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.287024][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.298675][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.315842][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.331132][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.343271][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.354867][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.365125][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.376047][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.386322][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.398017][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.409453][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.421001][T10113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.431208][T10113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.440766][T10113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.466268][T10113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.582328][ T2960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.722611][ T2960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.763534][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.778606][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.852916][ T2960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.884927][ T9769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.907117][ T9769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.995554][ T2960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.236509][ T2960] bridge_slave_1: left allmulticast mode [ 235.242214][ T2960] bridge_slave_1: left promiscuous mode [ 235.266637][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.279088][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.290056][ T2960] bridge_slave_0: left allmulticast mode [ 235.290170][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.295737][ T2960] bridge_slave_0: left promiscuous mode [ 235.309175][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.317008][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.326869][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.334984][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.344077][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.764659][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.784795][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.803505][ T2960] bond0 (unregistering): Released all slaves [ 235.888083][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.898726][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.923372][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.944646][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.955316][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.963215][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.274757][ T2960] hsr_slave_0: left promiscuous mode [ 236.281175][ T2960] hsr_slave_1: left promiscuous mode [ 236.294951][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.303064][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.318702][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.331793][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.362204][ T2960] veth1_macvtap: left promiscuous mode [ 236.368186][ T2960] veth0_macvtap: left promiscuous mode [ 236.373836][ T2960] veth1_vlan: left promiscuous mode [ 236.385697][ T2960] veth0_vlan: left promiscuous mode [ 236.512495][ T8] IPVS: starting estimator thread 0... [ 236.616445][T10623] IPVS: using max 18 ests per chain, 43200 per kthread [ 236.713147][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.730099][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.738143][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.752525][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.769611][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.787735][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.050681][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 237.089111][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 237.436475][ T5235] Bluetooth: hci2: command tx timeout [ 237.684536][T10594] chnl_net:caif_netlink_parms(): no params data found [ 237.713442][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 237.739372][T10597] chnl_net:caif_netlink_parms(): no params data found [ 237.773521][T10631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 237.998355][ T5235] Bluetooth: hci3: command tx timeout [ 238.228007][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.263770][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.275060][T10597] bridge_slave_0: entered allmulticast mode [ 238.286138][T10597] bridge_slave_0: entered promiscuous mode [ 238.306584][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.328890][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.336110][T10594] bridge_slave_0: entered allmulticast mode [ 238.345986][T10594] bridge_slave_0: entered promiscuous mode [ 238.354766][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.363817][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.371138][T10594] bridge_slave_1: entered allmulticast mode [ 238.378370][T10594] bridge_slave_1: entered promiscuous mode [ 238.411570][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.419499][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.427362][T10597] bridge_slave_1: entered allmulticast mode [ 238.434500][T10597] bridge_slave_1: entered promiscuous mode [ 238.480059][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.552827][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.562523][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1141'. [ 238.632139][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.713531][T10594] team0: Port device team_slave_0 added [ 238.723797][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.747406][T10594] team0: Port device team_slave_1 added [ 238.799479][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.822311][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.876968][ T5235] Bluetooth: hci4: command tx timeout [ 238.931585][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.952816][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.996102][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.047476][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.077960][T10624] chnl_net:caif_netlink_parms(): no params data found [ 239.095306][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.122508][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.161369][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.198672][T10597] team0: Port device team_slave_0 added [ 239.235931][T10597] team0: Port device team_slave_1 added [ 239.311173][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.517585][ T5235] Bluetooth: hci2: command tx timeout [ 239.562466][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.588235][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.615912][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.635588][T10594] hsr_slave_0: entered promiscuous mode [ 239.642257][T10594] hsr_slave_1: entered promiscuous mode [ 239.648663][T10594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.657806][T10594] Cannot create hsr debugfs directory [ 239.674047][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.682782][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.715955][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.862698][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.870722][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.879609][T10624] bridge_slave_0: entered allmulticast mode [ 239.887373][T10624] bridge_slave_0: entered promiscuous mode [ 239.963892][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.981506][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.991776][T10624] bridge_slave_1: entered allmulticast mode [ 240.000237][T10624] bridge_slave_1: entered promiscuous mode [ 240.076673][ T5235] Bluetooth: hci3: command tx timeout [ 240.149096][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.199298][T10731] tap0: tun_chr_ioctl cmd 1074025681 [ 240.270605][T10597] hsr_slave_0: entered promiscuous mode [ 240.295980][T10597] hsr_slave_1: entered promiscuous mode [ 240.316955][T10597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.324573][T10597] Cannot create hsr debugfs directory [ 240.439821][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.525862][T10624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.624317][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.713318][T10624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.765570][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.838706][T10624] team0: Port device team_slave_0 added [ 240.868699][T10624] team0: Port device team_slave_1 added [ 240.924206][T10624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.933835][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.960558][ T5235] Bluetooth: hci4: command tx timeout [ 240.974997][T10624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.987971][T10624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.994982][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.022864][T10624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.142681][T10624] hsr_slave_0: entered promiscuous mode [ 241.150538][T10624] hsr_slave_1: entered promiscuous mode [ 241.157921][T10624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.165540][T10624] Cannot create hsr debugfs directory [ 241.174902][T10763] pimreg: entered allmulticast mode [ 241.294832][ T2960] bridge_slave_1: left allmulticast mode [ 241.301932][ T2960] bridge_slave_1: left promiscuous mode [ 241.308421][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.318562][ T2960] bridge_slave_0: left allmulticast mode [ 241.324284][ T2960] bridge_slave_0: left promiscuous mode [ 241.330831][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.341467][ T2960] bridge_slave_1: left allmulticast mode [ 241.348676][ T2960] bridge_slave_1: left promiscuous mode [ 241.354401][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.365724][ T2960] bridge_slave_0: left allmulticast mode [ 241.371742][ T2960] bridge_slave_0: left promiscuous mode [ 241.378802][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.596893][ T5235] Bluetooth: hci2: command tx timeout [ 241.657957][T10771] x_tables: duplicate entry at hook 2 [ 242.087008][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.101420][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.118811][ T2960] bond0 (unregistering): Released all slaves [ 242.159996][ T5235] Bluetooth: hci3: command tx timeout [ 242.257332][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.274748][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.286509][ T2960] bond0 (unregistering): Released all slaves [ 242.455152][T10776] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1159'. [ 242.468139][T10775] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1159'. [ 242.806345][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 243.022686][T10793] netlink: 'syz.4.1167': attribute type 4 has an invalid length. [ 243.037688][ T5235] Bluetooth: hci4: command tx timeout [ 243.060481][T10594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.135867][T10594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.145949][T10594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.162184][T10594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.177096][T10798] netlink: 'syz.4.1167': attribute type 12 has an invalid length. [ 243.184988][T10798] netlink: 'syz.4.1167': attribute type 11 has an invalid length. [ 243.193963][T10798] netlink: 'syz.4.1167': attribute type 11 has an invalid length. [ 243.203743][T10798] netlink: 'syz.4.1167': attribute type 11 has an invalid length. [ 243.212257][T10798] netlink: 'syz.4.1167': attribute type 11 has an invalid length. [ 243.223273][T10798] netlink: 'syz.4.1167': attribute type 11 has an invalid length. [ 243.231765][T10798] netlink: 'syz.4.1167': attribute type 4 has an invalid length. [ 243.240051][T10798] netlink: 'syz.4.1167': attribute type 5 has an invalid length. [ 243.254888][T10798] netlink: 196072 bytes leftover after parsing attributes in process `syz.4.1167'. [ 243.420152][ T2960] hsr_slave_0: left promiscuous mode [ 243.431025][ T2960] hsr_slave_1: left promiscuous mode [ 243.438506][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.446137][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.458777][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.466391][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.491411][ T2960] hsr_slave_0: left promiscuous mode [ 243.511375][ T2960] hsr_slave_1: left promiscuous mode [ 243.527359][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.534856][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.554254][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.571090][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.610462][ T2960] veth1_macvtap: left promiscuous mode [ 243.616013][ T2960] veth0_macvtap: left promiscuous mode [ 243.621942][ T2960] veth1_vlan: left promiscuous mode [ 243.627422][ T2960] veth0_vlan: left promiscuous mode [ 243.633798][ T2960] veth1_macvtap: left promiscuous mode [ 243.640406][ T2960] veth0_macvtap: left promiscuous mode [ 243.645991][ T2960] veth1_vlan: left promiscuous mode [ 243.651699][ T2960] veth0_vlan: left promiscuous mode [ 243.676553][ T5235] Bluetooth: hci2: command tx timeout [ 243.756726][ C1] bridge2: port 1(geneve3) entered forwarding state [ 243.763390][ C1] bridge2: topology change detected, propagating [ 244.211527][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 244.246596][ T5235] Bluetooth: hci3: command tx timeout [ 244.255518][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 244.964733][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 245.010691][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 245.127239][ T5235] Bluetooth: hci4: command tx timeout [ 245.450609][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.494087][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.505165][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.512357][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.617817][T10818] netlink: 'syz.4.1173': attribute type 4 has an invalid length. [ 245.646391][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.653514][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.910013][T10597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.958124][T10597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.055162][T10597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.083768][T10597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.354070][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.531084][T10624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.565780][T10624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.590924][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.623039][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.645373][T10624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.663513][T10624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.683583][T10594] veth0_vlan: entered promiscuous mode [ 246.690740][T10851] tun0: tun_chr_ioctl cmd 1074025681 [ 246.697781][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.704889][ T9768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.715648][T10851] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 246.731578][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1180'. [ 246.751317][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.758615][ T9768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.794581][T10594] veth1_vlan: entered promiscuous mode [ 246.885582][T10597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.938150][T10864] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 246.949231][T10594] veth0_macvtap: entered promiscuous mode [ 246.992989][T10594] veth1_macvtap: entered promiscuous mode [ 247.125954][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.152390][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.164155][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.188280][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.224031][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.259902][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.289542][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.332249][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.362554][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.386047][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.402747][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.420481][T10886] tipc: Enabled bearer , priority 10 [ 247.483984][T10594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.500765][T10594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.511631][T10594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.521410][T10893] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 247.532520][T10594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.551935][T10893] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 247.570416][T10893] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 247.601643][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.624594][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.692970][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.700182][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.780513][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.787737][ T9769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.963565][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.009043][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.074801][T10597] veth0_vlan: entered promiscuous mode [ 248.085677][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.099100][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.124031][T10597] veth1_vlan: entered promiscuous mode [ 248.265389][T10597] veth0_macvtap: entered promiscuous mode [ 248.300387][T10597] veth1_macvtap: entered promiscuous mode [ 248.415356][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.446258][ T5281] tipc: Node number set to 2887028719 [ 248.464118][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.488809][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.514635][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.542326][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.575171][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.601822][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.660019][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.689129][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.692637][T10947] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.1195'. [ 248.717830][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.743046][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.755597][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.776539][T10947] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 248.787679][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.817775][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.839685][T10945] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1196'. [ 248.964856][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.002373][T10624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.011252][T10597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.021453][T10597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.030472][T10597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.044718][T10597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.086761][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.195450][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.260706][ T9768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.283787][T10624] veth0_vlan: entered promiscuous mode [ 249.289866][ T9768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.321861][T10624] veth1_vlan: entered promiscuous mode [ 249.353455][ T9768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.374200][ T9768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.413929][T10624] veth0_macvtap: entered promiscuous mode [ 249.430808][T10624] veth1_macvtap: entered promiscuous mode [ 249.497106][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.528264][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.539253][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.549523][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.560246][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.570312][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.580882][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.590841][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.601482][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.613279][T10624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.682488][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.694567][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.704646][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.716084][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.733365][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.746044][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.771441][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.783749][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.798118][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.817554][T10624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.830937][T10624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.843414][T10624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.858900][T10624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.014002][T10970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1197'. [ 250.031467][T10970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1197'. [ 250.162098][ T9768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.186216][ T9768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.228622][ T5980] bridge_slave_1: left allmulticast mode [ 250.234418][ T5980] bridge_slave_1: left promiscuous mode [ 250.246559][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.263578][ T5980] bridge_slave_0: left allmulticast mode [ 250.271669][ T5980] bridge_slave_0: left promiscuous mode [ 250.283102][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.518070][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.532434][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.544755][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.586449][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.595249][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 250.608854][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.975713][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.995175][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.009363][ T5980] bond0 (unregistering): Released all slaves [ 251.047933][ T9768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.056092][ T9768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.378137][ T5980] hsr_slave_0: left promiscuous mode [ 251.384194][ T5980] hsr_slave_1: left promiscuous mode [ 251.390756][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.399019][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.407560][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.415017][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.455444][ T5980] veth1_macvtap: left promiscuous mode [ 251.461430][ T5980] veth0_macvtap: left promiscuous mode [ 251.475314][ T5980] veth1_vlan: left promiscuous mode [ 251.481098][ T5980] veth0_vlan: left promiscuous mode [ 251.761230][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.776101][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.785218][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.807366][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.871182][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.882947][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.547880][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 252.617025][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 252.638987][ T54] Bluetooth: hci2: command tx timeout [ 253.383992][T10984] chnl_net:caif_netlink_parms(): no params data found [ 253.683633][T11023] chnl_net:caif_netlink_parms(): no params data found [ 253.884138][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.895498][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.905706][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.914920][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.922215][ T5239] Bluetooth: hci3: command tx timeout [ 253.945727][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.956846][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.960309][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.983803][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.997879][T10984] bridge_slave_0: entered allmulticast mode [ 254.008384][T10984] bridge_slave_0: entered promiscuous mode [ 254.021826][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.032840][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.042627][T10984] bridge_slave_1: entered allmulticast mode [ 254.051963][T10984] bridge_slave_1: entered promiscuous mode [ 254.083321][ T5980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.105497][T11096] batadv0: entered promiscuous mode [ 254.230252][ T5980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.268012][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.293976][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.390360][ T5980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.434633][T10984] team0: Port device team_slave_0 added [ 254.459797][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.467503][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.474818][T11023] bridge_slave_0: entered allmulticast mode [ 254.491749][T11023] bridge_slave_0: entered promiscuous mode [ 254.505795][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.519494][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.531356][T11023] bridge_slave_1: entered allmulticast mode [ 254.547058][T11023] bridge_slave_1: entered promiscuous mode [ 254.555095][T10984] team0: Port device team_slave_1 added [ 254.578745][ T5980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.665108][T11118] netlink: 'syz.4.1210': attribute type 7 has an invalid length. [ 254.687417][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.697708][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.704695][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.716681][ T5235] Bluetooth: hci2: command tx timeout [ 254.734669][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.779273][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.805099][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.837453][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.882233][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.950032][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 255.084553][T11023] team0: Port device team_slave_0 added [ 255.111613][T11023] team0: Port device team_slave_1 added [ 255.212799][T10984] hsr_slave_0: entered promiscuous mode [ 255.222298][T10984] hsr_slave_1: entered promiscuous mode [ 255.229052][T10984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.237639][T10984] Cannot create hsr debugfs directory [ 255.342124][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.355550][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.383727][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.483789][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.517015][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.524056][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.555682][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.570229][T11150] geneve2: entered promiscuous mode [ 255.575564][T11150] geneve2: entered allmulticast mode [ 255.649629][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.668092][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 255.693626][T11093] chnl_net:caif_netlink_parms(): no params data found [ 255.790042][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.848565][T11023] hsr_slave_0: entered promiscuous mode [ 255.875413][T11023] hsr_slave_1: entered promiscuous mode [ 255.883456][T11023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.899708][T11023] Cannot create hsr debugfs directory [ 255.918203][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.924597][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.950838][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.002474][ T5235] Bluetooth: hci4: command tx timeout [ 256.007693][ T54] Bluetooth: hci3: command tx timeout [ 256.140892][T11176] sctp: [Deprecated]: syz.4.1221 (pid 11176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.140892][T11176] Use struct sctp_sack_info instead [ 256.193554][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.208816][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.216095][T11093] bridge_slave_0: entered allmulticast mode [ 256.238704][T11093] bridge_slave_0: entered promiscuous mode [ 256.268063][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.275218][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.292800][T11093] bridge_slave_1: entered allmulticast mode [ 256.302822][T11093] bridge_slave_1: entered promiscuous mode [ 256.471147][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.493601][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.597609][ T5980] bridge_slave_1: left allmulticast mode [ 256.605170][ T5980] bridge_slave_1: left promiscuous mode [ 256.613402][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.624910][ T5980] bridge_slave_0: left allmulticast mode [ 256.637560][ T5980] bridge_slave_0: left promiscuous mode [ 256.643327][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.666651][ T5980] bridge_slave_1: left allmulticast mode [ 256.673501][ T5980] bridge_slave_1: left promiscuous mode [ 256.689427][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.704586][ T5980] bridge_slave_0: left allmulticast mode [ 256.710818][ T5980] bridge_slave_0: left promiscuous mode [ 256.718532][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.796369][ T54] Bluetooth: hci2: command tx timeout [ 257.492467][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.504681][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.516876][ T5980] bond0 (unregistering): Released all slaves [ 257.625078][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.642627][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.654790][ T5980] bond0 (unregistering): Released all slaves [ 257.723957][T11093] team0: Port device team_slave_0 added [ 257.753874][T11093] team0: Port device team_slave_1 added [ 257.797551][T11212] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1225'. [ 257.983074][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.006251][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.057621][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.072907][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.081777][ T54] Bluetooth: hci4: command tx timeout [ 258.081850][ T5235] Bluetooth: hci3: command tx timeout [ 258.103542][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.130336][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.321092][T11093] hsr_slave_0: entered promiscuous mode [ 258.330453][T11093] hsr_slave_1: entered promiscuous mode [ 258.345853][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.353728][T11093] Cannot create hsr debugfs directory [ 258.411941][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 258.457650][T11230] openvswitch: netlink: Unknown nsh attribute 0 [ 258.592192][T11233] netlink: 'syz.3.1231': attribute type 4 has an invalid length. [ 258.783833][T10984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.871186][T10984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.878073][ T5235] Bluetooth: hci2: command tx timeout [ 258.884447][T11246] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 258.897579][T11246] netlink: 9260 bytes leftover after parsing attributes in process `syz.3.1232'. [ 258.903763][T10984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.929622][T11246] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1232'. [ 258.953262][T11246] netlink: 'syz.3.1232': attribute type 2 has an invalid length. [ 258.977230][ T5980] hsr_slave_0: left promiscuous mode [ 258.983850][ T5980] hsr_slave_1: left promiscuous mode [ 258.999665][T11246] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 258.999802][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.024113][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.033749][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.041465][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.062793][ T5980] hsr_slave_0: left promiscuous mode [ 259.069193][ T5980] hsr_slave_1: left promiscuous mode [ 259.075291][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.083424][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.098897][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.106579][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.140051][ T5980] veth1_macvtap: left promiscuous mode [ 259.145717][ T5980] veth0_macvtap: left promiscuous mode [ 259.151680][ T5980] veth1_vlan: left promiscuous mode [ 259.157027][ T5980] veth0_vlan: left promiscuous mode [ 259.163380][ T5980] veth1_macvtap: left promiscuous mode [ 259.169101][ T5980] veth0_macvtap: left promiscuous mode [ 259.174741][ T5980] veth1_vlan: left promiscuous mode [ 259.180217][ T5980] veth0_vlan: left promiscuous mode [ 259.765256][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 259.811602][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 260.160311][ T5235] Bluetooth: hci3: command tx timeout [ 260.171082][ T5235] Bluetooth: hci4: command tx timeout [ 260.513291][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 260.559802][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 260.979634][T10984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.308425][T11263] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 261.383984][T10984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.499909][T10984] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.553858][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.561056][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.627320][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.634514][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.755885][T11023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.792746][T11023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.882378][T11023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.965494][T11023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.236377][ T5235] Bluetooth: hci4: command tx timeout [ 262.332706][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.471071][T11023] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.491767][T11093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.521170][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.544804][T11093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.559823][T11093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.589912][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.597118][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.619584][T11093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.657620][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.664792][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.823590][T10984] veth0_vlan: entered promiscuous mode [ 262.878307][T10984] veth1_vlan: entered promiscuous mode [ 262.992543][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.023842][T10984] veth0_macvtap: entered promiscuous mode [ 263.074159][T10984] veth1_macvtap: entered promiscuous mode [ 263.111754][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.134263][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.148166][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.170131][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.201480][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.228584][T10984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.258292][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.265512][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.295260][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.306747][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.317680][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.328721][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.349705][T10984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.373055][T10984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.386130][T10984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.401932][T10984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.413126][T10984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.473634][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.510842][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.518068][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.698725][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.728618][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.821331][T11023] veth0_vlan: entered promiscuous mode [ 263.852488][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.875177][T11023] veth1_vlan: entered promiscuous mode [ 263.886133][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.988563][T11023] veth0_macvtap: entered promiscuous mode [ 264.036033][T11023] veth1_macvtap: entered promiscuous mode [ 264.054033][T11363] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 264.088484][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.126432][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.173951][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.194358][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.217059][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.256456][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.275401][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.389833][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.412972][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.425041][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.446435][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.464861][T11023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.478864][T11023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.490514][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.538307][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.654429][ T5980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.698261][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 264.736263][T11381] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1253'. [ 264.745300][T11381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1253'. [ 264.770712][T11381] vlan3: entered allmulticast mode [ 264.785670][T11381] erspan0: entered allmulticast mode [ 264.806373][T11023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.815136][T11023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.823957][T11023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.832738][T11023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.923515][ T5980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.011808][ T5980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.110459][ T5980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.149981][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.167886][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.181832][T11093] veth0_vlan: entered promiscuous mode [ 265.207319][ T9769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.209890][T11093] veth1_vlan: entered promiscuous mode [ 265.215258][ T9769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.290317][T11093] veth0_macvtap: entered promiscuous mode [ 265.313383][T11093] veth1_macvtap: entered promiscuous mode [ 265.394406][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.409641][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.423674][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.441201][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.453321][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.469782][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.484217][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.495235][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.511170][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.537195][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.552146][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.565789][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.578806][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.595210][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.616987][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.636358][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.647194][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.658530][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.680914][T11093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.690137][T11093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.700609][T11093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.709738][T11093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.929757][ T5980] bridge_slave_1: left allmulticast mode [ 265.935499][ T5980] bridge_slave_1: left promiscuous mode [ 265.958693][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.978370][ T5980] bridge_slave_0: left allmulticast mode [ 265.984098][ T5980] bridge_slave_0: left promiscuous mode [ 266.017331][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.425866][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.451605][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.466567][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.479114][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.492880][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.503705][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.886476][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.902057][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.915043][ T5980] bond0 (unregistering): Released all slaves [ 266.935362][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.954549][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.023412][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.032144][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.320710][ T5980] hsr_slave_0: left promiscuous mode [ 267.391325][T11437] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1255'. [ 267.400865][ T5980] hsr_slave_1: left promiscuous mode [ 267.411096][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.447002][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.478160][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.485637][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.572231][ T5980] veth1_macvtap: left promiscuous mode [ 267.585156][ T5980] veth0_macvtap: left promiscuous mode [ 267.593339][ T5980] veth1_vlan: left promiscuous mode [ 267.602594][ T5980] veth0_vlan: left promiscuous mode [ 267.754929][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.769403][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.779733][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.795383][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.811696][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.820636][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.251876][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 268.293678][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 268.565353][ T5235] Bluetooth: hci2: command tx timeout [ 268.949842][T11423] chnl_net:caif_netlink_parms(): no params data found [ 269.062484][T11460] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 269.103394][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.110736][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.168941][T11460] bridge0: entered allmulticast mode [ 269.503548][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 269.530414][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.574202][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.583549][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.595944][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.607647][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.615122][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.738836][ T5980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.769611][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1265'. [ 269.782969][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.791684][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.806397][T11423] bridge_slave_0: entered allmulticast mode [ 269.818251][T11423] bridge_slave_0: entered promiscuous mode [ 269.909287][ T5980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.919865][ T54] Bluetooth: hci3: command tx timeout [ 269.923844][T11506] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1267'. [ 269.966448][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.983936][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.016616][T11423] bridge_slave_1: entered allmulticast mode [ 270.024193][T11423] bridge_slave_1: entered promiscuous mode [ 270.059276][ T5980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.081464][T11449] chnl_net:caif_netlink_parms(): no params data found [ 270.229893][ T5980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.253760][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.304875][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.466577][T11423] team0: Port device team_slave_0 added [ 270.479355][T11535] netlink: 'syz.4.1271': attribute type 2 has an invalid length. [ 270.501133][T11529] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.523403][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.532342][T11529] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 270.547198][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.575744][T11449] bridge_slave_0: entered allmulticast mode [ 270.594495][T11449] bridge_slave_0: entered promiscuous mode [ 270.629494][T11423] team0: Port device team_slave_1 added [ 270.636727][ T54] Bluetooth: hci2: command tx timeout [ 270.682671][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.702499][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.714782][T11449] bridge_slave_1: entered allmulticast mode [ 270.727981][T11449] bridge_slave_1: entered promiscuous mode [ 270.757898][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.764999][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.799851][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.823815][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 270.970517][T11557] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 270.991712][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.016407][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.026975][T11557] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.1275'. [ 271.060752][T11557] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 271.061459][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.074734][T11557] netlink: 209 bytes leftover after parsing attributes in process `syz.4.1275'. [ 271.172841][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.235850][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.262814][T11570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1278'. [ 271.343517][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.378255][T11423] hsr_slave_0: entered promiscuous mode [ 271.387179][T11423] hsr_slave_1: entered promiscuous mode [ 271.403590][T11423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.411270][T11423] Cannot create hsr debugfs directory [ 271.445001][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.486442][T11576] No such timeout policy "syz0" [ 271.541679][T11449] team0: Port device team_slave_0 added [ 271.561298][T11449] team0: Port device team_slave_1 added [ 271.572036][T11487] chnl_net:caif_netlink_parms(): no params data found [ 271.673230][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.679140][ T5235] Bluetooth: hci4: command tx timeout [ 271.807101][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.814154][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.875631][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.942672][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.997162][ T5235] Bluetooth: hci3: command tx timeout [ 272.006915][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.023537][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.061396][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.150632][T11609] macsec0: entered promiscuous mode [ 272.155920][T11609] macsec0: entered allmulticast mode [ 272.394244][T11449] hsr_slave_0: entered promiscuous mode [ 272.402778][T11449] hsr_slave_1: entered promiscuous mode [ 272.411637][T11449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.419392][T11449] Cannot create hsr debugfs directory [ 272.529405][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 272.552491][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.562504][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.575980][T11487] bridge_slave_0: entered allmulticast mode [ 272.590785][T11487] bridge_slave_0: entered promiscuous mode [ 272.601595][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.609004][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.616319][T11487] bridge_slave_1: entered allmulticast mode [ 272.627586][T11487] bridge_slave_1: entered promiscuous mode [ 272.717030][ T5235] Bluetooth: hci2: command tx timeout [ 272.778422][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.832270][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.844142][ T5980] bridge_slave_1: left allmulticast mode [ 272.851024][ T5980] bridge_slave_1: left promiscuous mode [ 272.857596][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.882797][ T5980] bridge_slave_0: left allmulticast mode [ 272.896766][ T5980] bridge_slave_0: left promiscuous mode [ 272.902706][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.925346][ T5980] bridge_slave_1: left allmulticast mode [ 272.931601][ T5980] bridge_slave_1: left promiscuous mode [ 272.938293][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.948500][ T5980] bridge_slave_0: left allmulticast mode [ 272.954784][ T5980] bridge_slave_0: left promiscuous mode [ 272.962679][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.645453][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.657991][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.669711][ T5980] bond0 (unregistering): Released all slaves [ 273.759167][ T5235] Bluetooth: hci4: command tx timeout [ 273.786872][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.799950][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.811138][ T5980] bond0 (unregistering): Released all slaves [ 274.025187][T11487] team0: Port device team_slave_0 added [ 274.034441][T11487] team0: Port device team_slave_1 added [ 274.079416][ T5235] Bluetooth: hci3: command tx timeout [ 274.256604][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.263748][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.292381][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.339513][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.362248][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.407658][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.555001][T11661] syzkaller0: entered promiscuous mode [ 274.561252][T11661] syzkaller0: entered allmulticast mode [ 274.584229][T11423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.604644][T11487] hsr_slave_0: entered promiscuous mode [ 274.611998][T11487] hsr_slave_1: entered promiscuous mode [ 274.619421][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.627762][T11487] Cannot create hsr debugfs directory [ 274.701019][T11423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.798775][ T5235] Bluetooth: hci2: command tx timeout [ 274.817683][T11423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.828743][T11668] ªªªªª»: renamed from bond_slave_1 (while UP) [ 274.899509][T11423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.133633][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 275.837166][ T5235] Bluetooth: hci4: command tx timeout [ 276.158132][ T5235] Bluetooth: hci3: command tx timeout [ 276.765211][ T5980] hsr_slave_0: left promiscuous mode [ 276.771399][ T5980] hsr_slave_1: left promiscuous mode [ 276.788650][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.796116][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.827138][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.834764][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.859933][ T5980] hsr_slave_0: left promiscuous mode [ 276.870800][ T5980] hsr_slave_1: left promiscuous mode [ 276.881286][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.895089][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.908553][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.916013][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.979068][ T5980] veth1_macvtap: left promiscuous mode [ 276.984736][ T5980] veth0_macvtap: left promiscuous mode [ 276.992524][ T5980] veth1_vlan: left promiscuous mode [ 276.997857][ T5980] veth0_vlan: left promiscuous mode [ 277.004099][ T5980] veth1_macvtap: left promiscuous mode [ 277.010432][ T5980] veth0_macvtap: left promiscuous mode [ 277.016007][ T5980] veth1_vlan: left promiscuous mode [ 277.021917][ T5980] veth0_vlan: left promiscuous mode [ 277.544184][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 277.589800][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 277.916485][ T5235] Bluetooth: hci4: command tx timeout [ 278.364654][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 278.415306][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 278.992912][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1306'. [ 279.306917][T11423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.411321][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.505248][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.512476][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.561112][T11715] xt_CT: No such helper "netbios-ns" [ 279.577565][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.584707][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.635265][T11719] xt_CT: No such helper "netbios-ns" [ 279.815192][T11487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.855203][T11487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.874571][T11487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.935819][T11487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.223547][T11737] IPVS: dh: SCTP 127.0.0.1:0 - no destination available [ 280.243695][T11449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.327641][ T25] IPVS: starting estimator thread 0... [ 280.337622][T11449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.380475][T11449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.419243][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 280.445529][T11449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.456375][T11742] IPVS: using max 15 ests per chain, 36000 per kthread [ 283.531564][T11750] netlink: 12090 bytes leftover after parsing attributes in process `syz.3.1318'. [ 284.012026][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 284.254929][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 284.286508][T11770] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 284.373331][T11772] x_tables: unsorted underflow at hook 4 [ 284.532480][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 284.558717][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 284.662794][T11783] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1328'. [ 284.707999][T11783] macsec1: entered allmulticast mode [ 284.723770][T11783] veth1_macvtap: entered allmulticast mode [ 284.747889][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 284.898071][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 296.192867][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.202701][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.211522][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.226996][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.239966][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.247515][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.266685][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.294756][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.316536][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.326584][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.343637][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.351166][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.956187][ C0] sched: DL replenish lagged too much [ 298.316579][ T5239] Bluetooth: hci5: command tx timeout [ 298.396641][ T5239] Bluetooth: hci6: command tx timeout [ 300.405120][ T5239] Bluetooth: hci5: command tx timeout [ 300.486660][ T5239] Bluetooth: hci6: command tx timeout [ 302.476343][ T5239] Bluetooth: hci5: command tx timeout [ 302.556486][ T5239] Bluetooth: hci6: command tx timeout [ 304.556555][ T5239] Bluetooth: hci5: command tx timeout [ 304.636578][ T5239] Bluetooth: hci6: command tx timeout [ 313.545517][T11783] veth1_macvtap (unregistering): left allmulticast mode [ 317.359715][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.366187][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.598949][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.460093][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.471536][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.479528][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 331.487576][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 331.506709][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 331.514059][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.775400][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.784288][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.792496][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.800881][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.808526][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 331.817743][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 333.025210][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 333.034712][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 333.044947][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 333.054261][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 333.063873][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 333.077159][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 333.596453][ T54] Bluetooth: hci7: command tx timeout [ 333.916468][ T54] Bluetooth: hci8: command tx timeout [ 335.117015][ T54] Bluetooth: hci9: command tx timeout [ 335.679236][ T54] Bluetooth: hci7: command tx timeout [ 335.996393][ T54] Bluetooth: hci8: command tx timeout [ 337.196627][ T54] Bluetooth: hci9: command tx timeout [ 337.756285][ T54] Bluetooth: hci7: command tx timeout [ 338.077012][ T54] Bluetooth: hci8: command tx timeout [ 339.281017][ T54] Bluetooth: hci9: command tx timeout [ 339.836321][ T54] Bluetooth: hci7: command tx timeout [ 340.157403][ T54] Bluetooth: hci8: command tx timeout [ 341.356304][ T54] Bluetooth: hci9: command tx timeout [ 357.921577][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 357.936558][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 357.956342][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 357.964388][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 357.972750][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 357.986377][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 358.064530][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 358.073577][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 358.086377][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 358.096950][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 358.110063][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 358.117850][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 360.076589][ T5239] Bluetooth: hci10: command tx timeout [ 360.157418][ T5239] Bluetooth: hci11: command tx timeout [ 362.156451][ T5239] Bluetooth: hci10: command tx timeout [ 362.236512][ T5239] Bluetooth: hci11: command tx timeout [ 364.236396][ T5239] Bluetooth: hci10: command tx timeout [ 364.316340][ T5239] Bluetooth: hci11: command tx timeout [ 366.316782][ T5239] Bluetooth: hci10: command tx timeout [ 366.396410][ T5239] Bluetooth: hci11: command tx timeout [ 378.603138][T11789] batadv_slave_1: entered promiscuous mode [ 378.626820][T11792] batadv_slave_1: left promiscuous mode [ 378.800647][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807045][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.962602][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.981775][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.990001][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.998168][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.005949][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 392.019344][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.500876][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.510299][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.531786][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.540231][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.554917][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 393.563960][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.076912][ T54] Bluetooth: hci2: command tx timeout [ 395.604979][ T54] Bluetooth: hci3: command tx timeout [ 395.806412][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.815384][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.826401][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.834418][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.842633][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.850303][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.157352][ T54] Bluetooth: hci2: command tx timeout [ 397.676543][ T54] Bluetooth: hci3: command tx timeout [ 397.916477][ T54] Bluetooth: hci4: command tx timeout [ 398.236441][ T54] Bluetooth: hci2: command tx timeout [ 399.764648][ T54] Bluetooth: hci3: command tx timeout [ 399.996307][ T54] Bluetooth: hci4: command tx timeout [ 400.316256][ T54] Bluetooth: hci2: command tx timeout [ 401.844789][ T54] Bluetooth: hci3: command tx timeout [ 402.082710][ T54] Bluetooth: hci4: command tx timeout [ 404.157178][ T54] Bluetooth: hci4: command tx timeout [ 418.812206][ T5239] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 418.821839][ T5239] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 418.829740][ T5239] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 418.849460][ T5239] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 418.860398][ T5239] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 418.868084][ T5239] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 419.084075][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 419.093769][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 419.106307][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 419.119430][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 419.127313][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 419.135215][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 420.956654][ T5248] Bluetooth: hci12: command tx timeout [ 421.196531][ T5248] Bluetooth: hci13: command tx timeout [ 421.886144][ T5248] Bluetooth: hci6: command 0x0406 tx timeout [ 421.892279][ T5248] Bluetooth: hci5: command 0x0406 tx timeout [ 423.036560][T11851] Bluetooth: hci12: command tx timeout [ 423.276314][T11851] Bluetooth: hci13: command tx timeout [ 425.116548][T11851] Bluetooth: hci12: command tx timeout [ 425.356335][T11851] Bluetooth: hci13: command tx timeout [ 427.196417][T11851] Bluetooth: hci12: command tx timeout [ 427.436335][T11851] Bluetooth: hci13: command tx timeout [ 428.717246][ T30] INFO: task syz.4.1329:11793 blocked for more than 143 seconds. [ 428.725037][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.766251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.781138][ T30] task:syz.4.1329 state:D stack:27392 pid:11793 tgid:11784 ppid:5227 flags:0x00000004 [ 428.836135][ T30] Call Trace: [ 428.839489][ T30] [ 428.842457][ T30] __schedule+0x1895/0x4b30 [ 428.956335][ T30] ? __pfx___schedule+0x10/0x10 [ 428.961277][ T30] ? __pfx_lock_release+0x10/0x10 [ 429.027957][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 429.033523][ T30] ? schedule+0x90/0x320 [ 429.082194][ T30] schedule+0x14b/0x320 [ 429.116322][ T30] schedule_preempt_disabled+0x13/0x30 [ 429.121962][ T30] __mutex_lock+0x6a7/0xd70 [ 429.161924][ T30] ? __mutex_lock+0x52a/0xd70 [ 429.177226][ T30] ? raw_setsockopt+0xe6d/0x1a80 [ 429.182233][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.212597][ T30] ? __might_fault+0xc6/0x120 [ 429.225553][ T30] raw_setsockopt+0xe6d/0x1a80 [ 429.236535][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 429.241798][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 429.255875][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 429.261176][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 429.272520][ T30] do_sock_setsockopt+0x3af/0x720 [ 429.279696][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 429.285295][ T30] ? __fget_files+0x29/0x470 [ 429.296171][ T30] ? __fget_files+0x3f3/0x470 [ 429.300905][ T30] ? __fget_files+0x29/0x470 [ 429.305560][ T30] __sys_setsockopt+0x1a2/0x250 [ 429.319245][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 429.324422][ T30] do_syscall_64+0xf3/0x230 [ 429.335151][ T30] ? clear_bhb_loop+0x35/0x90 [ 429.340201][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.352418][ T30] RIP: 0033:0x7f4c7157dff9 [ 429.360323][ T30] RSP: 002b:00007f4c72382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.380316][ T30] RAX: ffffffffffffffda RBX: 00007f4c71736208 RCX: 00007f4c7157dff9 [ 429.389905][ T30] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000005 [ 429.405890][ T30] RBP: 00007f4c715f0296 R08: 0000000000000008 R09: 0000000000000000 [ 429.415474][ T30] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 429.426352][ T30] R13: 0000000000000000 R14: 00007f4c71736208 R15: 00007fff48cf0818 [ 429.434390][ T30] [ 429.448891][ T30] [ 429.448891][ T30] Showing all locks held in the system: [ 429.464879][ T30] 3 locks held by kworker/0:0/8: [ 429.471428][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 429.489553][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 429.503566][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 429.526679][ T30] 1 lock held by khungtaskd/30: [ 429.531585][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 429.546265][ T30] 3 locks held by kworker/u8:6/2896: [ 429.551605][ T30] 3 locks held by kworker/u8:7/2960: [ 429.566436][ T30] #0: ffff88802e1d6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 429.584358][ T30] #1: ffffc9000a237d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 429.606427][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 429.615957][ T30] 2 locks held by dhcpcd/4898: [ 429.629566][ T30] #0: ffffffff8fd374b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 429.644652][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 429.654341][ T30] 2 locks held by getty/4983: [ 429.665725][ T30] #0: ffff88802eb2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 429.679009][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 429.695714][ T30] 3 locks held by kworker/0:3/5234: [ 429.701335][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 429.721949][ T30] #1: ffffc90003c87d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 429.735945][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 429.752734][ T30] 5 locks held by kworker/0:4/5280: [ 429.758419][ T30] 3 locks held by kworker/0:6/5282: [ 429.763660][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 429.784211][ T30] #1: ffffc90004697d00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 429.794600][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 429.806202][ T30] 3 locks held by kworker/u8:13/5980: [ 429.811626][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 429.832062][ T30] #1: ffffc90016a9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 429.846160][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 429.855252][ T30] 1 lock held by syz-executor/11423: [ 429.866403][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 429.875477][ T30] 1 lock held by syz-executor/11449: [ 429.890291][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 429.901038][ T30] 1 lock held by syz-executor/11487: [ 429.911376][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 429.936234][ T30] 2 locks held by syz.3.1328/11795: [ 429.941494][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 429.956679][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 429.973498][ T30] 1 lock held by syz.4.1329/11793: [ 429.983130][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: raw_setsockopt+0xe6d/0x1a80 [ 429.997624][ T30] 1 lock held by syz-executor/11799: [ 430.003057][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.020358][ T30] 1 lock held by syz-executor/11801: [ 430.025703][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.041012][ T30] 1 lock held by syz-executor/11808: [ 430.051047][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.063386][ T30] 1 lock held by syz-executor/11813: [ 430.072811][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.085812][ T30] 1 lock held by syz-executor/11816: [ 430.095742][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.108284][ T30] 1 lock held by syz-executor/11820: [ 430.113803][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.126230][ T30] 1 lock held by syz-executor/11823: [ 430.131568][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.150190][ T30] 1 lock held by syz-executor/11833: [ 430.155533][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.170838][ T30] 1 lock held by syz-executor/11838: [ 430.177818][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.195485][ T30] 1 lock held by syz-executor/11841: [ 430.202689][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.221644][ T30] 1 lock held by syz-executor/11845: [ 430.227350][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.243421][ T30] 1 lock held by syz-executor/11849: [ 430.251872][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.266186][ T30] [ 430.268557][ T30] ============================================= [ 430.268557][ T30] [ 430.283190][ T30] NMI backtrace for cpu 1 [ 430.287573][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 430.298114][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.308202][ T30] Call Trace: [ 430.311503][ T30] [ 430.314472][ T30] dump_stack_lvl+0x241/0x360 [ 430.319191][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.324427][ T30] ? __pfx__printk+0x10/0x10 [ 430.329067][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.334061][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.339555][ T30] ? _printk+0xd5/0x120 [ 430.343760][ T30] ? __pfx__printk+0x10/0x10 [ 430.348411][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.353332][ T30] ? __pfx__printk+0x10/0x10 [ 430.357964][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 430.363032][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.369073][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.375100][ T30] watchdog+0xff4/0x1040 [ 430.379390][ T30] ? watchdog+0x1ea/0x1040 [ 430.383857][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.388578][ T30] kthread+0x2f0/0x390 [ 430.392695][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.397423][ T30] ? __pfx_kthread+0x10/0x10 [ 430.402070][ T30] ret_from_fork+0x4b/0x80 [ 430.406539][ T30] ? __pfx_kthread+0x10/0x10 [ 430.411250][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.416067][ T30] [ 430.419667][ T30] Sending NMI from CPU 1 to CPUs 0: [ 430.424924][ C0] NMI backtrace for cpu 0 [ 430.424938][ C0] CPU: 0 UID: 0 PID: 5280 Comm: kworker/0:4 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 430.424960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.424973][ C0] Workqueue: events nsim_dev_trap_report_work [ 430.425000][ C0] RIP: 0010:filter_irq_stacks+0x4f/0xa0 [ 430.425025][ C0] Code: 40 38 cf 8b 48 89 fb eb 0c 49 ff c7 48 83 c3 08 4d 39 fc 74 4f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 37 ec 7d 00 4b 8b 04 fe 48 39 e8 72 0c 48 c7 c1 [ 430.425041][ C0] RSP: 0018:ffffc90000007518 EFLAGS: 00000246 [ 430.425057][ C0] RAX: 1ffff92000000eb7 RBX: ffffc900000075b8 RCX: dffffc0000000000 [ 430.425072][ C0] RDX: 0000000000000000 RSI: 0000000000000015 RDI: ffffc900000075b0 [ 430.425085][ C0] RBP: ffffffff8be00230 R08: 000000000000001b R09: ffffc90000007510 [ 430.425098][ C0] R10: ffffc90000007470 R11: ffffffff81808f50 R12: 0000000000000015 [ 430.425111][ C0] R13: ffffffff8bcf3840 R14: ffffc900000075b0 R15: 0000000000000001 [ 430.425125][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 430.425140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.425153][ C0] CR2: 00007f4c723c3f98 CR3: 000000000e734000 CR4: 00000000003526f0 [ 430.425169][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.425181][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.425193][ C0] Call Trace: [ 430.425199][ C0] [ 430.425207][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 430.425230][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.425260][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.425281][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.425309][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.425334][ C0] ? nmi_handle+0x14f/0x5a0 [ 430.425370][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.425390][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 430.425411][ C0] ? default_do_nmi+0x63/0x160 [ 430.425435][ C0] ? exc_nmi+0x123/0x1f0 [ 430.425456][ C0] ? end_repeat_nmi+0xf/0x53 [ 430.425474][ C0] ? __lock_text_end+0x6/0x6 [ 430.425501][ C0] ? xen_error_entry+0x60/0x60 [ 430.425525][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.425556][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 430.425578][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 430.425602][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 430.425623][ C0] [ 430.425630][ C0] [ 430.425638][ C0] stack_depot_save_flags+0x29/0x830 [ 430.425667][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.425697][ C0] kasan_save_track+0x51/0x80 [ 430.425714][ C0] ? kasan_save_track+0x3f/0x80 [ 430.425731][ C0] ? kasan_save_free_info+0x40/0x50 [ 430.425756][ C0] ? __kasan_slab_free+0x59/0x70 [ 430.425774][ C0] ? kmem_cache_free+0x1a2/0x420 [ 430.425799][ C0] ? skb_release_data+0x677/0x8a0 [ 430.425818][ C0] ? consume_skb+0x9f/0xf0 [ 430.425834][ C0] ? can_receive+0x3c7/0x470 [ 430.425850][ C0] ? can_rcv+0x144/0x260 [ 430.425865][ C0] ? __netif_receive_skb+0x2e0/0x650 [ 430.425887][ C0] ? process_backlog+0x662/0x15b0 [ 430.425910][ C0] ? __napi_poll+0xcb/0x490 [ 430.425930][ C0] ? net_rx_action+0x89b/0x1240 [ 430.425952][ C0] ? handle_softirqs+0x2c5/0x980 [ 430.425976][ C0] ? do_softirq+0x11b/0x1e0 [ 430.425998][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 430.426021][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 430.426041][ C0] ? process_scheduled_works+0xa63/0x1850 [ 430.426066][ C0] ? worker_thread+0x870/0xd30 [ 430.426097][ C0] ? kthread+0x2f0/0x390 [ 430.426115][ C0] ? ret_from_fork+0x4b/0x80 [ 430.426141][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 430.426187][ C0] kasan_save_free_info+0x40/0x50 [ 430.426213][ C0] __kasan_slab_free+0x59/0x70 [ 430.426232][ C0] ? skb_release_data+0x677/0x8a0 [ 430.426250][ C0] kmem_cache_free+0x1a2/0x420 [ 430.426274][ C0] ? skb_release_data+0x677/0x8a0 [ 430.426296][ C0] skb_release_data+0x677/0x8a0 [ 430.426319][ C0] ? can_receive+0x1cd/0x470 [ 430.426337][ C0] consume_skb+0x9f/0xf0 [ 430.426354][ C0] can_receive+0x3c7/0x470 [ 430.426374][ C0] can_rcv+0x144/0x260 [ 430.426390][ C0] ? __pfx_can_rcv+0x10/0x10 [ 430.426407][ C0] __netif_receive_skb+0x2e0/0x650 [ 430.426431][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.426459][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 430.426480][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.426507][ C0] ? __pfx_lock_release+0x10/0x10 [ 430.426535][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 430.426572][ C0] process_backlog+0x662/0x15b0 [ 430.426598][ C0] ? process_backlog+0x33b/0x15b0 [ 430.426627][ C0] ? __pfx_process_backlog+0x10/0x10 [ 430.426650][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.426679][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.426709][ C0] __napi_poll+0xcb/0x490 [ 430.426732][ C0] net_rx_action+0x89b/0x1240 [ 430.426768][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 430.426804][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.426838][ C0] handle_softirqs+0x2c5/0x980 [ 430.426865][ C0] ? do_softirq+0x11b/0x1e0 [ 430.426890][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 430.426920][ C0] do_softirq+0x11b/0x1e0 [ 430.426942][ C0] [ 430.426948][ C0] [ 430.426955][ C0] ? __pfx_do_softirq+0x10/0x10 [ 430.426979][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 430.427008][ C0] ? rcu_is_watching+0x15/0xb0 [ 430.427030][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 430.427055][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 430.427076][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 430.427100][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 430.427126][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 430.427150][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 430.427179][ C0] ? process_scheduled_works+0x976/0x1850 [ 430.427205][ C0] process_scheduled_works+0xa63/0x1850 [ 430.427246][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.427276][ C0] ? assign_work+0x364/0x3d0 [ 430.427307][ C0] worker_thread+0x870/0xd30 [ 430.427337][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.427365][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.427394][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.427419][ C0] kthread+0x2f0/0x390 [ 430.427436][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.427461][ C0] ? __pfx_kthread+0x10/0x10 [ 430.427479][ C0] ret_from_fork+0x4b/0x80 [ 430.427504][ C0] ? __pfx_kthread+0x10/0x10 [ 430.427522][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.427582][ C0] [ 431.088717][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.095629][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 431.106257][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.116359][ T30] Call Trace: [ 431.119675][ T30] [ 431.122632][ T30] dump_stack_lvl+0x241/0x360 [ 431.127366][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.132729][ T30] ? __pfx__printk+0x10/0x10 [ 431.137361][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.143426][ T30] ? vscnprintf+0x5d/0x90 [ 431.147800][ T30] panic+0x349/0x880 [ 431.151737][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.157930][ T30] ? __pfx_panic+0x10/0x10 [ 431.162397][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 431.167814][ T30] ? __irq_work_queue_local+0x137/0x410 [ 431.173403][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 431.178810][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.185005][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 431.191211][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 431.197410][ T30] watchdog+0x1033/0x1040 [ 431.201788][ T30] ? watchdog+0x1ea/0x1040 [ 431.206263][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.210993][ T30] kthread+0x2f0/0x390 [ 431.215102][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.219819][ T30] ? __pfx_kthread+0x10/0x10 [ 431.224456][ T30] ret_from_fork+0x4b/0x80 [ 431.228915][ T30] ? __pfx_kthread+0x10/0x10 [ 431.233536][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.238355][ T30] [ 431.241840][ T30] Kernel Offset: disabled [ 431.246177][ T30] Rebooting in 86400 seconds..