last executing test programs: 1m42.61496459s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 1m27.631194345s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 45.490965113s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 45.481556589s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 45.481443121s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 45.481302077s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 45.481174381s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 45.48105101s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 45.481019533s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 45.4809116s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 45.480880068s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 33.23661327s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 32.36629524s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 19.474043407s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 17.914384111s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 5.553900694s ago: executing program 1 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) write(r1, &(0x7f0000000000)="8f2a0a650a000000070d63e286a5ffff1d86b2eb4f23970916", 0x19) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r8, 0xfffff000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x28, 0x14, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x38, 0x5e7f6f0369b0ed17, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x28}}, 0x4008010) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x4005044) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x2000, 0x0, 0x54a, 0xfff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r4, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000009b07000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.308092773s ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x6, 0x0, &(0x7f0000000300)="5cdd3086ddff", 0x0, 0xec9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4) 4.148651046s ago: executing program 2 (id=2798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb710) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000280)=""/115) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x429, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 2.948647744s ago: executing program 4 (id=3204): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x75, &(0x7f00000001c0)={@broadcast, @random="e23dfb9c6ac7", @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x2, 0x20, 0x67, 0x67, 0x0, 0x7, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@timestamp={0x44, 0x18, 0x1a, 0x0, 0xe, [0x4, 0x200004, 0x9, 0x10000, 0xb4]}, @ssrr={0x89, 0x7, 0x94, [@empty]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "0ca8b02b74bc"}]}, @noop]}}, {{0x800, 0x4ea2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x6, "aaa5ba", 0x2}, "2bbd738c0c5fd2929d1016caa69129aed6a65d"}}}}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x80000001, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x34}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000700)=0x8f, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000aae9"], 0x20000408}}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xc0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$netrom(r4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r7 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000500)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) 1.835109618s ago: executing program 4 (id=3206): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r0, 0x9446) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0xa0, 0x2) r2 = accept(r1, 0x0, &(0x7f0000000080)) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r3, 0x1, {0x1, 0x1}, 0xff}, 0x18, &(0x7f00000002c0)={&(0x7f0000000200)="59ffa9daf6d3c7140bb10a7447bd3db9a6b973bf5da77d401a0a22261c61372cff90903204ea79a2c29c73503812162de77ba6fc5190f22bc572cd62f3a2b10a64d25fa508ea69b47a19e1929d4e6822a4ccda9651c5944d9897c00c5b4cabf814e836a6fc8e61900502159261fb0b000aba39fbdf343d5c05a20072ba0812eb35c6da2eb039a8f79a452220555ddc7f64cf79db1d0f383cd430f84d6026ec3b8e96dc7372c26e761d04bb942f8f067f82f784abdda0e841b95244fa6f7978", 0xbf}, 0x1, 0x0, 0x0, 0x20004140}, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) r4 = socket$inet(0x2, 0x6, 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0xb, &(0x7f00000003c0)=0x7, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000440)='cgroup.events\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000500)={0x1, 0xff, 0x7e, &(0x7f0000000480)=""/126}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@ipv6={@mcast1, @loopback, [0xffffffff, 0x0, 0x0, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'pimreg\x00', '\x00', {0xff}, {0xff}, 0x0, 0xf, 0x6, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "8262", 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x1}, {0x1, 0x1}}}}, {{@ipv6={@remote, @private0, [0xff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'caif0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x33, 0x40, 0x1, 0x53}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x3, 0x3}, {0x0, 0x3, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000980)={0x2, 'pimreg0\x00', {0xe}, 0x1}) write$ppp(r7, &(0x7f00000009c0)="ef8ce4635108bd47e6b826d8b9543508d2481e5e7f7e6df5b7c368e565f5d960", 0x20) write$cgroup_int(r6, &(0x7f0000000a00)=0x3, 0x12) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000a40)) ioctl(r7, 0xcf, &(0x7f0000000a80)="8b432b77ac18ff0d88330bbdfcd51035347c5b68194828d994f988e9a88130728ab68585729a3be20027baf843b3d36c3b2374a43b6829abed95") ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000ac0)={{r5}, 0x8, 0x8}) ioctl(r1, 0x1, &(0x7f0000000b00)="65efce2cbd9b6d362c192ef49edcc6568074e64370ec1e66a4c83e216238d1f0e03e90a35337c0b0831beffe7fb32a48000ca0e344ce5eb7ce80c01452177b0608097d6cba43c283429b7682644c2edd053771e28e7a95de17a1b64ce5713235a6785bb18058b108426c62a1c6fa109c429075217896036c92f185d7d8a80003cef268cbef69ff3cfe25c80981e8789fd6faab3086f3fef2b7658df9477347e846d356f3b67cd69e6ce896") openat$cgroup_procs(r6, &(0x7f0000000bc0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x120, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x120}}, 0x40008000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x84008000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xac, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x35}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}]}, 0xac}, 0x1, 0x0, 0x0, 0x10004041}, 0x8040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001100)={0x0, 0xe, 0x6}, &(0x7f0000001140)=0x8) 1.656647674s ago: executing program 4 (id=3209): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 1.197966366s ago: executing program 4 (id=3212): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001aa36617368000000001c00028408000140000000000800034000000000080002400000000009000100737922a5508d00000900020073797a3200000040140000001100010000000000000000000000000a"], 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630148000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r8, 0x113, 0x2, 0x0, 0x20000024) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x4c, 0x0, '.\x00'}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x4c, 0x0, '.\x00'}}) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f00000001c0)={0x5, @broadcast}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x124, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa35}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48c1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) 847.364067ms ago: executing program 4 (id=3213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="0486d85c918a8950863a640fea17c88750f7f0948b2c4bd06e1c72", 0x1b}, {&(0x7f0000000180)="2abce30f9a7ed894fe7c62dda26be01e210458c64fdc129edc40ce6a288fade5ef27c2396949b0", 0x27}], 0x2, 0x0, 0x0, 0x2840}], 0x1, 0x4044090) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1}, 0x9}], 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) shutdown(r2, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x4e21, 0xf5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) 678.935724ms ago: executing program 3 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r1, 0x199ce94286ec10d9, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0xd0}, 0x800) (async) recvmsg$can_j1939(r0, &(0x7f00000024c0)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/174, 0xae}, {&(0x7f0000002380)=""/52, 0x34}, {&(0x7f00000023c0)=""/94, 0x5e}], 0x5}, 0x12060) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002540), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x38, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4000800) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000002640)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @remote, @netrom, @remote, @rose]}, &(0x7f00000026c0)=0x48, 0x100800) accept4$netrom(r5, &(0x7f0000002700)={{0x3, @default}, [@remote, @bcast, @rose, @null, @default, @bcast, @remote, @null]}, &(0x7f0000002780)=0x48, 0x81000) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000027c0)={'pim6reg\x00', 0x6}) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000002940)={&(0x7f0000002800), 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x88, 0x0, 0x200, 0x70bd28, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf390}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x80d1}, 0x4003) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000002980), 0x8) bind$inet6(r6, &(0x7f00000029c0)={0xa, 0x4e21, 0x5, @remote, 0x31e}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000002a00)=0x1, 0x4) (async) epoll_create(0x2b73) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000002a40)) (async) recvmsg$unix(r6, &(0x7f0000003c40)={&(0x7f0000002a80), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000002b00)=""/4096, 0x1000}], 0x1, &(0x7f0000003b40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x100) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r12, 0x84009422, &(0x7f0000003c80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r14 = accept4$x25(r10, &(0x7f0000004080)={0x9, @remote}, &(0x7f00000040c0)=0x12, 0x80000) getsockopt$X25_QBITINCL(r14, 0x106, 0x1, &(0x7f0000004100), &(0x7f0000004140)=0x4) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f00000041c0), r8) sendmsg$WG_CMD_GET_DEVICE(r15, &(0x7f0000004900)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004200)={0x690, r16, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x66c, 0x8, 0x0, 0x1, [{0x3e4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3ac, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xfffffffc}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a84b2ee744d421211acc5e6ba3fa791b8417450c1ab1529d7584f68f898bbf3"}, @WGPEER_A_ALLOWEDIPS={0x214, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x48, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}]}, 0x690}, 0x1, 0x0, 0x0, 0x44001}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000049c0)={'syztnl1\x00', &(0x7f0000004940)={'syztnl2\x00', r3, 0x4, 0x76, 0x9, 0x8, 0x0, @rand_addr=' \x01\x00', @private2, 0x7, 0x20, 0x1, 0x140}}) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000004a00)={@ipv4={'\x00', '\xff\xff', @multicast1}, r17}, 0x14) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000004a40)={0xbd, {{0xa, 0x4e22, 0x88a, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x9, @remote, 0x3}}, {{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x74c3}}, {{0xa, 0x4e21, 0x5, @private2, 0x800}}]}, 0x210) (async) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000004c80)={'veth0_to_bond\x00', 0x23}) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000004e80)={@remote, @empty, 0x0}, &(0x7f0000004ec0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005180)={0x6, 0xf, &(0x7f0000004cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004d40)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000004d80)=""/249, 0x40f00, 0x58, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000050c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000005100)={0x0, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005140), 0x10, 0x4, @void, @value}, 0x94) 597.204872ms ago: executing program 3 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x4}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0xd0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @remote, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x3b, 0x4, 0x5, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x2}, {0xffffffffffffffff, 0x1}}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 'veth0_to_team\x00', 'team0\x00', {0xff}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x7, [], 0x11e00000, 0x10, 0x6, [@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2d}, @empty, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2c}, @private0], 0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 423.267604ms ago: executing program 3 (id=3216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="440002804010"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x40084) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x9, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 395.502814ms ago: executing program 3 (id=3217): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbd}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x5e13, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20, 0x74}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r7, 0x30d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, 0x0, 0x0) ppoll(&(0x7f00000005c0)=[{r9}], 0x1, &(0x7f0000000600), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r1, 0x0, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r11, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @remote}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb8bd44cbc3f4a0b2}, 0x20008885) 213.247715ms ago: executing program 3 (id=3218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c000008000200", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000110200"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xf) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r10, 0x8406f989402a7621, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000b00)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a929b438869aada0f61b0c51420fc62354b49efa392809e666fa846d2c854e11", "fc12181a485aa480d7c4f1bcf8d55964d0e82521a28c544a5e4b5f35455e3b5de914af76674f32e127d18e4b7b8b2eac", "84cd402a86aa2c916287d04b8ac9900000000000000000ff4eedd7e4", {"1ac6a33e9306b86ea9ad7dd3a25467ed", "65401068c93d42267f982742963486c9"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) 11.442973ms ago: executing program 3 (id=3219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f0000000000), 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 0s ago: executing program 4 (id=3220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r0, 0x2e659000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x80, 0x4}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffff9, 0x4, 0x9ed, 0x80, r7, 0x5, '\x00', r4, r8, 0x2, 0x3, 0x1, 0x9, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.553351][T15935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.566411][T15935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.577601][T15935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.587428][T15935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.598983][T15935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.619654][T15935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.655220][T15935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.666167][T15935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.676308][T15935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.686024][T15935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.747362][ T6130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.767384][ T6130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.790912][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.806890][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.985462][ T3493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.343242][ T3493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.555435][ T3493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.740358][ T3493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.830507][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.845937][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.854883][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.876059][ T3493] bridge_slave_1: left allmulticast mode [ 322.882458][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.890125][ T3493] bridge_slave_1: left promiscuous mode [ 322.896982][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.904444][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.913517][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.929211][ T3493] bridge_slave_0: left allmulticast mode [ 322.934892][ T3493] bridge_slave_0: left promiscuous mode [ 322.941514][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.439218][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.456801][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.473220][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.486365][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.499230][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.511768][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.522422][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.538090][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.548937][ T3493] bond0 (unregistering): Released all slaves [ 323.905986][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.929510][ T3493] hsr_slave_0: left promiscuous mode [ 323.935422][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.943573][ T3493] hsr_slave_1: left promiscuous mode [ 323.943836][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.957330][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.959573][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.967166][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.978096][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.986533][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.986842][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.002627][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.025921][ T3493] veth1_macvtap: left promiscuous mode [ 324.031592][ T3493] veth0_macvtap: left promiscuous mode [ 324.037141][ T3493] veth1_vlan: left promiscuous mode [ 324.042632][ T3493] veth0_vlan: left promiscuous mode [ 324.416495][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 324.458292][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 324.835035][T15981] chnl_net:caif_netlink_parms(): no params data found [ 324.905167][T15978] chnl_net:caif_netlink_parms(): no params data found [ 324.968282][ T5848] Bluetooth: hci0: command tx timeout [ 325.040514][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.050093][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.057350][T15981] bridge_slave_0: entered allmulticast mode [ 325.064239][T15981] bridge_slave_0: entered promiscuous mode [ 325.096923][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.104419][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.111772][T15981] bridge_slave_1: entered allmulticast mode [ 325.119031][T15981] bridge_slave_1: entered promiscuous mode [ 325.142164][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.150583][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.157972][T15978] bridge_slave_0: entered allmulticast mode [ 325.164984][T15978] bridge_slave_0: entered promiscuous mode [ 325.184800][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.214849][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.223668][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.230943][T15978] bridge_slave_1: entered allmulticast mode [ 325.237891][T15978] bridge_slave_1: entered promiscuous mode [ 325.245674][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.306350][T15981] team0: Port device team_slave_0 added [ 325.315834][T15981] team0: Port device team_slave_1 added [ 325.330156][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.357326][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.372040][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.379495][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.407226][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.422683][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.430020][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.456727][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.478401][T15989] chnl_net:caif_netlink_parms(): no params data found [ 325.563318][T15978] team0: Port device team_slave_0 added [ 325.571643][T15978] team0: Port device team_slave_1 added [ 325.597962][ T5848] Bluetooth: hci1: command tx timeout [ 325.624837][T15989] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.635115][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.643379][T15989] bridge_slave_0: entered allmulticast mode [ 325.650575][T15989] bridge_slave_0: entered promiscuous mode [ 325.687723][ T3493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.706527][T15981] hsr_slave_0: entered promiscuous mode [ 325.715936][T15981] hsr_slave_1: entered promiscuous mode [ 325.723492][T15989] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.737820][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.744994][T15989] bridge_slave_1: entered allmulticast mode [ 325.752204][T15989] bridge_slave_1: entered promiscuous mode [ 325.765222][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.772531][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.798606][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.811688][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.819045][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.846144][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.876631][ T3493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.903372][T15989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.959173][T15989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.996355][ T3493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.008305][ T5848] Bluetooth: hci3: command tx timeout [ 326.056681][T15978] hsr_slave_0: entered promiscuous mode [ 326.063439][T15978] hsr_slave_1: entered promiscuous mode [ 326.070638][T15978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.078743][T15978] Cannot create hsr debugfs directory [ 326.095246][T15989] team0: Port device team_slave_0 added [ 326.114448][ T3493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.140430][T15989] team0: Port device team_slave_1 added [ 326.203693][T15989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.211448][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.238501][T15989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.252038][T15989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.259226][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.286106][T15989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.329743][T15981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.393825][T15989] hsr_slave_0: entered promiscuous mode [ 326.401638][T15989] hsr_slave_1: entered promiscuous mode [ 326.408464][T15989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.416058][T15989] Cannot create hsr debugfs directory [ 326.450009][T15981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.535757][T15981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.614680][T15981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.687238][ T3493] bridge_slave_1: left allmulticast mode [ 326.693151][ T3493] bridge_slave_1: left promiscuous mode [ 326.699033][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.707384][ T3493] bridge_slave_0: left allmulticast mode [ 326.714717][ T3493] bridge_slave_0: left promiscuous mode [ 326.732345][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.754602][ T3493] bridge_slave_1: left allmulticast mode [ 326.760385][ T3493] bridge_slave_1: left promiscuous mode [ 326.766009][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.776870][ T3493] bridge_slave_0: left allmulticast mode [ 326.782886][ T3493] bridge_slave_0: left promiscuous mode [ 326.789418][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.044229][ T5848] Bluetooth: hci0: command tx timeout [ 327.294722][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.306074][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.316585][ T3493] bond0 (unregistering): Released all slaves [ 327.426246][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.437250][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.448911][ T3493] bond0 (unregistering): Released all slaves [ 327.693278][ T5848] Bluetooth: hci1: command tx timeout [ 327.884386][ T3493] hsr_slave_0: left promiscuous mode [ 327.890480][ T3493] hsr_slave_1: left promiscuous mode [ 327.896289][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.906410][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.917122][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.925520][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.937250][ T3493] hsr_slave_0: left promiscuous mode [ 327.947071][ T3493] hsr_slave_1: left promiscuous mode [ 327.953591][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.961142][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.969282][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.976682][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.006824][ T3493] veth1_macvtap: left promiscuous mode [ 328.012549][ T3493] veth0_macvtap: left promiscuous mode [ 328.018309][ T3493] veth1_vlan: left promiscuous mode [ 328.023617][ T3493] veth0_vlan: left promiscuous mode [ 328.029740][ T3493] veth1_macvtap: left promiscuous mode [ 328.035230][ T3493] veth0_macvtap: left promiscuous mode [ 328.041244][ T3493] veth1_vlan: left promiscuous mode [ 328.046515][ T3493] veth0_vlan: left promiscuous mode [ 328.088280][ T5848] Bluetooth: hci3: command tx timeout [ 328.523823][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 328.562457][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 329.128279][ T5848] Bluetooth: hci0: command tx timeout [ 329.240832][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 329.282091][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 329.738116][T15981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.755545][T15981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.765763][T15981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.767799][ T5848] Bluetooth: hci1: command tx timeout [ 329.796905][T15981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.872877][T15978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.892537][T15978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.903242][T15978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.915812][T15978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.042353][T15989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.053907][T15989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.086933][T15989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.102355][T15989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.140844][T15981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.158700][ T5848] Bluetooth: hci3: command tx timeout [ 330.172817][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.202703][T13871] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.209823][T13871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.232583][T13871] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.239755][T13871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.264431][T15978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.318516][T15978] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.338180][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.345351][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.360907][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.368020][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.468412][T15989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.513376][T15989] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.543021][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.550188][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.585694][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.592858][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.643477][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.662963][T15989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.674179][T15989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.724419][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.764964][T15981] veth0_vlan: entered promiscuous mode [ 330.794170][T15978] veth0_vlan: entered promiscuous mode [ 330.804157][T15981] veth1_vlan: entered promiscuous mode [ 330.832536][T15978] veth1_vlan: entered promiscuous mode [ 330.861239][T15981] veth0_macvtap: entered promiscuous mode [ 330.876635][T15981] veth1_macvtap: entered promiscuous mode [ 330.906673][T15978] veth0_macvtap: entered promiscuous mode [ 330.922213][T15978] veth1_macvtap: entered promiscuous mode [ 330.942632][T15989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.952684][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.972290][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.982577][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.994158][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.005630][T15978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.023746][T15978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.034840][T15978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.047313][T15978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.056543][T15981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.065519][T15981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.075566][T15981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.084751][T15981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.100389][T15978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.109853][T15978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.119428][T15978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.128289][T15978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.198091][ T5848] Bluetooth: hci0: command tx timeout [ 331.213680][ T6130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.223958][ T6130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.224978][T15989] veth0_vlan: entered promiscuous mode [ 331.281981][T15989] veth1_vlan: entered promiscuous mode [ 331.296344][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.308334][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.341637][T15989] veth0_macvtap: entered promiscuous mode [ 331.374842][T15989] veth1_macvtap: entered promiscuous mode [ 331.382055][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.395686][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.446509][T13871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.450463][T15989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.465857][T15989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.476234][T15989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.479599][T13871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.486962][T15989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.506035][T15989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.522204][T15989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.534758][T15989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.545763][T15989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.556678][T15989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.571933][T15989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.582431][T15989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.591669][T15989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.601351][T15989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.610159][T15989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.734856][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.744571][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.766657][T13871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.776361][T13871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.189700][ T3448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.773692][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.789768][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.812655][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.826479][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.836459][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.846742][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.879677][ T3448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.979810][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.990524][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.998959][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.007849][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.015599][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.023307][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.076470][T16018] chnl_net:caif_netlink_parms(): no params data found [ 333.155272][T16018] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.164694][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.175784][T16018] bridge_slave_0: entered allmulticast mode [ 333.182464][T16018] bridge_slave_0: entered promiscuous mode [ 333.193971][T16018] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.203216][T16018] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.210609][T16018] bridge_slave_1: entered allmulticast mode [ 333.217156][T16018] bridge_slave_1: entered promiscuous mode [ 333.243431][T16018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.256175][T16018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.292185][T16018] team0: Port device team_slave_0 added [ 333.302401][T16018] team0: Port device team_slave_1 added [ 333.335462][T16018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.343526][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.370926][T16018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.383990][T16018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.391313][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.418382][T16018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.501429][T16018] hsr_slave_0: entered promiscuous mode [ 333.515605][T16018] hsr_slave_1: entered promiscuous mode [ 333.523995][T16018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.541162][T16018] Cannot create hsr debugfs directory [ 333.552474][T16020] chnl_net:caif_netlink_parms(): no params data found [ 333.668626][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.677315][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.685905][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.694655][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.702322][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.709986][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.744960][ T3448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.782611][T16020] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.790265][T16020] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.797615][T16020] bridge_slave_0: entered allmulticast mode [ 333.804680][T16020] bridge_slave_0: entered promiscuous mode [ 333.845940][ T3448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.863300][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.870607][T16020] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.878253][T16020] bridge_slave_1: entered allmulticast mode [ 333.885335][T16020] bridge_slave_1: entered promiscuous mode [ 333.945149][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.975699][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.029848][T16020] team0: Port device team_slave_0 added [ 334.048215][T16020] team0: Port device team_slave_1 added [ 334.090356][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.097330][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.123997][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.148521][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.155547][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.182903][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.224985][ T3448] bridge_slave_1: left allmulticast mode [ 334.231589][ T3448] bridge_slave_1: left promiscuous mode [ 334.237332][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.246344][ T3448] bridge_slave_0: left allmulticast mode [ 334.252565][ T3448] bridge_slave_0: left promiscuous mode [ 334.258500][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.613450][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.624873][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.636816][ T3448] bond0 (unregistering): Released all slaves [ 334.697715][T16020] hsr_slave_0: entered promiscuous mode [ 334.706529][T16020] hsr_slave_1: entered promiscuous mode [ 334.730793][T16020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.740663][T16020] Cannot create hsr debugfs directory [ 334.793505][T16033] chnl_net:caif_netlink_parms(): no params data found [ 334.943868][ T3448] hsr_slave_0: left promiscuous mode [ 334.950166][ T3448] hsr_slave_1: left promiscuous mode [ 334.956076][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.963626][ T5839] Bluetooth: hci0: command tx timeout [ 334.970166][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.979977][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.987379][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.008906][ T3448] veth1_macvtap: left promiscuous mode [ 335.014426][ T3448] veth0_macvtap: left promiscuous mode [ 335.020245][ T3448] veth1_vlan: left promiscuous mode [ 335.025576][ T3448] veth0_vlan: left promiscuous mode [ 335.045788][ T5839] Bluetooth: hci1: command tx timeout [ 335.464595][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 335.509024][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 335.758507][ T5839] Bluetooth: hci3: command tx timeout [ 335.933633][T16033] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.947215][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.961646][T16033] bridge_slave_0: entered allmulticast mode [ 335.969204][T16033] bridge_slave_0: entered promiscuous mode [ 336.006708][T16033] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.014927][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.022731][T16033] bridge_slave_1: entered allmulticast mode [ 336.029881][T16033] bridge_slave_1: entered promiscuous mode [ 336.105400][T16033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.117989][T16033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.185599][T16033] team0: Port device team_slave_0 added [ 336.196297][T16018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.206638][T16018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.238896][T16020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.255607][T16033] team0: Port device team_slave_1 added [ 336.271192][T16018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.287180][T16033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.294681][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.327333][T16033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.339161][T16018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.364339][T16020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.379770][T16033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.386732][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.415291][T16033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.460601][T16020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.490503][T16033] hsr_slave_0: entered promiscuous mode [ 336.500385][T16033] hsr_slave_1: entered promiscuous mode [ 336.545259][T16020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.633817][ T3448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.713653][ T3448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.764248][T16018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.789401][ T3448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.817199][T16018] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.831106][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.838211][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.868806][ T3448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.890345][T13871] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.897414][T13871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.015630][ T3448] bridge_slave_1: left allmulticast mode [ 337.022742][ T3448] bridge_slave_1: left promiscuous mode [ 337.029686][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.037634][ T5839] Bluetooth: hci0: command tx timeout [ 337.044072][ T3448] bridge_slave_0: left allmulticast mode [ 337.053976][ T3448] bridge_slave_0: left promiscuous mode [ 337.060929][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.071209][ T3448] bridge_slave_1: left allmulticast mode [ 337.076866][ T3448] bridge_slave_1: left promiscuous mode [ 337.084013][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.092485][ T3448] bridge_slave_0: left allmulticast mode [ 337.098726][ T3448] bridge_slave_0: left promiscuous mode [ 337.104370][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.118619][ T5839] Bluetooth: hci1: command tx timeout [ 337.642477][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.656088][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.667393][ T3448] bond0 (unregistering): Released all slaves [ 337.777372][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.789153][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.799836][ T3448] bond0 (unregistering): Released all slaves [ 337.837906][ T5839] Bluetooth: hci3: command tx timeout [ 337.976261][T16018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.057241][T16018] veth0_vlan: entered promiscuous mode [ 338.073170][T16018] veth1_vlan: entered promiscuous mode [ 338.145341][T16033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.156647][T16033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.167393][T16033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.216757][T16033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.276297][T16020] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.285848][T16018] veth0_macvtap: entered promiscuous mode [ 338.301958][ T3448] hsr_slave_0: left promiscuous mode [ 338.309464][ T3448] hsr_slave_1: left promiscuous mode [ 338.315325][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.323268][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.331491][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.339227][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.350357][ T3448] hsr_slave_0: left promiscuous mode [ 338.356296][ T3448] hsr_slave_1: left promiscuous mode [ 338.362466][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.370330][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.378512][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.385925][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.416817][ T3448] veth1_macvtap: left promiscuous mode [ 338.422584][ T3448] veth0_macvtap: left promiscuous mode [ 338.428426][ T3448] veth1_vlan: left promiscuous mode [ 338.433736][ T3448] veth0_vlan: left promiscuous mode [ 338.440124][ T3448] veth1_macvtap: left promiscuous mode [ 338.445610][ T3448] veth0_macvtap: left promiscuous mode [ 338.451719][ T3448] veth1_vlan: left promiscuous mode [ 338.456976][ T3448] veth0_vlan: left promiscuous mode [ 338.932574][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 338.972764][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 339.121796][ T5839] Bluetooth: hci0: command tx timeout [ 339.197835][ T5839] Bluetooth: hci1: command tx timeout [ 339.685799][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 339.735808][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 339.932478][ T5839] Bluetooth: hci3: command tx timeout [ 340.126839][T16020] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.137120][T16020] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.147988][T16018] veth1_macvtap: entered promiscuous mode [ 340.165571][T16018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.177006][T16020] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.202731][T16018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.236764][T16018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.254614][T16018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.263545][T16018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.272670][T16018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.454778][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.475219][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.503997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.515651][T16020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.523532][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.534961][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.601573][T16020] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.626201][ T2121] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.633374][ T2121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.687377][T16033] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.704378][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.711564][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.727550][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.734693][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.759511][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.766604][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.989855][T16033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.036621][T16033] veth0_vlan: entered promiscuous mode [ 341.056201][T16033] veth1_vlan: entered promiscuous mode [ 341.072397][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.090944][T16033] veth0_macvtap: entered promiscuous mode [ 341.105073][T16033] veth1_macvtap: entered promiscuous mode [ 341.126717][T16033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.137982][T16033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.149438][T16033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.166663][T16033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.177846][T16033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.191379][T16033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.203728][T16033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.212633][T16033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.221589][T16033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.230396][T16033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.272879][T16020] veth0_vlan: entered promiscuous mode [ 341.278599][ T5839] Bluetooth: hci1: command tx timeout [ 341.295692][T16020] veth1_vlan: entered promiscuous mode [ 341.354775][T16020] veth0_macvtap: entered promiscuous mode [ 341.369011][T16020] veth1_macvtap: entered promiscuous mode [ 341.376961][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.389527][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.416588][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.417584][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.436803][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.440838][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.447929][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.466809][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.488447][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.555448][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.584594][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.608724][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.619007][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.629569][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.641015][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.652249][T16020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.661408][T16020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.670498][T16020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.680664][T16020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.795272][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.817843][T11324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.825692][T11324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.865242][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.881181][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.889699][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.025009][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.170679][ T35] bridge_slave_1: left allmulticast mode [ 342.176370][ T35] bridge_slave_1: left promiscuous mode [ 342.183776][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.192661][ T35] bridge_slave_0: left allmulticast mode [ 342.199069][ T35] bridge_slave_0: left promiscuous mode [ 342.204751][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.694223][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.704230][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.721325][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.747451][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.760312][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.768024][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.798577][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.815265][T16060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2954'. [ 342.834385][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.847096][ T35] bond0 (unregistering): Released all slaves [ 343.018320][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.029511][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.040521][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.055299][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.069668][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.077092][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.226920][ T35] hsr_slave_0: left promiscuous mode [ 343.235997][ T35] hsr_slave_1: left promiscuous mode [ 343.242689][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.253536][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.261813][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.269554][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.287082][ T35] veth1_macvtap: left promiscuous mode [ 343.293148][ T35] veth0_macvtap: left promiscuous mode [ 343.299144][ T35] veth1_vlan: left promiscuous mode [ 343.304384][ T35] veth0_vlan: left promiscuous mode [ 343.684883][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.694784][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.713694][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.722146][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.742707][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.761171][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.939314][ T35] team0 (unregistering): Port device team_slave_1 removed [ 343.982819][ T35] team0 (unregistering): Port device team_slave_0 removed [ 344.622773][T16056] chnl_net:caif_netlink_parms(): no params data found [ 344.739644][T16061] chnl_net:caif_netlink_parms(): no params data found [ 344.859840][T16112] x_tables: duplicate underflow at hook 2 [ 344.878072][ T5848] Bluetooth: hci0: command tx timeout [ 344.971624][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.978974][T16056] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.986173][T16056] bridge_slave_0: entered allmulticast mode [ 344.993713][T16056] bridge_slave_0: entered promiscuous mode [ 345.027792][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.034916][T16056] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.051657][T16056] bridge_slave_1: entered allmulticast mode [ 345.060329][T16056] bridge_slave_1: entered promiscuous mode [ 345.101657][T16061] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.111920][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.120323][T16061] bridge_slave_0: entered allmulticast mode [ 345.127376][T16061] bridge_slave_0: entered promiscuous mode [ 345.127956][ T5848] Bluetooth: hci1: command tx timeout [ 345.193393][T16061] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.211515][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.226782][T16061] bridge_slave_1: entered allmulticast mode [ 345.242090][T16061] bridge_slave_1: entered promiscuous mode [ 345.265251][T16056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.289999][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 345.334960][T16061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.359912][T16056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.392988][T16076] chnl_net:caif_netlink_parms(): no params data found [ 345.402539][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 345.419888][T16061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.473839][T16056] team0: Port device team_slave_0 added [ 345.526877][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.629649][T16056] team0: Port device team_slave_1 added [ 345.635658][T16151] netlink: 'syz.3.2974': attribute type 30 has an invalid length. [ 345.644370][T16151] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 345.644494][T16154] netlink: 'syz.3.2974': attribute type 5 has an invalid length. [ 345.653553][T16151] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 345.702892][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.735496][T16153] tipc: Enabling of bearer rejected, already enabled [ 345.786706][T16061] team0: Port device team_slave_0 added [ 345.812119][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.848409][ T5848] Bluetooth: hci3: command tx timeout [ 345.848626][T16061] team0: Port device team_slave_1 added [ 345.909931][T16056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.916910][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.944424][T16056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.984208][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.011595][T16165] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2977'. [ 346.030741][T16076] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.047241][T16076] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.054589][T16076] bridge_slave_0: entered allmulticast mode [ 346.078798][T16076] bridge_slave_0: entered promiscuous mode [ 346.086579][T16056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.095933][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.122621][T16056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.134770][T16061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.142778][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.170313][T16061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.183705][T16076] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.191302][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.199218][T16076] bridge_slave_1: entered allmulticast mode [ 346.205866][T16076] bridge_slave_1: entered promiscuous mode [ 346.271151][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.292688][T16061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.304267][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.336747][T16061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.381603][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.488773][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.522836][T16076] team0: Port device team_slave_0 added [ 346.555116][T16056] hsr_slave_0: entered promiscuous mode [ 346.568474][T16056] hsr_slave_1: entered promiscuous mode [ 346.578908][T16056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.586523][T16056] Cannot create hsr debugfs directory [ 346.600478][T16076] team0: Port device team_slave_1 added [ 346.613091][T16181] netlink: 'syz.3.2983': attribute type 2 has an invalid length. [ 346.628713][T16181] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 346.656209][T16179] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2982'. [ 346.766873][T16179] tipc: Disabling bearer [ 346.829871][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.846940][T16061] hsr_slave_0: entered promiscuous mode [ 346.858189][T16061] hsr_slave_1: entered promiscuous mode [ 346.870016][T16061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.887240][T16061] Cannot create hsr debugfs directory [ 346.909513][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.916503][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.944615][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.968637][ T5848] Bluetooth: hci0: command tx timeout [ 347.019133][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.062232][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.084259][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.126931][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.144692][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2986'. [ 347.198113][ T5848] Bluetooth: hci1: command tx timeout [ 347.254208][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.340460][T16076] hsr_slave_0: entered promiscuous mode [ 347.361249][T16076] hsr_slave_1: entered promiscuous mode [ 347.382908][T16076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.397634][T16076] Cannot create hsr debugfs directory [ 347.580513][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2993'. [ 347.623554][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2993'. [ 347.633567][ T35] bridge_slave_1: left allmulticast mode [ 347.641888][ T35] bridge_slave_1: left promiscuous mode [ 347.649105][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.657382][ T35] bridge_slave_0: left allmulticast mode [ 347.663236][ T35] bridge_slave_0: left promiscuous mode [ 347.669968][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.681720][ T35] bridge_slave_1: left allmulticast mode [ 347.687376][ T35] bridge_slave_1: left promiscuous mode [ 347.693302][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.703051][ T35] bridge_slave_0: left allmulticast mode [ 347.709359][ T35] bridge_slave_0: left promiscuous mode [ 347.715012][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.797227][T16222] sctp: [Deprecated]: syz.3.2991 (pid 16222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.797227][T16222] Use struct sctp_sack_info instead [ 347.922458][ T5848] Bluetooth: hci3: command tx timeout [ 348.302135][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.315710][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.326296][ T35] bond0 (unregistering): Released all slaves [ 348.443373][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.456208][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.467003][ T35] bond0 (unregistering): Released all slaves [ 348.667978][T16224] netlink: 'syz.4.2994': attribute type 33 has an invalid length. [ 348.676152][T16224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2994'. [ 349.037877][ T5848] Bluetooth: hci0: command tx timeout [ 349.079491][ T35] hsr_slave_0: left promiscuous mode [ 349.105348][ T35] hsr_slave_1: left promiscuous mode [ 349.116564][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.124622][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.129342][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 349.143424][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.154387][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.165833][ T35] hsr_slave_0: left promiscuous mode [ 349.171899][ T35] hsr_slave_1: left promiscuous mode [ 349.182046][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.189941][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.201191][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.211924][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.273501][ T35] veth1_macvtap: left promiscuous mode [ 349.279308][ T5848] Bluetooth: hci1: command tx timeout [ 349.285010][ T35] veth0_macvtap: left promiscuous mode [ 349.290876][ T35] veth1_vlan: left promiscuous mode [ 349.296188][ T35] veth0_vlan: left promiscuous mode [ 349.303038][ T35] veth1_macvtap: left promiscuous mode [ 349.308754][ T35] veth0_macvtap: left promiscuous mode [ 349.314374][ T35] veth1_vlan: left promiscuous mode [ 349.319807][ T35] veth0_vlan: left promiscuous mode [ 349.797718][ T35] team0 (unregistering): Port device team_slave_1 removed [ 349.841245][ T35] team0 (unregistering): Port device team_slave_0 removed [ 350.013440][ T5848] Bluetooth: hci3: command tx timeout [ 350.554469][ T35] team0 (unregistering): Port device team_slave_1 removed [ 350.601142][ T35] team0 (unregistering): Port device team_slave_0 removed [ 351.066817][T16254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 351.083045][T16254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3003'. [ 351.092454][T16254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3003'. [ 351.119266][ T5848] Bluetooth: hci0: command tx timeout [ 351.127855][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 351.214859][T16256] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 351.244004][T16256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.288983][T16256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.295826][T16256] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 351.307040][T16256] bond4: (slave vti0): Error -95 calling set_mac_address [ 351.367808][ T5848] Bluetooth: hci1: command tx timeout [ 351.491119][T16265] tipc: Enabling of bearer rejected, media not registered [ 351.500084][T16266] tipc: Enabling of bearer rejected, media not registered [ 351.654649][T16271] tap0: tun_chr_ioctl cmd 3223385353 [ 351.673922][T16271] tap0: tun_chr_ioctl cmd 1074025677 [ 351.688478][T16271] tap0: linktype set to 778 [ 351.761406][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 351.781888][T16076] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.845168][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 351.856429][T16076] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.868652][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 351.879947][T16056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.900180][T16076] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.919990][T16076] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.935536][T16056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.959069][T16056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.002226][T16056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.066526][T16061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.079581][ T5848] Bluetooth: hci3: command tx timeout [ 352.081903][T16061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.150959][T16061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.186929][T16061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.212079][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 352.353595][T16076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.393735][T16056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.435760][T16056] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.453347][T16076] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.495502][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.502698][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.512413][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.519564][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.531942][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.539095][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.586881][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.594013][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.621195][T16061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.684654][T16061] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.739615][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.746802][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.775989][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.783178][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.113160][T16056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.180541][T16076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.256745][T16061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.308979][T16056] veth0_vlan: entered promiscuous mode [ 353.486500][T16056] veth1_vlan: entered promiscuous mode [ 353.521120][T16076] veth0_vlan: entered promiscuous mode [ 353.559049][T16076] veth1_vlan: entered promiscuous mode [ 353.590864][T16355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.635114][T16061] veth0_vlan: entered promiscuous mode [ 353.681144][T16056] veth0_macvtap: entered promiscuous mode [ 353.702373][T16061] veth1_vlan: entered promiscuous mode [ 353.721481][T16361] __nla_validate_parse: 6 callbacks suppressed [ 353.721499][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 353.729945][T16076] veth0_macvtap: entered promiscuous mode [ 353.774369][T16056] veth1_macvtap: entered promiscuous mode [ 353.801422][T16076] veth1_macvtap: entered promiscuous mode [ 353.837345][T16056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.848365][T16056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.858877][T16056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.868128][T16056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.876845][T16056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.885734][T16056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.945603][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.963876][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.989002][T16076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.073752][T16061] veth0_macvtap: entered promiscuous mode [ 354.103902][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.123056][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.137009][T16076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.161884][T16379] netlink: 'syz.4.3037': attribute type 3 has an invalid length. [ 354.174994][T16061] veth1_macvtap: entered promiscuous mode [ 354.208117][T16076] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.217451][T16076] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.226488][T16076] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.244119][T16076] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.259382][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.267302][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.284061][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.296550][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.306508][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.317313][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.329211][T16061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.360631][T11324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.369350][T11324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.389559][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.403711][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.414438][T16061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.431333][T16061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.446447][T16390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3040'. [ 354.446993][T16061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.476896][T16061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.492606][T16061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.502800][T16061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.511931][T16061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.526530][T16390] Êü: entered promiscuous mode [ 354.554973][T16394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.571946][T16394] bond0: entered promiscuous mode [ 354.587914][T16394] bond0: entered allmulticast mode [ 354.593600][T16394] team0: Port device bond0 added [ 354.718161][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.726024][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.783236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.816397][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.819662][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.844814][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.910673][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.926959][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.952959][T16411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3046'. [ 355.038799][T13871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.215682][T13871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.512102][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.525184][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.537203][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.547290][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.555227][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.565280][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.581847][T13871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.680664][T13871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.906736][T13871] bridge_slave_1: left allmulticast mode [ 355.913022][T13871] bridge_slave_1: left promiscuous mode [ 355.919146][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.931494][T13871] bridge_slave_0: left allmulticast mode [ 355.937181][T13871] bridge_slave_0: left promiscuous mode [ 355.943788][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.089960][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.108010][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.116771][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.125655][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.138526][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.145950][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.340878][T13871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.353276][T13871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.363880][T13871] bond0 (unregistering): Released all slaves [ 356.422124][T16414] chnl_net:caif_netlink_parms(): no params data found [ 356.552757][T16414] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.572346][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.580211][T16414] bridge_slave_0: entered allmulticast mode [ 356.587194][T16414] bridge_slave_0: entered promiscuous mode [ 356.595813][T16414] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.603130][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.611089][T16414] bridge_slave_1: entered allmulticast mode [ 356.617758][T16414] bridge_slave_1: entered promiscuous mode [ 356.710759][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.810548][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.842365][T16435] xt_cgroup: path and classid specified [ 356.872678][T16414] team0: Port device team_slave_0 added [ 356.934678][T13871] hsr_slave_0: left promiscuous mode [ 356.941052][T13871] hsr_slave_1: left promiscuous mode [ 356.974638][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.982859][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.998815][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.009149][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.019260][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.027218][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.029630][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.046447][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.047946][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.061986][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.113941][T13871] veth1_macvtap: left promiscuous mode [ 357.137183][T13871] veth0_macvtap: left promiscuous mode [ 357.144248][T13871] veth1_vlan: left promiscuous mode [ 357.156270][T13871] veth0_vlan: left promiscuous mode [ 357.596024][T13871] team0 (unregistering): Port device team_slave_1 removed [ 357.598095][ T5848] Bluetooth: hci0: command tx timeout [ 357.645592][T13871] team0 (unregistering): Port device team_slave_0 removed [ 358.059214][T16414] team0: Port device team_slave_1 added [ 358.081588][T16454] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3053'. [ 358.090917][T16454] 0·: renamed from hsr_slave_1 (while UP) [ 358.098302][T16454] 0·: entered allmulticast mode [ 358.103508][T16454] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 358.218227][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.225730][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.259402][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.264139][ T5848] Bluetooth: hci1: command tx timeout [ 358.272163][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.285037][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.321163][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.355676][T16458] netlink: 'syz.3.3054': attribute type 26 has an invalid length. [ 358.372053][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 358.439062][T16424] chnl_net:caif_netlink_parms(): no params data found [ 358.583623][T16414] hsr_slave_0: entered promiscuous mode [ 358.605178][T16414] hsr_slave_1: entered promiscuous mode [ 358.606373][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 358.758606][T16424] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.776967][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.784744][T16424] bridge_slave_0: entered allmulticast mode [ 358.800055][T16424] bridge_slave_0: entered promiscuous mode [ 358.816861][T16424] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.825505][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.833098][T16424] bridge_slave_1: entered allmulticast mode [ 358.842061][T16424] bridge_slave_1: entered promiscuous mode [ 358.874016][T16491] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3061'. [ 358.952778][T16424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.992856][T16424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.052110][T16443] chnl_net:caif_netlink_parms(): no params data found [ 359.118267][ T5848] Bluetooth: hci3: command tx timeout [ 359.124699][T16424] team0: Port device team_slave_0 added [ 359.202348][T13871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.234781][T16424] team0: Port device team_slave_1 added [ 359.286019][T16498] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 359.343406][T13871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.391499][T16424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.399024][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.426626][T16424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.454726][T13871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.505209][T16424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.512363][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.539179][T16424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.586725][T13871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.602234][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.610325][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.617694][T16443] bridge_slave_0: entered allmulticast mode [ 359.624353][T16443] bridge_slave_0: entered promiscuous mode [ 359.634993][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.642328][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.649740][T16443] bridge_slave_1: entered allmulticast mode [ 359.656784][T16443] bridge_slave_1: entered promiscuous mode [ 359.673710][T16424] hsr_slave_0: entered promiscuous mode [ 359.678376][ T5848] Bluetooth: hci0: command tx timeout [ 359.685011][T16424] hsr_slave_1: entered promiscuous mode [ 359.691911][T16424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.699635][T16424] Cannot create hsr debugfs directory [ 359.748878][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.771708][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.853811][T16443] team0: Port device team_slave_0 added [ 359.914796][T16443] team0: Port device team_slave_1 added [ 359.950486][T16515] bond0: option tlb_dynamic_lb: invalid value (148) [ 360.001386][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.009717][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.059259][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.122130][T13871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.148490][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.158088][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.207585][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.273377][T13871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.318349][ T5848] Bluetooth: hci1: command tx timeout [ 360.423297][T13871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.482456][T16443] hsr_slave_0: entered promiscuous mode [ 360.498953][T16443] hsr_slave_1: entered promiscuous mode [ 360.508377][T16443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.518871][T16443] Cannot create hsr debugfs directory [ 360.562239][T13871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.600479][T16414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.627372][T16414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.658832][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 360.668898][T16414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.686786][T16414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.966852][T13871] bridge_slave_1: left allmulticast mode [ 360.977654][T13871] bridge_slave_1: left promiscuous mode [ 360.983402][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.994404][T13871] bridge_slave_0: left allmulticast mode [ 361.000894][T13871] bridge_slave_0: left promiscuous mode [ 361.006702][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.027126][T13871] bridge_slave_1: left allmulticast mode [ 361.033927][T13871] bridge_slave_1: left promiscuous mode [ 361.039930][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.050955][T13871] bridge_slave_0: left allmulticast mode [ 361.056635][T13871] bridge_slave_0: left promiscuous mode [ 361.062769][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.197626][ T5848] Bluetooth: hci3: command tx timeout [ 361.759975][ T5848] Bluetooth: hci0: command tx timeout [ 361.825968][T13871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.847303][T13871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.866670][T13871] bond0 (unregistering): Released all slaves [ 361.988831][T13871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.005447][T13871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.016787][T13871] bond0 (unregistering): Released all slaves [ 362.401965][ T5848] Bluetooth: hci1: command tx timeout [ 363.290934][ T5848] Bluetooth: hci3: command tx timeout [ 363.839973][ T5848] Bluetooth: hci0: command tx timeout [ 363.961326][T16414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.042680][T16561] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3080'. [ 364.083090][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.147210][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.154356][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.165242][T16564] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3081'. [ 364.212920][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.220103][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.228798][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3082'. [ 364.323623][T16572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3083'. [ 364.413676][T13871] hsr_slave_0: left promiscuous mode [ 364.424077][T13871] hsr_slave_1: left promiscuous mode [ 364.432739][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.443130][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.452656][T16579] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3085'. [ 364.462846][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.471404][T16579] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 364.479269][ T5848] Bluetooth: hci1: command tx timeout [ 364.485660][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.497881][T16579] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.3085'. [ 364.509033][T13871] hsr_slave_0: left promiscuous mode [ 364.515016][T13871] hsr_slave_1: left promiscuous mode [ 364.536265][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.557603][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.566764][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.581022][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.658654][T16594] netlink: 'syz.3.3090': attribute type 1 has an invalid length. [ 364.666957][T13871] veth1_macvtap: left promiscuous mode [ 364.686002][T13871] veth0_macvtap: left promiscuous mode [ 364.692006][T13871] veth1_vlan: left promiscuous mode [ 364.699276][T13871] veth0_vlan: left promiscuous mode [ 364.704594][T16596] netlink: 'syz.4.3091': attribute type 3 has an invalid length. [ 364.716262][T13871] veth1_macvtap: left promiscuous mode [ 364.722111][T13871] veth0_macvtap: left promiscuous mode [ 364.728022][T13871] veth1_vlan: left promiscuous mode [ 364.733479][T13871] veth0_vlan: left promiscuous mode [ 364.756080][T16596] Bluetooth: MGMT ver 1.23 [ 364.776697][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3092'. [ 365.321881][T13871] team0 (unregistering): Port device team_slave_1 removed [ 365.362163][ T5848] Bluetooth: hci3: command tx timeout [ 365.372446][T13871] team0 (unregistering): Port device team_slave_0 removed [ 366.097429][T13871] team0 (unregistering): Port device team_slave_1 removed [ 366.136769][T13871] team0 (unregistering): Port device team_slave_0 removed [ 366.798881][ T5848] Bluetooth: hci0: command tx timeout [ 366.839968][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.910147][T16424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.921409][T16424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.963430][T16424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.985619][T16424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 367.111623][T16414] veth0_vlan: entered promiscuous mode [ 367.120610][T16443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.149047][T16443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.197367][T16443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.206795][T16628] netlink: 'syz.4.3100': attribute type 11 has an invalid length. [ 367.225690][T16414] veth1_vlan: entered promiscuous mode [ 367.239298][T16443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.351305][T16424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.388947][T16414] veth0_macvtap: entered promiscuous mode [ 367.400097][T16632] v: renamed from veth1_virt_wifi (while UP) [ 367.418758][T16414] veth1_macvtap: entered promiscuous mode [ 367.453850][T16635] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3102'. [ 367.476793][T16424] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.520673][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.565343][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.572573][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.582709][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.589855][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.606710][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.629456][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.675165][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.723277][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.730452][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.747086][T16641] bond0: (slave gre0): refused to change device type [ 367.763607][T16424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.775423][T16424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.804775][T16414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.814394][T16414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.834346][T16414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.852142][T16414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.868677][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.875805][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.014287][T16443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.052204][T16658] tap0: tun_chr_ioctl cmd 2148553947 [ 368.080064][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.088592][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.097924][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.119373][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.130540][ T6130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.149622][ T6130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.222349][T16424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.249287][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 368.290711][T16664] netlink: 'syz.3.3109': attribute type 11 has an invalid length. [ 368.453870][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.507118][T16424] veth0_vlan: entered promiscuous mode [ 368.517005][T16443] veth0_vlan: entered promiscuous mode [ 368.552952][T16443] veth1_vlan: entered promiscuous mode [ 368.582627][T16424] veth1_vlan: entered promiscuous mode [ 368.624614][T16443] veth0_macvtap: entered promiscuous mode [ 368.780500][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.811460][T16443] veth1_macvtap: entered promiscuous mode [ 368.836775][T16424] veth0_macvtap: entered promiscuous mode [ 368.845532][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.857578][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.869574][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.886577][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.897327][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.908754][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.921636][T16443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.932159][T16443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.941000][T16443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.951094][T16443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.963690][T16424] veth1_macvtap: entered promiscuous mode [ 368.992948][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.034141][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.045315][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.055586][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.066810][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.082472][T16424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.111420][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.128907][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.140018][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.150100][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.160962][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.171780][T16424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.183944][T16424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.193281][T16424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.203651][T16424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.212752][T16424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.252955][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.302866][T13871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.312127][T13871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.372419][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.383260][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.407964][T11324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.417412][T11324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.484401][T11324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.493899][T11324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.521442][ T35] bridge_slave_1: left allmulticast mode [ 369.527100][ T35] bridge_slave_1: left promiscuous mode [ 369.533204][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.542662][ T35] bridge_slave_0: left allmulticast mode [ 369.548955][ T35] bridge_slave_0: left promiscuous mode [ 369.554623][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.871452][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.882436][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.894803][ T35] bond0 (unregistering): Released all slaves [ 370.209676][ T35] hsr_slave_0: left promiscuous mode [ 370.224823][ T35] hsr_slave_1: left promiscuous mode [ 370.232913][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.246898][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.255651][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.267750][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.300981][ T35] veth1_macvtap: left promiscuous mode [ 370.307313][ T35] veth0_macvtap: left promiscuous mode [ 370.313246][ T35] veth1_vlan: left promiscuous mode [ 370.320301][ T35] veth0_vlan: left promiscuous mode [ 370.443393][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.462015][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.470482][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.479785][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.489252][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.496633][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.995968][ T35] team0 (unregistering): Port device team_slave_1 removed [ 370.999389][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.020147][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.030651][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.041514][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.064676][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.066048][ T35] team0 (unregistering): Port device team_slave_0 removed [ 371.082060][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.021571][T16691] chnl_net:caif_netlink_parms(): no params data found [ 372.063952][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.073001][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.097543][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.105559][T16698] chnl_net:caif_netlink_parms(): no params data found [ 372.127335][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.136400][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 372.144727][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.274596][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.373235][T16732] bond6: entered promiscuous mode [ 372.378554][T16732] bond6: entered allmulticast mode [ 372.384078][T16732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.512060][T16732] bond6 (unregistering): Released all slaves [ 372.557734][ T5839] Bluetooth: hci0: command tx timeout [ 372.608896][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.757900][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.773237][T16691] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.789408][T16691] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.796763][T16691] bridge_slave_0: entered allmulticast mode [ 372.820313][T16691] bridge_slave_0: entered promiscuous mode [ 372.840631][T16691] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.858549][T16691] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.869326][T16691] bridge_slave_1: entered allmulticast mode [ 372.875883][T16691] bridge_slave_1: entered promiscuous mode [ 372.914951][T16698] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.924047][T16698] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.933105][T16698] bridge_slave_0: entered allmulticast mode [ 372.948559][T16698] bridge_slave_0: entered promiscuous mode [ 372.973377][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.019751][T16691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.034224][T16698] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.050733][T16698] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.059036][T16698] bridge_slave_1: entered allmulticast mode [ 373.066225][T16698] bridge_slave_1: entered promiscuous mode [ 373.080353][T16691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.096443][T16775] netlink: 'syz.3.3134': attribute type 2 has an invalid length. [ 373.118288][ T5839] Bluetooth: hci1: command tx timeout [ 373.173706][T16691] team0: Port device team_slave_0 added [ 373.202980][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 373.233040][T16698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.253991][T16691] team0: Port device team_slave_1 added [ 373.289296][T16698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.386026][T16691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.395873][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.429457][T16691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.442287][T16793] netlink: 'syz.4.3140': attribute type 6 has an invalid length. [ 373.474796][T16698] team0: Port device team_slave_0 added [ 373.499930][T16698] team0: Port device team_slave_1 added [ 373.533185][T16691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.540517][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.541724][T16800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.566903][T16691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.611062][T16804] xt_CT: No such helper "netbios-ns" [ 373.756064][T16698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.770560][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.797225][T16698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.812776][T16729] chnl_net:caif_netlink_parms(): no params data found [ 373.871826][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.898153][T16698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.905134][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.933708][T16698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.049532][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.087166][T16691] hsr_slave_0: entered promiscuous mode [ 374.103771][T16691] hsr_slave_1: entered promiscuous mode [ 374.152006][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.170472][T16822] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 374.238251][ T5839] Bluetooth: hci3: command tx timeout [ 374.264238][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.303607][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.311854][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.324229][T16729] bridge_slave_0: entered allmulticast mode [ 374.331721][T16729] bridge_slave_0: entered promiscuous mode [ 374.377842][T16698] hsr_slave_0: entered promiscuous mode [ 374.385418][T16698] hsr_slave_1: entered promiscuous mode [ 374.392117][T16698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.400542][T16698] Cannot create hsr debugfs directory [ 374.449831][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.457027][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.474957][T16729] bridge_slave_1: entered allmulticast mode [ 374.490443][T16729] bridge_slave_1: entered promiscuous mode [ 374.620114][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.639068][ T5839] Bluetooth: hci0: command tx timeout [ 374.673452][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.804256][T16729] team0: Port device team_slave_0 added [ 374.876442][T16729] team0: Port device team_slave_1 added [ 374.949783][ T35] bridge_slave_1: left allmulticast mode [ 374.955579][ T35] bridge_slave_1: left promiscuous mode [ 374.962047][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.979695][ T35] bridge_slave_0: left allmulticast mode [ 374.985391][ T35] bridge_slave_0: left promiscuous mode [ 374.996863][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.008377][ T35] bridge_slave_1: left allmulticast mode [ 375.014040][ T35] bridge_slave_1: left promiscuous mode [ 375.021831][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.030628][ T35] bridge_slave_0: left allmulticast mode [ 375.036341][ T35] bridge_slave_0: left promiscuous mode [ 375.043771][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.207869][ T5839] Bluetooth: hci1: command tx timeout [ 375.610943][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.623859][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.634840][ T35] bond0 (unregistering): Released all slaves [ 375.755597][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.767240][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.779071][ T35] bond0 (unregistering): Released all slaves [ 375.794466][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.802091][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.838560][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.869033][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.882352][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.912588][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.134471][T16729] hsr_slave_0: entered promiscuous mode [ 376.148568][T16729] hsr_slave_1: entered promiscuous mode [ 376.154925][T16729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.164665][T16729] Cannot create hsr debugfs directory [ 376.266356][T16852] netlink: 'syz.4.3156': attribute type 1 has an invalid length. [ 376.275105][T16852] netlink: 'syz.4.3156': attribute type 2 has an invalid length. [ 376.302407][T16852] netlink: 'syz.4.3156': attribute type 2 has an invalid length. [ 376.310943][T16852] netlink: 'syz.4.3156': attribute type 1 has an invalid length. [ 376.320961][ T5839] Bluetooth: hci3: command tx timeout [ 376.636484][ T35] hsr_slave_0: left promiscuous mode [ 376.648055][ T35] hsr_slave_1: left promiscuous mode [ 376.654136][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.661718][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.669878][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.677276][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.692800][ T35] hsr_slave_0: left promiscuous mode [ 376.702793][ T35] hsr_slave_1: left promiscuous mode [ 376.709418][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.716846][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.724321][ T5839] Bluetooth: hci0: command tx timeout [ 376.731562][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.764498][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.814770][ T35] veth1_macvtap: left promiscuous mode [ 376.829256][ T35] veth0_macvtap: left promiscuous mode [ 376.834902][ T35] veth1_vlan: left promiscuous mode [ 376.841211][ T35] veth0_vlan: left promiscuous mode [ 376.847397][ T35] veth1_macvtap: left promiscuous mode [ 376.853070][ T35] veth0_macvtap: left promiscuous mode [ 376.858820][ T35] veth1_vlan: left promiscuous mode [ 376.864090][ T35] veth0_vlan: left promiscuous mode [ 377.278738][ T5839] Bluetooth: hci1: command tx timeout [ 377.416767][ T35] team0 (unregistering): Port device team_slave_1 removed [ 377.460266][ T35] team0 (unregistering): Port device team_slave_0 removed [ 378.304904][ T35] team0 (unregistering): Port device team_slave_1 removed [ 378.350071][ T35] team0 (unregistering): Port device team_slave_0 removed [ 378.401022][ T5839] Bluetooth: hci3: command tx timeout [ 378.781269][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 378.797886][ T5839] Bluetooth: hci0: command tx timeout [ 378.888768][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.095546][T16691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.115283][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3169'. [ 379.163130][T16691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.190568][T16691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.253421][T16691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.358169][ T5839] Bluetooth: hci1: command tx timeout [ 379.388261][T16691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.447220][T16691] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.481027][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.488196][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.529508][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.536643][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.652612][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3177'. [ 379.685195][T16698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.714642][T16698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.863075][T16698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.881469][T16698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.969382][T16931] netlink: 'syz.3.3179': attribute type 21 has an invalid length. [ 379.977276][T16931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3179'. [ 380.016571][T16931] netlink: 'syz.3.3179': attribute type 4 has an invalid length. [ 380.024602][T16931] netlink: 'syz.3.3179': attribute type 5 has an invalid length. [ 380.033483][T16931] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3179'. [ 380.131028][T16947] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 380.151847][T16691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.181773][T16729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.199667][T16729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.238836][T16729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.255678][T16953] No such timeout policy "syz0" [ 380.265532][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 380.275474][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3184'. [ 380.285179][T16951] netlink: 'syz.3.3183': attribute type 7 has an invalid length. [ 380.303386][T16729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.394775][T16691] veth0_vlan: entered promiscuous mode [ 380.427098][T16698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.449937][T16698] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.464968][T16691] veth1_vlan: entered promiscuous mode [ 380.478934][ T5839] Bluetooth: hci3: command tx timeout [ 380.486521][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.493651][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.561391][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.568838][T11324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.608845][T16962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.636892][T16691] veth0_macvtap: entered promiscuous mode [ 380.679777][T16691] veth1_macvtap: entered promiscuous mode [ 380.708338][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.752362][T16691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.784163][T16691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.814778][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.853408][T16691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.876942][T16691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.886397][T16691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.898994][T16691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.933360][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.940536][T11324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.981937][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.989141][T11324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.096136][T16698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.114782][T16985] siw: device registration error -23 [ 381.194814][T16986] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 381.235341][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 381.289272][T16698] veth0_vlan: entered promiscuous mode [ 381.309780][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.326376][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.354502][T16698] veth1_vlan: entered promiscuous mode [ 381.388920][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.396784][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.445018][T16698] veth0_macvtap: entered promiscuous mode [ 381.448378][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 381.473132][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 381.475177][T16698] veth1_macvtap: entered promiscuous mode [ 381.546419][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.571501][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.584964][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.610453][T16698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.621139][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.632528][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.644464][T16698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.713802][T16698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.730005][T16698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.744555][T16698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.753350][T16698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.811650][T16729] veth0_vlan: entered promiscuous mode [ 382.476882][T16729] veth1_vlan: entered promiscuous mode [ 382.697392][ T6130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.754148][T16729] veth0_macvtap: entered promiscuous mode [ 382.775478][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.792252][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.834730][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.845670][T16729] veth1_macvtap: entered promiscuous mode [ 382.855365][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.895426][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.910368][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.921019][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.932194][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.943861][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.969679][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.980255][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.990817][T16729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.001954][T16729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.023909][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.056071][ T6130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.088440][T16729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.097140][T16729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.107352][T16729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.116178][T16729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.176322][ T2121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.189295][ T2121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.214370][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.222813][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.305742][ T6130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.434700][ T6130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.536025][ T6130] bridge_slave_1: left allmulticast mode [ 383.545299][ T6130] bridge_slave_1: left promiscuous mode [ 383.552149][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.561497][ T6130] bridge_slave_0: left allmulticast mode [ 383.567157][ T6130] bridge_slave_0: left promiscuous mode [ 383.573711][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.143380][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.162665][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.171394][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.208730][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.236628][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.245589][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.331491][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.356554][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.372127][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.381673][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.390494][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.399403][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.407067][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 384.414885][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.424870][ T6130] bond0 (unregistering): Released all slaves [ 384.864078][T17025] chnl_net:caif_netlink_parms(): no params data found [ 384.937329][T17027] chnl_net:caif_netlink_parms(): no params data found [ 385.099415][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.113284][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.122530][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.131053][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.139951][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 385.147271][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.185841][ T6130] hsr_slave_0: left promiscuous mode [ 385.192255][ T6130] hsr_slave_1: left promiscuous mode [ 385.203368][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.211021][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.221600][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.229548][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.247032][ T6130] veth1_macvtap: left promiscuous mode [ 385.253599][ T6130] veth0_macvtap: left promiscuous mode [ 385.259842][ T6130] veth1_vlan: left promiscuous mode [ 385.265145][ T6130] veth0_vlan: left promiscuous mode [ 385.342185][T17052] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3204'. [ 385.709142][ T6130] team0 (unregistering): Port device team_slave_1 removed [ 385.749894][ T6130] team0 (unregistering): Port device team_slave_0 removed [ 386.089427][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 386.328366][ T5839] Bluetooth: hci0: command tx timeout [ 386.336348][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.351979][T17066] x_tables: duplicate underflow at hook 2 [ 386.367766][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.375767][T17027] bridge_slave_0: entered allmulticast mode [ 386.389924][T17027] bridge_slave_0: entered promiscuous mode [ 386.425263][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.441770][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.456493][T17027] bridge_slave_1: entered allmulticast mode [ 386.479542][ T5839] Bluetooth: hci1: command tx timeout [ 386.487337][T17027] bridge_slave_1: entered promiscuous mode [ 386.550471][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.568459][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.589730][T17025] bridge_slave_0: entered allmulticast mode [ 386.597140][T17025] bridge_slave_0: entered promiscuous mode [ 386.605773][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.613238][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.651013][T17025] bridge_slave_1: entered allmulticast mode [ 386.668271][T17025] bridge_slave_1: entered promiscuous mode [ 386.757288][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.772881][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.782358][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3209'. [ 386.792456][T17077] netlink: 'syz.4.3209': attribute type 8 has an invalid length. [ 386.800587][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3209'. [ 386.832210][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.869409][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.005418][T17027] team0: Port device team_slave_0 added [ 387.014338][T17027] team0: Port device team_slave_1 added [ 387.031338][T17025] team0: Port device team_slave_0 added [ 387.056342][T17083] tipc: Enabling of bearer rejected, already enabled [ 387.067273][T17025] team0: Port device team_slave_1 added [ 387.108498][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.115468][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.204453][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.216289][ T5839] Bluetooth: hci3: command tx timeout [ 387.244374][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.252965][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.280159][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.300617][T17097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.318135][T17097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.375346][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.382598][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.409854][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.446703][T17027] hsr_slave_0: entered promiscuous mode [ 387.453828][T17027] hsr_slave_1: entered promiscuous mode [ 387.468621][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.475871][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.502294][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.577297][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.615123][T17104] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.3215'. [ 387.624398][T17104] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 387.729745][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.790455][T17025] hsr_slave_0: entered promiscuous mode [ 387.800026][T17025] hsr_slave_1: entered promiscuous mode [ 387.806109][T17025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.815490][T17025] Cannot create hsr debugfs directory [ 387.836756][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.860485][T17042] chnl_net:caif_netlink_parms(): no params data found [ 387.963392][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.100899][T17042] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.114246][T17042] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.125891][T17042] bridge_slave_0: entered allmulticast mode [ 388.142291][T17042] bridge_slave_0: entered promiscuous mode [ 388.150792][T17042] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.159269][T17042] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.166697][T17042] bridge_slave_1: entered allmulticast mode [ 388.173885][T17042] bridge_slave_1: entered promiscuous mode [ 388.205292][T17027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.230706][ T35] ------------[ cut here ]------------ [ 388.236405][ T35] refcount_t: addition on 0; use-after-free. [ 388.238716][T17120] netlink: 'syz.4.3220': attribute type 14 has an invalid length. [ 388.243861][ T35] WARNING: CPU: 1 PID: 35 at lib/refcount.c:25 refcount_warn_saturate+0x13a/0x1d0 [ 388.260153][ T35] Modules linked in: [ 388.264096][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 388.274922][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.285074][ T35] Workqueue: netns cleanup_net [ 388.290149][ T35] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 388.296344][ T35] Code: c0 be 60 8c e8 37 9a 98 fc 90 0f 0b 90 90 eb b9 e8 8b a4 d7 fc c6 05 4d 95 49 0b 01 90 48 c7 c7 20 bf 60 8c e8 17 9a 98 fc 90 <0f> 0b 90 90 eb 99 e8 6b a4 d7 fc c6 05 2e 95 49 0b 01 90 48 c7 c7 [ 388.316100][ T35] RSP: 0018:ffffc90000ab73a0 EFLAGS: 00010246 [ 388.323003][ T35] RAX: c5b050024eecdc00 RBX: ffff8880247c7c3c RCX: ffff88801e6f1e00 [ 388.331547][ T35] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 388.339966][ T35] RBP: 0000000000000002 R08: ffffffff8155d252 R09: 1ffffffff2859933 [ 388.348310][ T35] R10: dffffc0000000000 R11: fffffbfff2859934 R12: ffffffffffffffff [ 388.356311][ T35] R13: ffff888067499000 R14: ffff8880247c7c3c R15: dffffc0000000000 [ 388.364338][ T35] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 388.373348][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.380276][ T35] CR2: 000000110c2864a6 CR3: 0000000034cb4000 CR4: 00000000003526f0 [ 388.388352][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.396348][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.405103][ T35] Call Trace: [ 388.408861][ T35] [ 388.411812][ T35] ? __warn+0x168/0x4e0 [ 388.415990][ T35] ? refcount_warn_saturate+0x13a/0x1d0 [ 388.421615][ T35] ? report_bug+0x2b3/0x500 [ 388.425661][ T5839] Bluetooth: hci0: command tx timeout [ 388.426123][ T35] ? refcount_warn_saturate+0x13a/0x1d0 [ 388.426160][ T35] ? handle_bug+0x60/0x90 [ 388.442472][ T35] ? exc_invalid_op+0x1a/0x50 [ 388.447190][ T35] ? asm_exc_invalid_op+0x1a/0x20 [ 388.452354][ T35] ? __warn_printk+0x292/0x360 [ 388.457152][ T35] ? refcount_warn_saturate+0x13a/0x1d0 [ 388.462793][ T35] nsim_fib_event_nb+0xee9/0x10b0 [ 388.468212][ T35] call_fib_notifier+0x42/0x70 [ 388.473003][ T35] fib_notify+0x445/0x780 [ 388.477343][ T35] ? __pfx_fib_notify+0x10/0x10 [ 388.482322][ T35] register_fib_notifier+0x182/0x370 [ 388.487671][ T35] ? register_fib_notifier+0x63/0x370 [ 388.493069][ T35] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 388.499737][ T35] nsim_fib_create+0x902/0xa70 [ 388.504546][ T35] ? __pfx_nsim_fib_create+0x10/0x10 [ 388.509911][ T35] nsim_dev_reload_up+0x3d1/0x8e0 [ 388.514953][ T35] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 388.520574][ T35] devlink_reload+0x478/0x870 [ 388.525270][ T35] ? __pfx_devlink_reload+0x10/0x10 [ 388.530827][ T35] devlink_pernet_pre_exit+0x1f3/0x440 [ 388.536511][ T35] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 388.542933][ T35] ? class_remove_file_ns+0x121/0x160 [ 388.548436][ T35] cleanup_net+0x615/0xcc0 [ 388.552871][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 388.558650][ T35] ? process_scheduled_works+0x976/0x1850 [ 388.564412][ T35] process_scheduled_works+0xa63/0x1850 [ 388.570104][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.576141][ T35] ? assign_work+0x364/0x3d0 [ 388.580808][ T35] worker_thread+0x870/0xd30 [ 388.585448][ T35] ? __kthread_parkme+0x169/0x1d0 [ 388.590944][ T35] ? __pfx_worker_thread+0x10/0x10 [ 388.596087][ T35] kthread+0x2f0/0x390 [ 388.600213][ T35] ? __pfx_worker_thread+0x10/0x10 [ 388.605344][ T35] ? __pfx_kthread+0x10/0x10 [ 388.609998][ T35] ret_from_fork+0x4b/0x80 [ 388.614439][ T35] ? __pfx_kthread+0x10/0x10 [ 388.619395][ T35] ret_from_fork_asm+0x1a/0x30 [ 388.624209][ T35] [ 388.627256][ T35] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.634550][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc5-syzkaller-00194-g249cfa318fb1 #0 [ 388.645239][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.655314][ T35] Workqueue: netns cleanup_net [ 388.660117][ T35] Call Trace: [ 388.663408][ T35] [ 388.666348][ T35] dump_stack_lvl+0x241/0x360 [ 388.671056][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.676273][ T35] ? __pfx__printk+0x10/0x10 [ 388.680871][ T35] ? vscnprintf+0x5d/0x90 [ 388.685200][ T35] panic+0x349/0x880 [ 388.689098][ T35] ? __warn+0x177/0x4e0 [ 388.693251][ T35] ? __pfx_panic+0x10/0x10 [ 388.697672][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 388.702612][ T35] __warn+0x34b/0x4e0 [ 388.706585][ T35] ? refcount_warn_saturate+0x13a/0x1d0 [ 388.712134][ T35] report_bug+0x2b3/0x500 [ 388.716459][ T35] ? refcount_warn_saturate+0x13a/0x1d0 [ 388.722018][ T35] handle_bug+0x60/0x90 [ 388.726174][ T35] exc_invalid_op+0x1a/0x50 [ 388.730675][ T35] asm_exc_invalid_op+0x1a/0x20 [ 388.735520][ T35] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 388.741681][ T35] Code: c0 be 60 8c e8 37 9a 98 fc 90 0f 0b 90 90 eb b9 e8 8b a4 d7 fc c6 05 4d 95 49 0b 01 90 48 c7 c7 20 bf 60 8c e8 17 9a 98 fc 90 <0f> 0b 90 90 eb 99 e8 6b a4 d7 fc c6 05 2e 95 49 0b 01 90 48 c7 c7 [ 388.761284][ T35] RSP: 0018:ffffc90000ab73a0 EFLAGS: 00010246 [ 388.767351][ T35] RAX: c5b050024eecdc00 RBX: ffff8880247c7c3c RCX: ffff88801e6f1e00 [ 388.775324][ T35] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 388.783286][ T35] RBP: 0000000000000002 R08: ffffffff8155d252 R09: 1ffffffff2859933 [ 388.791250][ T35] R10: dffffc0000000000 R11: fffffbfff2859934 R12: ffffffffffffffff [ 388.799221][ T35] R13: ffff888067499000 R14: ffff8880247c7c3c R15: dffffc0000000000 [ 388.807199][ T35] ? __warn_printk+0x292/0x360 [ 388.811984][ T35] nsim_fib_event_nb+0xee9/0x10b0 [ 388.817016][ T35] call_fib_notifier+0x42/0x70 [ 388.821783][ T35] fib_notify+0x445/0x780 [ 388.826134][ T35] ? __pfx_fib_notify+0x10/0x10 [ 388.831010][ T35] register_fib_notifier+0x182/0x370 [ 388.836290][ T35] ? register_fib_notifier+0x63/0x370 [ 388.841664][ T35] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 388.847909][ T35] nsim_fib_create+0x902/0xa70 [ 388.852682][ T35] ? __pfx_nsim_fib_create+0x10/0x10 [ 388.857970][ T35] nsim_dev_reload_up+0x3d1/0x8e0 [ 388.862999][ T35] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 388.868549][ T35] devlink_reload+0x478/0x870 [ 388.873226][ T35] ? __pfx_devlink_reload+0x10/0x10 [ 388.878431][ T35] devlink_pernet_pre_exit+0x1f3/0x440 [ 388.883895][ T35] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 388.889891][ T35] ? class_remove_file_ns+0x121/0x160 [ 388.895264][ T35] cleanup_net+0x615/0xcc0 [ 388.899681][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 388.904618][ T35] ? process_scheduled_works+0x976/0x1850 [ 388.910353][ T35] process_scheduled_works+0xa63/0x1850 [ 388.915939][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.921944][ T35] ? assign_work+0x364/0x3d0 [ 388.926544][ T35] worker_thread+0x870/0xd30 [ 388.931192][ T35] ? __kthread_parkme+0x169/0x1d0 [ 388.936220][ T35] ? __pfx_worker_thread+0x10/0x10 [ 388.941337][ T35] kthread+0x2f0/0x390 [ 388.945409][ T35] ? __pfx_worker_thread+0x10/0x10 [ 388.950519][ T35] ? __pfx_kthread+0x10/0x10 [ 388.955103][ T35] ret_from_fork+0x4b/0x80 [ 388.959518][ T35] ? __pfx_kthread+0x10/0x10 [ 388.964111][ T35] ret_from_fork_asm+0x1a/0x30 [ 388.968885][ T35] [ 388.972161][ T35] Kernel Offset: disabled [ 388.976531][ T35] Rebooting in 86400 seconds..