last executing test programs: 1m23.277268726s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m9.597515235s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m9.53186931s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 1m1.610425697s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 54.847262675s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 53.86112933s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 49.930885035s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 41.960222365s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 40.110187586s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 38.013209563s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 28.88361104s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 24.79924094s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 24.758441065s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 16.740687716s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 14.0348915s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 10.814022718s ago: executing program 4 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007", @ANYBLOB], 0x90}}, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000a01ffffffffffffaaaaaaaaaa0008005500001c000000000132"], 0x2e) r8 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) connect$l2tp6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x5, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.138501869s ago: executing program 2 (id=2089): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000280)) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000aa7010f8ff00000040b6e274f3f4d61404f0475668bb1acf7ca5c82e10c43f98d62f4f1b24aa99b2c8e1afce0853f40c9267f54e8f322124503d9f6ac98abb81cfeae5a897616cfaa9ffe6f1b97bcce95f366389fd94a6ad7b519a2cf7a8082b328e80aba06ed3c6a064f2b4975885d9abcff64df92e250afec9f19552ead6c6f405aaf499d5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x76, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) socket(0x2b, 0xa, 0x0) 3.921239525s ago: executing program 1 (id=1763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x3, 0x7}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 3.013040695s ago: executing program 2 (id=2091): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x3, 0x20, 0x801}, 0x2f) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x6) write$cgroup_pressure(r1, &(0x7f0000000180)={'full', 0x20, 0x2, 0x20, 0x5}, 0x2f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001fc0)={r2, &(0x7f0000001e80), 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="4198000000000000000000000000000000005bae0ded00000002000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.012762553s ago: executing program 3 (id=2092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='contention_begin\x00', r2, 0x0, 0x405}, 0x71) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xeba, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) 2.923363468s ago: executing program 0 (id=1460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0x40}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x21, 0x4, 0x2, 0x25, 0x84, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x5, 0x80000000, 0x4, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x8, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0xb8}, {@private=0xa010100, 0x10001}, {@multicast1, 0xfb}, {@empty, 0x924}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x8, "18b1115a19e9"}, {0x1, 0x2}, {0x5, 0x4, "a609"}, {0x6, 0xb, "56e9500b6e86d6f05f"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@bridge_getneigh={0x148, 0x1e, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x100, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "239a0848f78e265ec9584c883d3696504f719c71ed"}, @IFLA_WEIGHT={0x8, 0xf, 0xd274}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xf41c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x5}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6b, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0xd467}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x80000001, 0x21c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x86c, 0x5}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xffffffffffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xe4d}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xc}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x79e2}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}, @IFLA_TXQLEN={0x8, 0xd, 0xe}]}, 0x148}}, 0x0) 1.462960408s ago: executing program 2 (id=2093): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="066e6574202b6d42e04d787b36"], 0xd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffd]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000202ccffdfffe4e000000000000c000280050006000000000075a9544bf93223b4ae2e191e79010fc252a4690c0a0b22ccc34a9832aaaab4c74e4dc9a9d7b687213304c98a6eee73f264369e91dde3c0916419b225ba0a975444aa2f"], 0x3c}}, 0x0) 1.462554938s ago: executing program 3 (id=2094): pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.339657654s ago: executing program 3 (id=2095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9452, 0xfffff801, 0x9a94}}]}]}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) 519.727155ms ago: executing program 3 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000078e9333c99a3e808cc302d8f0c432833a1244731a34449b70a4a137e0f3bd3ed7da9ebc697c55badf28939bbdfad4e598f9d64b144f396", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250e000000"], 0x14}}, 0x40890) 458.558654ms ago: executing program 2 (id=2097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14144008000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 371.361625ms ago: executing program 3 (id=2098): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffe01, 0x18}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @private}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @private, 0x0}, &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1f, 0x7f, 0x2, 0x2e79, 0x8, r2, 0x1ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1f, 0x7f, 0x2, 0x2e79, 0x8, r2, 0x1ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5c, r5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}}, 0x0) 225.032636ms ago: executing program 2 (id=2099): syz_emit_ethernet(0x56, &(0x7f00000015c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe8000000000000000000000000000000002000000000000070800000000000000d6000100e352b4091b67e050010100"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x12b4}, 0x1, 0x0, 0x0, 0x200000e0}, 0x4040000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x24, 0x4, {}, {}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "1c16338a1f503ff0"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008001) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0xc008744c, &(0x7f0000000100)={0x283}) 74.560462ms ago: executing program 3 (id=2100): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 0s ago: executing program 2 (id=2101): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x81, @local, 0x56d8}, 0x1c) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000001c0)={0x14}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) kernel console output (not intermixed with test programs): cast mode [ 226.352854][T12294] bridge_slave_0: entered promiscuous mode [ 226.360702][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.368442][T12294] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.375776][T12294] bridge_slave_1: entered allmulticast mode [ 226.382735][T12294] bridge_slave_1: entered promiscuous mode [ 226.541396][T12294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.589666][T12294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.608016][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 226.646523][T12143] veth0_vlan: entered promiscuous mode [ 226.676270][T12294] team0: Port device team_slave_0 added [ 226.702521][T12292] chnl_net:caif_netlink_parms(): no params data found [ 226.731914][T12294] team0: Port device team_slave_1 added [ 226.795751][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.810763][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.835226][ T5836] Bluetooth: hci0: command tx timeout [ 226.846829][T12143] veth1_vlan: entered promiscuous mode [ 226.886498][T12294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.893472][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.920214][T12294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.943216][T12294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.956842][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.997375][T12294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.033274][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.044226][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.152783][T12143] veth0_macvtap: entered promiscuous mode [ 227.200981][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.213325][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.276347][T12294] hsr_slave_0: entered promiscuous mode [ 227.282505][T12294] hsr_slave_1: entered promiscuous mode [ 227.288916][T12294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.296752][T12294] Cannot create hsr debugfs directory [ 227.391347][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.411360][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.440219][T12143] veth1_macvtap: entered promiscuous mode [ 227.453287][T12292] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.474904][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.570685][T12292] bridge_slave_0: entered allmulticast mode [ 227.578283][T12292] bridge_slave_0: entered promiscuous mode [ 227.629670][T12292] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.638627][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.648817][T12292] bridge_slave_1: entered allmulticast mode [ 227.656509][T12292] bridge_slave_1: entered promiscuous mode [ 227.708365][T12292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.726368][T12292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.736319][T12143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.747124][T12143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.758371][T12143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.830355][T12292] team0: Port device team_slave_0 added [ 227.841023][T12143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.852211][T12143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.865984][T12143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.877786][T12143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.888785][T12143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.899334][T12143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.908245][T12143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.917964][T12143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.926745][T12143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.947868][T12292] team0: Port device team_slave_1 added [ 227.955684][ T5836] Bluetooth: hci3: command tx timeout [ 228.035290][ T5836] Bluetooth: hci2: command tx timeout [ 228.057212][ T2959] bond3: left allmulticast mode [ 228.062093][ T2959] bond3: left promiscuous mode [ 228.290897][ T2959] bond7 (unregistering): (slave vti0): Releasing backup interface [ 228.345032][ T2959] erspan0 (unregistering): left promiscuous mode [ 228.393182][ T2959] gretap0 (unregistering): left promiscuous mode [ 228.453924][T12390] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 228.502521][ T2959] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 228.822524][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.832817][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.843325][ T2959] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 228.853309][ T2959] bond0 (unregistering): Released all slaves [ 228.863757][ T2959] bond1 (unregistering): Released all slaves [ 228.982445][ T2959] bond2 (unregistering): Released all slaves [ 229.118123][ T2959] bond3 (unregistering): Released all slaves [ 229.131208][ T2959] bond4 (unregistering): Released all slaves [ 229.252189][ T2959] bond5 (unregistering): Released all slaves [ 229.362712][ T2959] bond6 (unregistering): Released all slaves [ 229.372505][ T2959] bond7 (unregistering): Released all slaves [ 229.384393][T12292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.391636][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.417872][T12292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.430478][T12292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.440379][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.473771][T12292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.523540][T12384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1789'. [ 229.626016][ T2959] tipc: Disabling bearer [ 229.650752][ T2959] tipc: Left network mode [ 229.718973][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 229.738932][T12292] hsr_slave_0: entered promiscuous mode [ 229.749763][T12292] hsr_slave_1: entered promiscuous mode [ 229.757429][T12292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.775250][T12292] Cannot create hsr debugfs directory [ 229.930754][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 230.016250][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.045873][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.052754][ T5836] Bluetooth: hci3: command tx timeout [ 230.115259][ T5836] Bluetooth: hci2: command tx timeout [ 230.124832][T10675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.136009][T10675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.144674][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 230.246670][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 230.514170][T12427] team0: Device vti0 is up. Set it down before adding it as a team port [ 230.631123][T12294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.669479][T12294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.684608][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 230.695209][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 230.706405][T12294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.735349][T12294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.902279][ T2959] hsr_slave_0: left promiscuous mode [ 230.922935][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.935193][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.978542][ T2959] hsr_slave_1: left promiscuous mode [ 230.984086][ T2959] veth1_macvtap: left promiscuous mode [ 231.015204][ T2959] veth0_macvtap: left promiscuous mode [ 231.020847][ T2959] veth1_vlan: left promiscuous mode [ 231.026348][ T2959] veth0_vlan: left promiscuous mode [ 231.141285][ T2959] pimreg3 (unregistering): left allmulticast mode [ 231.301280][ T2959] hsr0 (unregistering): left allmulticast mode [ 231.457228][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 231.501218][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 231.620328][T12443] netlink: 1344 bytes leftover after parsing attributes in process `syz.3.1808'. [ 231.929328][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.968389][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.983567][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.011419][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.025747][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.033170][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.115425][ T5841] Bluetooth: hci3: command tx timeout [ 232.195251][ T5841] Bluetooth: hci2: command tx timeout [ 232.312772][T12294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.333420][T12452] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1811'. [ 232.373780][T12294] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.451390][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.458573][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.533953][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.541094][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.557283][T12292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.588020][T12292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.613056][T12292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.638818][T12292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.704855][ T2959] IPVS: stop unused estimator thread 0... [ 232.747260][T12294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.047992][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1817'. [ 233.062396][T10681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.065079][T12478] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1817'. [ 233.088892][T12478] netlink: 'syz.3.1817': attribute type 6 has an invalid length. [ 233.101524][T12478] netlink: 'syz.3.1817': attribute type 5 has an invalid length. [ 233.104385][T12292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.146185][T12445] chnl_net:caif_netlink_parms(): no params data found [ 233.193755][T12294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.221899][T10681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.252261][T12292] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.254646][T12484] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 233.270806][T12484] netlink: 'syz.3.1821': attribute type 2 has an invalid length. [ 233.326612][T10681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.374030][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.381231][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.406780][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.413881][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.534438][T10681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.591015][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.600006][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.610624][T12445] bridge_slave_0: entered allmulticast mode [ 233.617838][T12445] bridge_slave_0: entered promiscuous mode [ 233.641734][T12294] veth0_vlan: entered promiscuous mode [ 233.691893][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.701519][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.717266][T12445] bridge_slave_1: entered allmulticast mode [ 233.724057][T12445] bridge_slave_1: entered promiscuous mode [ 233.784593][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.813652][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.844601][T12294] veth1_vlan: entered promiscuous mode [ 233.884229][T12445] team0: Port device team_slave_0 added [ 233.892367][T12506] netlink: 'syz.2.1826': attribute type 3 has an invalid length. [ 233.918435][T12445] team0: Port device team_slave_1 added [ 233.959787][T10681] bridge_slave_1: left allmulticast mode [ 233.970712][T10681] bridge_slave_1: left promiscuous mode [ 233.979003][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.991199][T10681] bridge_slave_0: left allmulticast mode [ 233.998923][T10681] bridge_slave_0: left promiscuous mode [ 234.010386][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.116893][ T5841] Bluetooth: hci0: command tx timeout [ 234.340149][T10681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.351424][T10681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.362508][T10681] bond0 (unregistering): Released all slaves [ 234.377229][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.384613][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.412576][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.425948][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.433019][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.463293][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.712378][T12294] veth0_macvtap: entered promiscuous mode [ 234.766292][T12445] hsr_slave_0: entered promiscuous mode [ 234.777368][T12445] hsr_slave_1: entered promiscuous mode [ 234.784224][T12445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.801630][T12445] Cannot create hsr debugfs directory [ 234.841881][T12294] veth1_macvtap: entered promiscuous mode [ 235.052667][T12292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.069147][T10681] hsr_slave_0: left promiscuous mode [ 235.083540][T10681] hsr_slave_1: left promiscuous mode [ 235.090808][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.099081][T10681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.107178][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.115528][T10681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.145204][T10681] veth1_macvtap: left promiscuous mode [ 235.150786][T10681] veth0_macvtap: left promiscuous mode [ 235.158633][T10681] veth1_vlan: left promiscuous mode [ 235.163967][T10681] veth0_vlan: left promiscuous mode [ 235.573796][T10681] team0 (unregistering): Port device team_slave_1 removed [ 235.614132][T10681] team0 (unregistering): Port device team_slave_0 removed [ 236.043682][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.064389][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.093663][T12294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.133128][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.161878][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.183912][T12294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.195360][ T5841] Bluetooth: hci0: command tx timeout [ 236.235637][T12294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.244514][T12294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.254396][T12294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.266499][T12294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.524517][T12292] veth0_vlan: entered promiscuous mode [ 236.552767][T12561] __nla_validate_parse: 1 callbacks suppressed [ 236.552785][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 236.569358][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 236.583633][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 236.601897][T10673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.612383][T12292] veth1_vlan: entered promiscuous mode [ 236.620736][T10673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.699718][T12564] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 236.760168][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 236.771810][T12564] syz_tun: entered promiscuous mode [ 236.798185][T12564] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 236.820998][T12568] bond0: (slave bond1): Releasing backup interface [ 236.840063][T12568] bond2: (slave gretap1): Releasing active interface [ 236.873389][T10673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.873770][T12292] veth0_macvtap: entered promiscuous mode [ 236.887542][T10673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.903370][T12292] veth1_macvtap: entered promiscuous mode [ 236.941979][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.986628][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.009707][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.029031][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.043512][T12292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.063832][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.083277][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.093836][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.125717][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.139216][T12292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.183280][T12574] af_packet: tpacket_rcv: packet too big, clamped from 2976 to 2928. macoff=96 [ 237.207081][T12292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.231153][T12292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.242515][T12292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.252591][T12292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.482542][T12445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.522834][T12445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.601159][T12445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.681034][T12445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.809312][T10681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.854415][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.881592][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.919759][T10681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.995956][T10673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.010048][T10673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.017945][T12600] netlink: 'syz.2.1848': attribute type 10 has an invalid length. [ 238.044636][T10681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.059232][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1849'. [ 238.089027][T12600] bond0: (slave netdevsim0): Releasing backup interface [ 238.099749][T12600] team0: Port device netdevsim0 added [ 238.162070][T10681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.284221][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.355944][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.383262][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.389041][T12445] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.450951][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.461057][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.476099][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 238.483495][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.494888][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.502044][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.560299][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.567479][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.690893][T12445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.715191][T12445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.745613][T10681] bridge_slave_1: left allmulticast mode [ 238.751293][T10681] bridge_slave_1: left promiscuous mode [ 238.761704][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.772487][T10681] bridge_slave_0: left allmulticast mode [ 238.783061][T10681] bridge_slave_0: left promiscuous mode [ 238.789633][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.173902][T10681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.190459][T10681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.200535][T10681] bond0 (unregistering): Released all slaves [ 239.377855][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.461475][T12445] veth0_vlan: entered promiscuous mode [ 239.474156][T12445] veth1_vlan: entered promiscuous mode [ 239.508747][T12608] chnl_net:caif_netlink_parms(): no params data found [ 239.600182][T12445] veth0_macvtap: entered promiscuous mode [ 239.626512][T10681] hsr_slave_0: left promiscuous mode [ 239.632721][T10681] hsr_slave_1: left promiscuous mode [ 239.639261][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.646956][T10681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.655744][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.663158][T10681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.683585][T10681] veth1_macvtap: left promiscuous mode [ 239.689297][T10681] veth0_macvtap: left promiscuous mode [ 239.694919][T10681] veth1_vlan: left promiscuous mode [ 239.700518][T10681] veth0_vlan: left promiscuous mode [ 240.090128][T10681] team0 (unregistering): Port device team_slave_1 removed [ 240.129292][T10681] team0 (unregistering): Port device team_slave_0 removed [ 240.605285][ T5836] Bluetooth: hci2: command tx timeout [ 240.618710][T12646] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 240.634142][T12646] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1858'. [ 240.762133][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.791835][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.807056][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.817326][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.827004][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.839029][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.881916][T12445] veth1_macvtap: entered promiscuous mode [ 240.902241][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.913605][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.923885][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.934501][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.947101][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.958631][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.969332][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.979322][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.990359][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.016042][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.056881][T12608] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.070485][T12608] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.078707][T12608] bridge_slave_0: entered allmulticast mode [ 241.099402][T12608] bridge_slave_0: entered promiscuous mode [ 241.132514][T12445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.158093][T12445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.170856][T12445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.182512][T12445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.208406][T12608] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.227448][T12608] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.244067][T12608] bridge_slave_1: entered allmulticast mode [ 241.266335][T12608] bridge_slave_1: entered promiscuous mode [ 241.373427][T12608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.405943][T12608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.499874][T12608] team0: Port device team_slave_0 added [ 241.540334][T12608] team0: Port device team_slave_1 added [ 241.576521][T12608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.583633][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.609995][T12608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.637642][T12608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.645177][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.654873][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.662773][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.690909][T12608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.784413][T12608] hsr_slave_0: entered promiscuous mode [ 241.792048][T12608] hsr_slave_1: entered promiscuous mode [ 241.802395][T12608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.810411][T12608] Cannot create hsr debugfs directory [ 241.836992][T10678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.855110][T10678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.914297][T10681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.064212][T10681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.099372][T12683] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.292605][T10681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.329006][T12647] chnl_net:caif_netlink_parms(): no params data found [ 242.335411][T12685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1868'. [ 242.410358][T12694] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 242.435695][T10681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.616794][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.628975][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.639561][T12647] bridge_slave_0: entered allmulticast mode [ 242.651189][T12647] bridge_slave_0: entered promiscuous mode [ 242.671036][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.678680][ T5841] Bluetooth: hci2: command tx timeout [ 242.691011][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.699014][T12647] bridge_slave_1: entered allmulticast mode [ 242.707564][T12647] bridge_slave_1: entered promiscuous mode [ 242.749706][T12647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.771041][T12647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.814106][T10681] bridge_slave_1: left allmulticast mode [ 242.820485][T10681] bridge_slave_1: left promiscuous mode [ 242.826501][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.842194][T10681] bridge_slave_0: left allmulticast mode [ 242.848083][T10681] bridge_slave_0: left promiscuous mode [ 242.853764][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.917729][ T5841] Bluetooth: hci3: command tx timeout [ 243.196852][T10681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.208627][T10681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.218562][T10681] bond0 (unregistering): Released all slaves [ 243.233516][T12647] team0: Port device team_slave_0 added [ 243.243620][T12647] team0: Port device team_slave_1 added [ 243.358384][T12703] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 243.466165][T12705] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 243.546460][T12708] netlink: 'syz.3.1873': attribute type 18 has an invalid length. [ 243.563639][T12708] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1873'. [ 243.581273][T12647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.588662][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.621403][T12647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.634328][T12647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.649620][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.682363][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.687071][T12647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.692562][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.716132][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.735335][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.743896][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.756537][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.804113][T12608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.846794][T12608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.889617][T12647] hsr_slave_0: entered promiscuous mode [ 243.915294][T12647] hsr_slave_1: entered promiscuous mode [ 243.919730][T12716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1875'. [ 243.921396][T12647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.965298][T12647] Cannot create hsr debugfs directory [ 243.998528][T12608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.045955][T10681] hsr_slave_0: left promiscuous mode [ 244.056886][T10681] hsr_slave_1: left promiscuous mode [ 244.062944][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.074651][T10681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.082881][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.090430][T10681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.111333][T10681] veth1_macvtap: left promiscuous mode [ 244.117063][T10681] veth0_macvtap: left promiscuous mode [ 244.123008][T10681] veth1_vlan: left promiscuous mode [ 244.128468][T10681] veth0_vlan: left promiscuous mode [ 244.516264][T10681] team0 (unregistering): Port device team_slave_1 removed [ 244.558464][T10681] team0 (unregistering): Port device team_slave_0 removed [ 244.759409][ T5841] Bluetooth: hci2: command tx timeout [ 244.963930][T12608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.996899][ T5841] Bluetooth: hci3: command tx timeout [ 245.323897][T12730] netlink: 'syz.3.1880': attribute type 13 has an invalid length. [ 245.554845][T12709] chnl_net:caif_netlink_parms(): no params data found [ 245.606743][T12608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.646210][T10677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.755191][T12746] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1883'. [ 245.796128][ T5841] Bluetooth: hci0: command tx timeout [ 245.814451][T10677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.858683][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.866479][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.873674][T12709] bridge_slave_0: entered allmulticast mode [ 245.889887][T12709] bridge_slave_0: entered promiscuous mode [ 245.906864][T12608] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.930639][T10677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.953316][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.962141][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.969876][T12709] bridge_slave_1: entered allmulticast mode [ 245.977471][T12709] bridge_slave_1: entered promiscuous mode [ 246.033028][T10677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.054330][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.080134][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.092511][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.099650][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.130380][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.137613][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.171413][T12709] team0: Port device team_slave_0 added [ 246.184242][T12647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.203098][T12709] team0: Port device team_slave_1 added [ 246.229333][T12647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.241663][T12647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.259806][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.267260][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.294714][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.316878][T12647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.329529][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.337428][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.364288][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.418585][T10677] bridge_slave_1: left allmulticast mode [ 246.424284][T10677] bridge_slave_1: left promiscuous mode [ 246.439623][T10677] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.450377][T10677] bridge_slave_0: left allmulticast mode [ 246.457262][T10677] bridge_slave_0: left promiscuous mode [ 246.463002][T10677] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.808033][T10677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.819503][T10677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.830200][T10677] bond0 (unregistering): Released all slaves [ 246.836524][ T5841] Bluetooth: hci2: command tx timeout [ 247.012085][T12764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 247.075255][ T5841] Bluetooth: hci3: command tx timeout [ 247.082862][T12709] hsr_slave_0: entered promiscuous mode [ 247.099777][T12709] hsr_slave_1: entered promiscuous mode [ 247.114478][T12709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.127020][T12709] Cannot create hsr debugfs directory [ 247.440361][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 247.507543][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.565507][T10677] hsr_slave_0: left promiscuous mode [ 247.571380][T10677] hsr_slave_1: left promiscuous mode [ 247.589348][T10677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.605132][T10677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.622946][T10677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.634169][T10677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.658086][T10677] veth1_macvtap: left promiscuous mode [ 247.663616][T10677] veth0_macvtap: left promiscuous mode [ 247.669265][T10677] veth1_vlan: left promiscuous mode [ 247.674512][T10677] veth0_vlan: left promiscuous mode [ 247.875306][ T5841] Bluetooth: hci0: command tx timeout [ 248.062572][T10677] team0 (unregistering): Port device team_slave_1 removed [ 248.106249][T10677] team0 (unregistering): Port device team_slave_0 removed [ 248.495804][T12792] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.544485][T12608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.599087][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.731436][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.738710][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.755442][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.762579][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.895145][T12608] veth0_vlan: entered promiscuous mode [ 248.940262][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 248.956641][T12608] veth1_vlan: entered promiscuous mode [ 248.980918][T12647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.058325][T12815] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1901'. [ 249.122305][T12608] veth0_macvtap: entered promiscuous mode [ 249.142645][T12608] veth1_macvtap: entered promiscuous mode [ 249.155460][ T5841] Bluetooth: hci3: command tx timeout [ 249.195800][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.204654][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.217833][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.246218][T12608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.277711][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.292934][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.305909][T12608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.342528][T12608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.354048][T12608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.369238][T12608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.378272][T12608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.454020][T12709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.513659][T12709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.529162][T12709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.558041][T12709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.678974][T12647] veth0_vlan: entered promiscuous mode [ 249.698319][T10677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.713659][T10677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.746212][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.748783][T12647] veth1_vlan: entered promiscuous mode [ 249.769083][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.834599][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.901071][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.944803][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.952074][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.956589][ T5841] Bluetooth: hci0: command tx timeout [ 250.011420][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.018606][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.106412][T12647] veth0_macvtap: entered promiscuous mode [ 250.158528][T12647] veth1_macvtap: entered promiscuous mode [ 250.193989][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.232292][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.234244][T12853] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1910'. [ 250.251515][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.251537][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.252668][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.313490][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.336244][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.350763][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.361616][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.373372][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.402566][T12647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.450725][T12647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.470044][T12647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.491249][T12647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.558204][T12864] x_tables: unsorted entry at hook 1 [ 250.607513][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.739545][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.814487][T12870] tipc: Failed to remove unknown binding: 66,1,1/0:2604797966/2604797968 [ 250.834449][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.850133][T12870] tipc: Failed to remove unknown binding: 66,1,1/0:2604797966/2604797968 [ 250.945751][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.982598][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'. [ 251.019834][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1916'. [ 251.050897][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.063268][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.071761][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.088139][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.097132][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.104434][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.113127][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.141806][T10681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.150079][T10681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.231154][T12876] IPVS: Unknown mcast interface: vcan0 [ 251.251566][T10675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.278054][T12885] sctp: [Deprecated]: syz.2.1917 (pid 12885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.278054][T12885] Use struct sctp_sack_info instead [ 251.297055][T10675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.329339][T12709] veth0_vlan: entered promiscuous mode [ 251.360592][T12709] veth1_vlan: entered promiscuous mode [ 251.496232][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 251.567057][T12709] veth0_macvtap: entered promiscuous mode [ 251.575131][ T1155] bridge_slave_1: left allmulticast mode [ 251.580815][ T1155] bridge_slave_1: left promiscuous mode [ 251.603268][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.635811][ T1155] bridge_slave_0: left allmulticast mode [ 251.641525][ T1155] bridge_slave_0: left promiscuous mode [ 251.653480][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.038716][ T5836] Bluetooth: hci0: command tx timeout [ 252.070447][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.081117][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.091880][ T1155] bond0 (unregistering): Released all slaves [ 252.176858][T12709] veth1_macvtap: entered promiscuous mode [ 252.229359][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 252.266319][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.277844][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.288117][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.298839][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.308918][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.320015][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.337719][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.500325][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.512258][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.523346][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.534550][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.544740][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.555330][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.571894][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.604341][T12709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.613325][T12709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.623190][T12709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.631982][T12709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.773842][ T1155] hsr_slave_0: left promiscuous mode [ 252.783973][ T1155] hsr_slave_1: left promiscuous mode [ 252.790989][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.800077][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.808405][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.816004][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.833704][ T1155] veth1_macvtap: left promiscuous mode [ 252.839624][ T1155] veth0_macvtap: left promiscuous mode [ 252.845348][ T1155] veth1_vlan: left promiscuous mode [ 252.850590][ T1155] veth0_vlan: left promiscuous mode [ 253.159330][ T5836] Bluetooth: hci2: command tx timeout [ 253.235679][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 253.278926][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 253.634314][T12878] chnl_net:caif_netlink_parms(): no params data found [ 253.749287][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.759167][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.798095][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.808577][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.816068][T12878] bridge_slave_0: entered allmulticast mode [ 253.823217][T12878] bridge_slave_0: entered promiscuous mode [ 253.837476][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.844641][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.857687][T12878] bridge_slave_1: entered allmulticast mode [ 253.864822][T12878] bridge_slave_1: entered promiscuous mode [ 253.883528][T10678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.904030][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.913244][T10678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.923719][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.971112][T12878] team0: Port device team_slave_0 added [ 253.987031][T12878] team0: Port device team_slave_1 added [ 254.143873][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.166910][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.220315][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.359012][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.397977][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.416260][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.513677][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.531305][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.542440][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.567067][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.578172][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.587713][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.599992][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.605264][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.701713][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.728031][T12878] hsr_slave_0: entered promiscuous mode [ 254.734360][T12878] hsr_slave_1: entered promiscuous mode [ 254.740765][T12878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.748500][T12878] Cannot create hsr debugfs directory [ 254.792596][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.922486][ T1155] bridge_slave_1: left allmulticast mode [ 254.928574][ T1155] bridge_slave_1: left promiscuous mode [ 254.934216][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.942815][ T1155] bridge_slave_0: left allmulticast mode [ 254.949029][ T1155] bridge_slave_0: left promiscuous mode [ 254.954693][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.245667][ T5836] Bluetooth: hci2: command tx timeout [ 255.253457][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.263950][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.274067][ T1155] bond0 (unregistering): Released all slaves [ 255.707984][T12931] chnl_net:caif_netlink_parms(): no params data found [ 255.886474][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.908706][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.918798][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.929511][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.940113][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.963686][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.210815][ T1155] hsr_slave_0: left promiscuous mode [ 256.223587][ T1155] hsr_slave_1: left promiscuous mode [ 256.230447][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.238107][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.251343][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.258875][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.284913][ T1155] veth1_macvtap: left promiscuous mode [ 256.290704][ T1155] veth0_macvtap: left promiscuous mode [ 256.296570][ T1155] veth1_vlan: left promiscuous mode [ 256.301960][ T1155] veth0_vlan: left promiscuous mode [ 256.685889][ T5836] Bluetooth: hci0: command tx timeout [ 256.763995][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 256.808700][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 257.204692][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.214496][T12931] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.222814][T12931] bridge_slave_0: entered allmulticast mode [ 257.232273][T12931] bridge_slave_0: entered promiscuous mode [ 257.293624][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.315127][T12931] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.322209][ T5836] Bluetooth: hci2: command tx timeout [ 257.366551][T12931] bridge_slave_1: entered allmulticast mode [ 257.383833][T12931] bridge_slave_1: entered promiscuous mode [ 257.501454][T12931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.514387][T12878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.533284][T12878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.553748][T12931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.577479][T12878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.670009][T12878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.699311][T12931] team0: Port device team_slave_0 added [ 257.700515][T13010] netlink: 'syz.2.1946': attribute type 1 has an invalid length. [ 257.714593][T12931] team0: Port device team_slave_1 added [ 257.756502][T13010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.789249][T13010] bond6: (slave bridge4): making interface the new active one [ 257.804866][T13010] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 257.901341][T12931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.911913][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.959672][T12931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.991607][T12931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.001842][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.030433][T12931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.043073][ T5836] Bluetooth: hci3: command tx timeout [ 258.115329][T12931] hsr_slave_0: entered promiscuous mode [ 258.121740][T12931] hsr_slave_1: entered promiscuous mode [ 258.128702][T12931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.136374][T12931] Cannot create hsr debugfs directory [ 258.275221][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.313083][T12956] chnl_net:caif_netlink_parms(): no params data found [ 258.331295][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 258.406951][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.428360][T13033] netlink: 'syz.2.1953': attribute type 13 has an invalid length. [ 258.442249][T13033] netlink: 'syz.2.1953': attribute type 58 has an invalid length. [ 258.447431][T12878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.455887][T13033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1953'. [ 258.489471][T13033] vlan0: entered allmulticast mode [ 258.560345][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.577544][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 258.591479][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 258.638419][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.643858][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'. [ 258.754324][T12878] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.765353][ T5836] Bluetooth: hci0: command tx timeout [ 258.781708][T12956] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.796304][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.803666][T12956] bridge_slave_0: entered allmulticast mode [ 258.817163][T12956] bridge_slave_0: entered promiscuous mode [ 258.839998][T12956] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.849037][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.857902][T12956] bridge_slave_1: entered allmulticast mode [ 258.864479][T12956] bridge_slave_1: entered promiscuous mode [ 258.916549][T12956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.959901][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.967073][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.999788][T12956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.041606][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.048805][T10678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.056092][T13054] netlink: 'syz.3.1959': attribute type 3 has an invalid length. [ 259.063991][T13054] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 259.072357][ T1155] bridge_slave_1: left allmulticast mode [ 259.088430][ T1155] bridge_slave_1: left promiscuous mode [ 259.094281][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.109369][ T1155] bridge_slave_0: left allmulticast mode [ 259.118423][ T1155] bridge_slave_0: left promiscuous mode [ 259.124731][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.405259][ T5836] Bluetooth: hci2: command tx timeout [ 259.463260][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.474294][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.490812][ T1155] bond0 (unregistering): Released all slaves [ 259.541140][T12956] team0: Port device team_slave_0 added [ 259.600619][T12956] team0: Port device team_slave_1 added [ 259.673598][T12956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.682637][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.710096][T12956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.726609][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 259.736019][T13061] netlink: 'syz.2.1961': attribute type 3 has an invalid length. [ 259.766139][T13063] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1962'. [ 259.779330][T12956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.790571][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.824061][T12956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.889430][T12878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.039435][T12956] hsr_slave_0: entered promiscuous mode [ 260.056355][T12956] hsr_slave_1: entered promiscuous mode [ 260.062396][T12956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.077144][T12956] Cannot create hsr debugfs directory [ 260.124840][ T5836] Bluetooth: hci3: command tx timeout [ 260.236597][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.308005][ T1155] hsr_slave_0: left promiscuous mode [ 260.314177][ T1155] hsr_slave_1: left promiscuous mode [ 260.320227][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.328310][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.338104][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.346152][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.373054][ T1155] veth1_macvtap: left promiscuous mode [ 260.379180][ T1155] veth0_macvtap: left promiscuous mode [ 260.384808][ T1155] veth1_vlan: left promiscuous mode [ 260.390409][ T1155] veth0_vlan: left promiscuous mode [ 260.601216][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 260.668093][T13086] x_tables: ip_tables: ah match: only valid for protocol 51 [ 260.839015][ T5836] Bluetooth: hci0: command tx timeout [ 260.929334][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 260.982433][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 261.688323][T13085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.835123][T13085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.873254][T12931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.886586][T13091] delete_channel: no stack [ 261.915672][T12931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.944843][T13085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.973826][T13094] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 261.990811][T12931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.008476][T13094] team0: Device ipvlan1 failed to register rx_handler [ 262.061159][T12931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.130829][T13085] team0: Port device netdevsim0 removed [ 262.143356][T13085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.165639][T12878] veth0_vlan: entered promiscuous mode [ 262.193416][T12878] veth1_vlan: entered promiscuous mode [ 262.206188][ T5836] Bluetooth: hci3: command tx timeout [ 262.276909][T13099] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 262.298131][T12878] veth0_macvtap: entered promiscuous mode [ 262.318172][T13085] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.329941][T12878] veth1_macvtap: entered promiscuous mode [ 262.349463][T13085] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.407020][T13085] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.419551][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.430466][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.442260][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.461400][T13085] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.481798][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.504570][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.526674][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.572099][T12931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.597283][T12878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.614098][T12878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.635198][T12878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.655097][T12878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.703372][T12931] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.724873][T13107] netem: incorrect gi model size [ 262.732121][T13107] netem: change failed [ 262.739242][T12956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.779392][T12956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.795798][T12956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.842041][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.849251][T10677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.874110][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.881287][T10677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.897893][T12956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.915567][ T5836] Bluetooth: hci0: command tx timeout [ 263.000544][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.019300][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.109495][T10677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.119933][T10677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.133431][T13117] x_tables: unsorted underflow at hook 1 [ 263.224761][T12956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.280500][T12956] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.300909][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.308102][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.413852][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.421069][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.482224][T12931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.579081][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.768474][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.894281][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.931133][T12956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.964182][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.993430][T12931] veth0_vlan: entered promiscuous mode [ 264.012290][T12931] veth1_vlan: entered promiscuous mode [ 264.040509][T12956] veth0_vlan: entered promiscuous mode [ 264.058193][T12956] veth1_vlan: entered promiscuous mode [ 264.073179][T12931] veth0_macvtap: entered promiscuous mode [ 264.093376][T12931] veth1_macvtap: entered promiscuous mode [ 264.121457][T12931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.132151][T12931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.145826][T12931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.158304][T12931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.169643][T12931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.196751][T12931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.207511][T12931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.217672][T12931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.228575][T12931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.239355][T12931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.255898][T12956] veth0_macvtap: entered promiscuous mode [ 264.276486][ T5836] Bluetooth: hci3: command tx timeout [ 264.318178][T12931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.328553][T12931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.340106][T12931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.346698][T13144] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1984'. [ 264.349422][T12931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.372180][T12956] veth1_macvtap: entered promiscuous mode [ 264.392832][T13146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1983'. [ 264.404399][ T2959] bridge_slave_1: left allmulticast mode [ 264.410582][T13147] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1984'. [ 264.424888][ T2959] bridge_slave_1: left promiscuous mode [ 264.432730][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.467465][ T2959] bridge_slave_0: left allmulticast mode [ 264.473166][ T2959] bridge_slave_0: left promiscuous mode [ 264.485537][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.616684][T13157] tls_set_device_offload: netdev not found [ 264.776195][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.786613][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.805784][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.813825][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.829868][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.841268][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.847593][T13167] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1986'. [ 265.096247][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.108824][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.119304][ T2959] bond0 (unregistering): Released all slaves [ 265.147113][T13165] team0: Device vti0 is up. Set it down before adding it as a team port [ 265.208351][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.226503][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.236752][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.261414][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.271570][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.282198][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.296561][T12956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.420914][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.446872][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.462243][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.473336][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.489940][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.502372][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.514673][T12956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.551624][T13177] netlink: 'syz.2.1989': attribute type 5 has an invalid length. [ 265.561023][T13178] dvmrp0: entered allmulticast mode [ 265.569627][T12956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.579590][T12956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.588608][T12956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.597408][T12956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.633297][T13174] dvmrp0: left allmulticast mode [ 265.752060][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.760209][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.922356][ T2959] hsr_slave_0: left promiscuous mode [ 265.930296][ T2959] hsr_slave_1: left promiscuous mode [ 265.939653][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.947519][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.955661][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.963139][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.984214][ T2959] veth1_macvtap: left promiscuous mode [ 265.990120][ T2959] veth0_macvtap: left promiscuous mode [ 265.995880][ T2959] veth1_vlan: left promiscuous mode [ 266.001155][ T2959] veth0_vlan: left promiscuous mode [ 266.398223][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 266.439705][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 266.843602][T10677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.851667][T10677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.859300][T13161] chnl_net:caif_netlink_parms(): no params data found [ 266.912065][T10673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.926373][ T5836] Bluetooth: hci2: command tx timeout [ 266.935048][T10673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.977706][T10677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.987685][T10677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.247967][T13161] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.266142][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.273386][T13161] bridge_slave_0: entered allmulticast mode [ 267.306713][T13161] bridge_slave_0: entered promiscuous mode [ 267.324617][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.341131][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.359708][T13161] bridge_slave_1: entered allmulticast mode [ 267.373114][T13161] bridge_slave_1: entered promiscuous mode [ 267.511451][T13161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.538550][T13161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.597822][T13161] team0: Port device team_slave_0 added [ 267.616774][T13161] team0: Port device team_slave_1 added [ 267.717587][T13161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.735331][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.779275][T13161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.801456][T13161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.810726][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.838156][T13161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.989288][ T2959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.019424][T13161] hsr_slave_0: entered promiscuous mode [ 268.037395][T13161] hsr_slave_1: entered promiscuous mode [ 268.043379][T13161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.075180][T13161] Cannot create hsr debugfs directory [ 268.119388][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 268.236659][ T2959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.301360][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.315607][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.324753][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.334354][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.348673][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.364919][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.381546][ T2959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.432610][ T2959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.669913][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.711370][T13216] chnl_net:caif_netlink_parms(): no params data found [ 268.743115][T13161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.756986][T13161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.791713][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.806493][T13161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.818161][T13161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.845020][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.887323][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.894471][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.902589][T13216] bridge_slave_0: entered allmulticast mode [ 268.909771][T13216] bridge_slave_0: entered promiscuous mode [ 268.952831][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.969419][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.979375][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.987044][T13216] bridge_slave_1: entered allmulticast mode [ 268.993641][T13216] bridge_slave_1: entered promiscuous mode [ 269.005113][ T5841] Bluetooth: hci2: command tx timeout [ 269.033942][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.048404][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.078489][T13216] team0: Port device team_slave_0 added [ 269.091910][T13216] team0: Port device team_slave_1 added [ 269.119348][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.126591][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.152890][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.165961][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.172926][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.199124][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.237156][T13161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.273349][T13216] hsr_slave_0: entered promiscuous mode [ 269.279690][T13216] hsr_slave_1: entered promiscuous mode [ 269.286020][T13216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.293600][T13216] Cannot create hsr debugfs directory [ 269.360691][T13161] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.370777][ T2959] bridge_slave_1: left allmulticast mode [ 269.377773][ T2959] bridge_slave_1: left promiscuous mode [ 269.383429][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.392772][ T2959] bridge_slave_0: left allmulticast mode [ 269.400197][ T2959] bridge_slave_0: left promiscuous mode [ 269.406007][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.417844][ T2959] bridge_slave_1: left allmulticast mode [ 269.423495][ T2959] bridge_slave_1: left promiscuous mode [ 269.429411][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.438749][ T2959] bridge_slave_0: left allmulticast mode [ 269.444391][ T2959] bridge_slave_0: left promiscuous mode [ 269.450428][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.627640][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'. [ 269.686250][T13226] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 269.687322][T13231] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 269.920766][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.934711][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.944769][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.964506][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.973369][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.983868][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.177993][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.190244][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.200903][ T2959] bond0 (unregistering): Released all slaves [ 270.320779][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.335246][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.349868][ T2959] bond0 (unregistering): Released all slaves [ 270.364508][T13226] wlan1: mtu less than device minimum [ 270.370513][T13226] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 270.385889][T13231] wlan1: mtu less than device minimum [ 270.391391][T13231] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 270.404996][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.412125][T10677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.445718][ T5841] Bluetooth: hci0: command tx timeout [ 270.503213][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.510416][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.698818][T13243] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 270.847968][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 271.075709][ T5841] Bluetooth: hci2: command tx timeout [ 271.324121][T13161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.370266][T13233] chnl_net:caif_netlink_parms(): no params data found [ 271.457231][T13278] Cannot find del_set index 4 as target [ 271.606601][ T2959] hsr_slave_0: left promiscuous mode [ 271.612345][ T2959] hsr_slave_1: left promiscuous mode [ 271.620360][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.628242][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.636657][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.644066][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.654643][ T2959] hsr_slave_0: left promiscuous mode [ 271.660494][ T2959] hsr_slave_1: left promiscuous mode [ 271.666579][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.673992][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.683865][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.691509][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.729024][ T2959] veth1_macvtap: left promiscuous mode [ 271.734577][ T2959] veth0_macvtap: left promiscuous mode [ 271.740191][ T2959] veth1_vlan: left promiscuous mode [ 271.745676][ T2959] veth0_vlan: left promiscuous mode [ 271.751795][ T2959] veth1_macvtap: left promiscuous mode [ 271.757381][ T2959] veth0_macvtap: left promiscuous mode [ 271.762968][ T2959] veth1_vlan: left promiscuous mode [ 271.768540][ T2959] veth0_vlan: left promiscuous mode [ 272.038575][ T5841] Bluetooth: hci3: command tx timeout [ 272.243894][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 272.283880][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 272.525136][ T5841] Bluetooth: hci0: command tx timeout [ 272.993177][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 273.039423][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 273.155427][ T5841] Bluetooth: hci2: command tx timeout [ 273.467086][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.485465][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.492725][T13233] bridge_slave_0: entered allmulticast mode [ 273.507911][T13233] bridge_slave_0: entered promiscuous mode [ 273.548719][T13216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.581651][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.591487][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.603356][T13233] bridge_slave_1: entered allmulticast mode [ 273.614327][T13233] bridge_slave_1: entered promiscuous mode [ 273.669679][T13161] veth0_vlan: entered promiscuous mode [ 273.685483][T13216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.702836][T13216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.737224][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.766357][T13216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.794209][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.818445][T13161] veth1_vlan: entered promiscuous mode [ 273.892616][T13233] team0: Port device team_slave_0 added [ 273.914422][T13298] dvmrp0: entered allmulticast mode [ 273.930008][T13233] team0: Port device team_slave_1 added [ 274.006518][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.021643][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.049339][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.070163][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.099858][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.126003][ T5841] Bluetooth: hci3: command tx timeout [ 274.203715][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.307645][T13233] hsr_slave_0: entered promiscuous mode [ 274.315393][T13233] hsr_slave_1: entered promiscuous mode [ 274.321545][T13233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.331502][T13233] Cannot create hsr debugfs directory [ 274.473293][T13161] veth0_macvtap: entered promiscuous mode [ 274.490026][T13327] veth1_macvtap: left promiscuous mode [ 274.496938][T13327] macsec0: entered allmulticast mode [ 274.506713][T13327] veth1_macvtap: entered promiscuous mode [ 274.512579][T13327] veth1_macvtap: entered allmulticast mode [ 274.518843][T13327] macsec0: left allmulticast mode [ 274.535034][T13327] veth1_macvtap: left allmulticast mode [ 274.576253][T13161] veth1_macvtap: entered promiscuous mode [ 274.596180][ T5841] Bluetooth: hci0: command tx timeout [ 274.660259][T13161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.673229][T13333] netlink: 'syz.3.2029': attribute type 11 has an invalid length. [ 274.681863][T13161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.694617][T13161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.727218][T13161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.745208][T13161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.756721][T13161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.795442][T13161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.804365][T13161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.814019][T13161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.823634][T13161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.844753][T13216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.928797][T13216] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.941593][T13339] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 274.942734][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.954671][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.955222][T13340] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 275.012160][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.019297][T10677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.061190][T10677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.083150][T10677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.121732][T13345] tap0: tun_chr_ioctl cmd 1074025677 [ 275.127382][T13345] tap0: linktype set to 778 [ 275.142642][T13346] tap0: tun_chr_ioctl cmd 1074025673 [ 275.148256][T13347] tap0: tun_chr_ioctl cmd 1074025677 [ 275.153856][T13347] tap0: linktype set to 778 [ 275.168497][T10681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.188694][T10681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.334905][T13233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.354912][T13233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.417335][T13233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.434635][T13233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.451553][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 275.476205][T13216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.579915][T13216] veth0_vlan: entered promiscuous mode [ 275.603594][T13216] veth1_vlan: entered promiscuous mode [ 275.618354][T13359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2033'. [ 275.668951][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.688739][T13357] netlink: 'syz.3.2033': attribute type 2 has an invalid length. [ 275.759070][T10673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.849601][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.892203][T10673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.909247][T13216] veth0_macvtap: entered promiscuous mode [ 275.920411][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.927561][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.942962][T13216] veth1_macvtap: entered promiscuous mode [ 275.953262][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.960466][T10675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.994787][T10673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.023711][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.036550][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.050900][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.061538][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.072783][T13216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.086631][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.097990][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.107986][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.118805][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.129652][T13216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.151903][T10673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.177905][T13216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.187087][T13216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.197150][T13216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.201491][ T5841] Bluetooth: hci3: command tx timeout [ 276.206063][T13216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.405724][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.413605][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.475971][T10673] bridge_slave_1: left allmulticast mode [ 276.481920][T10673] bridge_slave_1: left promiscuous mode [ 276.513196][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.552354][T10673] bridge_slave_0: left allmulticast mode [ 276.566094][T10673] bridge_slave_0: left promiscuous mode [ 276.575978][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.678716][ T5841] Bluetooth: hci0: command tx timeout [ 276.787752][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.809494][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.829864][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.857443][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.871821][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.879810][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.084624][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.099258][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.109303][T10673] bond0 (unregistering): Released all slaves [ 277.123212][T10678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.143067][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.150661][T10678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.171094][T13388] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 277.197884][T13388] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 277.221521][T13388] tipc: Resetting bearer [ 277.534240][T13400] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 277.824153][T10673] hsr_slave_0: left promiscuous mode [ 277.833935][T10673] hsr_slave_1: left promiscuous mode [ 277.840424][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.851485][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.859307][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.867137][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.887447][T10673] veth1_macvtap: left promiscuous mode [ 277.893025][T10673] veth0_macvtap: left promiscuous mode [ 277.900321][T10673] veth1_vlan: left promiscuous mode [ 277.906082][T10673] veth0_vlan: left promiscuous mode [ 278.280445][ T5841] Bluetooth: hci3: command tx timeout [ 278.313732][T10673] team0 (unregistering): Port device team_slave_1 removed [ 278.367484][T10673] team0 (unregistering): Port device team_slave_0 removed [ 278.833382][T13233] veth0_vlan: entered promiscuous mode [ 278.901630][T13233] veth1_vlan: entered promiscuous mode [ 279.002863][ T5841] Bluetooth: hci2: command tx timeout [ 279.012045][T13386] chnl_net:caif_netlink_parms(): no params data found [ 279.066048][T13233] veth0_macvtap: entered promiscuous mode [ 279.075420][T13233] veth1_macvtap: entered promiscuous mode [ 279.115860][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.122956][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.133492][T13386] bridge_slave_0: entered allmulticast mode [ 279.140759][T13386] bridge_slave_0: entered promiscuous mode [ 279.148745][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.156271][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.163427][T13386] bridge_slave_1: entered allmulticast mode [ 279.170163][T13386] bridge_slave_1: entered promiscuous mode [ 279.177241][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.189464][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.199648][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.210224][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.222073][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.252379][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.264184][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.282379][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.293132][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.303737][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.314527][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.326380][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.346280][T13386] team0: Port device team_slave_0 added [ 279.362050][T13386] team0: Port device team_slave_1 added [ 279.386395][T13233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.395518][T13233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.404239][T13233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.413348][T13233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.429516][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.436589][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.466000][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.489327][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.497775][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.524059][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.617148][T10673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.781560][T10673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.802083][T13427] syzkaller1: entered promiscuous mode [ 279.808182][T13427] syzkaller1: entered allmulticast mode [ 279.832854][T13386] hsr_slave_0: entered promiscuous mode [ 279.839457][T13386] hsr_slave_1: entered promiscuous mode [ 279.850746][T13386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.858736][T13386] Cannot create hsr debugfs directory [ 279.920514][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.932714][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.947616][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.959159][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.968322][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.977366][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.360026][T10673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.516802][T10673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.534847][T10677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.555303][T10677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.770080][T10677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.785559][T10677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.909665][T10673] bridge_slave_1: left allmulticast mode [ 280.925163][T10673] bridge_slave_1: left promiscuous mode [ 280.947687][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.968313][T10673] bridge_slave_0: left allmulticast mode [ 280.974058][T10673] bridge_slave_0: left promiscuous mode [ 280.981051][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.083739][ T5841] Bluetooth: hci2: command tx timeout [ 281.127994][T13466] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 281.145368][T13466] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 281.371748][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.382280][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.392596][T10673] bond0 (unregistering): Released all slaves [ 281.434211][T13467] netlink: 'syz.2.2055': attribute type 21 has an invalid length. [ 281.445439][T13467] netlink: 'syz.2.2055': attribute type 6 has an invalid length. [ 281.453202][T13467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2055'. [ 281.715491][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 281.869456][T13438] chnl_net:caif_netlink_parms(): no params data found [ 281.945784][T13386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.976804][T13386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.990984][T13386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.029641][T13386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.037138][ T5841] Bluetooth: hci0: command tx timeout [ 282.047554][T10673] hsr_slave_0: left promiscuous mode [ 282.053673][T10673] hsr_slave_1: left promiscuous mode [ 282.061349][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.068902][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.084106][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.091656][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.111159][T10673] veth1_macvtap: left promiscuous mode [ 282.122439][T10673] veth0_macvtap: left promiscuous mode [ 282.128166][T10673] veth1_vlan: left promiscuous mode [ 282.133399][T10673] veth0_vlan: left promiscuous mode [ 282.514308][T10673] team0 (unregistering): Port device team_slave_1 removed [ 282.559418][T10673] team0 (unregistering): Port device team_slave_0 removed [ 282.970331][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.978456][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.985820][T13438] bridge_slave_0: entered allmulticast mode [ 282.992432][T13438] bridge_slave_0: entered promiscuous mode [ 283.004432][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.011838][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.019347][T13438] bridge_slave_1: entered allmulticast mode [ 283.027940][T13438] bridge_slave_1: entered promiscuous mode [ 283.093190][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.105378][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.153059][T13438] team0: Port device team_slave_0 added [ 283.158893][ T5841] Bluetooth: hci2: command tx timeout [ 283.167336][T13438] team0: Port device team_slave_1 added [ 283.201941][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.209230][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.235872][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.248859][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.255957][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.282054][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.331631][T13438] hsr_slave_0: entered promiscuous mode [ 283.340293][T13438] hsr_slave_1: entered promiscuous mode [ 283.346934][T13438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.354498][T13438] Cannot create hsr debugfs directory [ 283.487544][T10673] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.518199][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.598425][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.630207][T13493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2059'. [ 283.654704][T10673] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.786701][T10673] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.875990][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.883138][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.928121][T10673] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.944356][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.962241][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.967257][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.971295][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.976335][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.986920][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.998452][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.005998][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.107297][T13508] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 284.115256][ T5841] Bluetooth: hci0: command tx timeout [ 284.188674][T13508] team0: Device ipvlan1 failed to register rx_handler [ 284.344492][T13438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.396345][T10673] bridge_slave_1: left allmulticast mode [ 284.402124][T10673] bridge_slave_1: left promiscuous mode [ 284.412449][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.435590][T10673] bridge_slave_0: left allmulticast mode [ 284.443420][T10673] bridge_slave_0: left promiscuous mode [ 284.454371][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.648858][T13527] can: request_module (can-proto-0) failed. [ 284.970376][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.981683][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.991718][T10673] bond0 (unregistering): Released all slaves [ 285.002462][T13438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.031776][T13438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.083057][T13438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.152952][T13386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.245916][ T5841] Bluetooth: hci2: command tx timeout [ 285.277926][T13503] chnl_net:caif_netlink_parms(): no params data found [ 285.537578][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.554347][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.572844][T13503] bridge_slave_0: entered allmulticast mode [ 285.580214][T13503] bridge_slave_0: entered promiscuous mode [ 285.612841][T13386] veth0_vlan: entered promiscuous mode [ 285.644056][T10673] hsr_slave_0: left promiscuous mode [ 285.654226][T10673] hsr_slave_1: left promiscuous mode [ 285.662081][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.669862][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.679478][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.692751][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.733269][T10673] veth1_macvtap: left promiscuous mode [ 285.739286][T10673] veth0_macvtap: left promiscuous mode [ 285.744906][T10673] veth1_vlan: left promiscuous mode [ 285.754385][T10673] veth0_vlan: left promiscuous mode [ 286.038796][ T5841] Bluetooth: hci3: command tx timeout [ 286.174093][T10673] team0 (unregistering): Port device team_slave_1 removed [ 286.198954][ T5841] Bluetooth: hci0: command tx timeout [ 286.227731][T10673] team0 (unregistering): Port device team_slave_0 removed [ 286.621011][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.629562][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.637764][T13503] bridge_slave_1: entered allmulticast mode [ 286.644458][T13503] bridge_slave_1: entered promiscuous mode [ 286.670175][T13386] veth1_vlan: entered promiscuous mode [ 286.733523][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.779617][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.895270][T13503] team0: Port device team_slave_0 added [ 286.921526][T13503] team0: Port device team_slave_1 added [ 287.003065][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.010480][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.038306][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.056886][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.063863][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.094834][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.113928][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.134352][T13386] veth0_macvtap: entered promiscuous mode [ 287.170115][T13386] veth1_macvtap: entered promiscuous mode [ 287.223585][T13503] hsr_slave_0: entered promiscuous mode [ 287.230718][T13503] hsr_slave_1: entered promiscuous mode [ 287.239981][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.249463][T13503] Cannot create hsr debugfs directory [ 287.270751][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.281340][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.292599][T13386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.300571][T13570] netem: change failed [ 287.324735][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.333787][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.348460][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.359180][T13386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.386250][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.393353][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.412303][T13386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.435153][T13386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.443912][T13386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.458415][T13386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.487866][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.495048][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.760965][T10681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.783284][T10681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.864190][T13582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.878022][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.898782][T13582] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2083'. [ 287.911557][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.940558][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.060447][T13438] veth0_vlan: entered promiscuous mode [ 288.115270][ T5841] Bluetooth: hci3: command tx timeout [ 288.172717][T13438] veth1_vlan: entered promiscuous mode [ 288.258168][T13603] x_tables: duplicate underflow at hook 1 [ 288.269684][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'. [ 288.279558][ T5841] Bluetooth: hci0: command tx timeout [ 288.297134][T13503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.317894][T13503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.328480][T13503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.362744][T13438] veth0_macvtap: entered promiscuous mode [ 288.370496][T13503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.391740][T13438] veth1_macvtap: entered promiscuous mode [ 288.442414][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.465075][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.484232][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.517485][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.541776][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 288.546383][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.622854][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.640265][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.658779][T13438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.669819][T13438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.681445][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.738050][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.769978][T13438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.779243][T13438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.788775][T13438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.797698][T13438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.847708][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.932394][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.959605][T10681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.971260][T10681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.007891][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.021161][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.028043][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.035991][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.051205][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.058372][T10677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.096692][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.128360][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.135520][T10677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.292273][ T2959] bridge_slave_1: left allmulticast mode [ 289.299608][ T2959] bridge_slave_1: left promiscuous mode [ 289.305787][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.317374][ T2959] bridge_slave_0: left allmulticast mode [ 289.323057][ T2959] bridge_slave_0: left promiscuous mode [ 289.329303][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.794628][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.804819][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.813375][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.821383][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.850085][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.860724][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.070082][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.081689][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.093100][ T2959] bond0 (unregistering): Released all slaves [ 290.150221][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.205054][ T5841] Bluetooth: hci3: command tx timeout [ 290.542833][T13627] chnl_net:caif_netlink_parms(): no params data found [ 290.561655][T13503] veth0_vlan: entered promiscuous mode [ 290.597085][T13503] veth1_vlan: entered promiscuous mode [ 290.626506][ T2959] hsr_slave_0: left promiscuous mode [ 290.632398][ T2959] hsr_slave_1: left promiscuous mode [ 290.638709][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.646833][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.654442][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.662049][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.684764][ T2959] veth1_macvtap: left promiscuous mode [ 290.690563][ T2959] veth0_macvtap: left promiscuous mode [ 290.696183][ T2959] veth1_vlan: left promiscuous mode [ 290.701441][ T2959] veth0_vlan: left promiscuous mode [ 291.067608][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'. [ 291.274758][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.286192][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.286300][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 291.303344][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.327201][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.336207][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.343524][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.382121][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 291.895391][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.930607][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.959124][ T5841] Bluetooth: hci0: command tx timeout [ 291.959332][T13627] bridge_slave_0: entered allmulticast mode [ 292.003438][T13627] bridge_slave_0: entered promiscuous mode [ 292.027610][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.034872][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.042656][T13627] bridge_slave_1: entered allmulticast mode [ 292.050221][T13627] bridge_slave_1: entered promiscuous mode [ 292.119145][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.206043][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.280757][ T5841] Bluetooth: hci3: command tx timeout [ 292.314118][T13503] veth0_macvtap: entered promiscuous mode [ 292.333980][T13627] team0: Port device team_slave_0 added [ 292.353983][T13627] team0: Port device team_slave_1 added [ 292.385864][T13503] veth1_macvtap: entered promiscuous mode [ 292.441545][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.448869][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.475492][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.487022][T13670] tipc: Resetting bearer [ 292.493600][T13670] ------------[ cut here ]------------ [ 292.499489][T13670] WARNING: CPU: 1 PID: 13670 at net/mac80211/key.c:1162 ieee80211_free_keys+0x567/0x680 [ 292.509362][T13670] Modules linked in: [ 292.513314][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.2.2101 Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 292.524250][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.534500][T13670] RIP: 0010:ieee80211_free_keys+0x567/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.540439][T13670] Code: 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 f8 49 3f f6 90 0f 0b 90 e9 17 fc ff ff e8 ea 49 3f f6 90 <0f> 0b 90 4c 8b 64 24 20 e9 77 fe ff ff e8 d7 49 3f f6 e9 2d fe ff [ 292.560171][T13670] RSP: 0018:ffffc900034a7460 EFLAGS: 00010287 [ 292.566358][T13670] RAX: ffffffff8b8270a6 RBX: 0000000000000001 RCX: 0000000000080000 [ 292.574361][T13670] RDX: ffffc9000cda9000 RSI: 0000000000002d9e RDI: 0000000000002d9f [ 292.582437][T13670] RBP: ffffc900034a7530 R08: ffffffff8b826ea7 R09: 1ffff92000694e40 [ 292.590502][T13670] R10: dffffc0000000000 R11: fffff52000694e41 R12: 0000000000000002 [ 292.598817][T13670] R13: ffff88801bb18d80 R14: 1ffff1100376353a R15: dffffc0000000000 [ 292.607017][T13670] FS: 00007f76c7e746c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 292.616063][T13670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.622676][T13670] CR2: 00007f5c61995fb8 CR3: 00000000305e0000 CR4: 00000000003526f0 [ 292.630765][T13670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.638832][T13670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.646931][T13670] Call Trace: [ 292.650230][T13670] [ 292.653183][T13670] ? __warn+0x165/0x4d0 [ 292.657441][T13670] ? ieee80211_free_keys+0x567/0x680 [ 292.662761][T13670] ? report_bug+0x2b3/0x500 [ 292.667408][T13670] ? ieee80211_free_keys+0x567/0x680 [ 292.672732][T13670] ? handle_bug+0x60/0x90 [ 292.677530][T13670] ? exc_invalid_op+0x1a/0x50 [ 292.682240][T13670] ? asm_exc_invalid_op+0x1a/0x20 [ 292.687548][T13670] ? ieee80211_free_keys+0x367/0x680 [ 292.692865][T13670] ? ieee80211_free_keys+0x566/0x680 [ 292.698256][T13670] ? ieee80211_free_keys+0x567/0x680 [ 292.703571][T13670] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 292.709589][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 292.714816][T13670] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 292.720578][T13670] ? wiphy_work_cancel+0x1f0/0x3e0 [ 292.725756][T13670] ieee80211_do_stop+0x1085/0x2380 [ 292.730915][T13670] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 292.736508][T13670] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 292.742429][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 292.747741][T13670] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.754116][T13670] ? wiphy_work_cancel+0x1f0/0x3e0 [ 292.759687][T13670] ieee80211_stop+0x43b/0x490 [ 292.764495][T13670] ? __pfx_ieee80211_stop+0x10/0x10 [ 292.769779][T13670] __dev_close_many+0x216/0x350 [ 292.774664][T13670] ? __pfx___dev_close_many+0x10/0x10 [ 292.780105][T13670] ? dev_set_rx_mode+0x233/0x2e0 [ 292.785083][T13670] __dev_change_flags+0x30e/0x6f0 [ 292.790142][T13670] ? __pfx___dev_change_flags+0x10/0x10 [ 292.796218][T13670] dev_change_flags+0x8b/0x1a0 [ 292.801026][T13670] devinet_ioctl+0xea2/0x1d80 [ 292.805773][T13670] ? __pfx_devinet_ioctl+0x10/0x10 [ 292.810889][T13670] ? get_user_ifreq+0x1bb/0x200 [ 292.815776][T13670] inet_ioctl+0x3d7/0x4f0 [ 292.820100][T13670] ? __pfx_inet_ioctl+0x10/0x10 [ 292.824985][T13670] ? tomoyo_path_number_perm+0x5dd/0x770 [ 292.830649][T13670] ? __lock_acquire+0x1397/0x2100 [ 292.835850][T13670] sock_do_ioctl+0x158/0x460 [ 292.840453][T13670] ? __pfx_sock_do_ioctl+0x10/0x10 [ 292.845650][T13670] sock_ioctl+0x626/0x8e0 [ 292.849976][T13670] ? __pfx_sock_ioctl+0x10/0x10 [ 292.854858][T13670] ? __fget_files+0x2a/0x410 [ 292.859630][T13670] ? __fget_files+0x2a/0x410 [ 292.864242][T13670] ? __pfx_sock_ioctl+0x10/0x10 [ 292.869189][T13670] __se_sys_ioctl+0xf5/0x170 [ 292.873801][T13670] do_syscall_64+0xf3/0x230 [ 292.878377][T13670] ? clear_bhb_loop+0x35/0x90 [ 292.883053][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.888980][T13670] RIP: 0033:0x7f76c6f8d169 [ 292.893397][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.913109][T13670] RSP: 002b:00007f76c7e74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.921680][T13670] RAX: ffffffffffffffda RBX: 00007f76c71a5fa0 RCX: 00007f76c6f8d169 [ 292.929764][T13670] RDX: 0000400000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 292.937799][T13670] RBP: 00007f76c700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.945835][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.953794][T13670] R13: 0000000000000000 R14: 00007f76c71a5fa0 R15: 00007fff35992678 [ 292.961863][T13670] [ 292.964905][T13670] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.972196][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.2.2101 Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 292.982959][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.993016][T13670] Call Trace: [ 292.996295][T13670] [ 292.999220][T13670] dump_stack_lvl+0x241/0x360 [ 293.003899][T13670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.009088][T13670] ? __pfx__printk+0x10/0x10 [ 293.013669][T13670] ? _printk+0xd5/0x120 [ 293.017817][T13670] ? __init_begin+0x41000/0x41000 [ 293.022842][T13670] ? vscnprintf+0x5d/0x90 [ 293.027164][T13670] panic+0x349/0x880 [ 293.031050][T13670] ? __warn+0x174/0x4d0 [ 293.035202][T13670] ? __pfx_panic+0x10/0x10 [ 293.039617][T13670] __warn+0x344/0x4d0 [ 293.043596][T13670] ? ieee80211_free_keys+0x567/0x680 [ 293.048875][T13670] report_bug+0x2b3/0x500 [ 293.053197][T13670] ? ieee80211_free_keys+0x567/0x680 [ 293.058475][T13670] handle_bug+0x60/0x90 [ 293.062629][T13670] exc_invalid_op+0x1a/0x50 [ 293.067128][T13670] asm_exc_invalid_op+0x1a/0x20 [ 293.071972][T13670] RIP: 0010:ieee80211_free_keys+0x567/0x680 [ 293.077875][T13670] Code: 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 f8 49 3f f6 90 0f 0b 90 e9 17 fc ff ff e8 ea 49 3f f6 90 <0f> 0b 90 4c 8b 64 24 20 e9 77 fe ff ff e8 d7 49 3f f6 e9 2d fe ff [ 293.097472][T13670] RSP: 0018:ffffc900034a7460 EFLAGS: 00010287 [ 293.103535][T13670] RAX: ffffffff8b8270a6 RBX: 0000000000000001 RCX: 0000000000080000 [ 293.111499][T13670] RDX: ffffc9000cda9000 RSI: 0000000000002d9e RDI: 0000000000002d9f [ 293.119464][T13670] RBP: ffffc900034a7530 R08: ffffffff8b826ea7 R09: 1ffff92000694e40 [ 293.127428][T13670] R10: dffffc0000000000 R11: fffff52000694e41 R12: 0000000000000002 [ 293.135387][T13670] R13: ffff88801bb18d80 R14: 1ffff1100376353a R15: dffffc0000000000 [ 293.143355][T13670] ? ieee80211_free_keys+0x367/0x680 [ 293.148636][T13670] ? ieee80211_free_keys+0x566/0x680 [ 293.153919][T13670] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 293.159812][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 293.165008][T13670] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 293.170654][T13670] ? wiphy_work_cancel+0x1f0/0x3e0 [ 293.175770][T13670] ieee80211_do_stop+0x1085/0x2380 [ 293.180891][T13670] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 293.186362][T13670] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 293.192679][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 293.197885][T13670] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.204205][T13670] ? wiphy_work_cancel+0x1f0/0x3e0 [ 293.209312][T13670] ieee80211_stop+0x43b/0x490 [ 293.213985][T13670] ? __pfx_ieee80211_stop+0x10/0x10 [ 293.219176][T13670] __dev_close_many+0x216/0x350 [ 293.224022][T13670] ? __pfx___dev_close_many+0x10/0x10 [ 293.229389][T13670] ? dev_set_rx_mode+0x233/0x2e0 [ 293.234323][T13670] __dev_change_flags+0x30e/0x6f0 [ 293.239350][T13670] ? __pfx___dev_change_flags+0x10/0x10 [ 293.244895][T13670] dev_change_flags+0x8b/0x1a0 [ 293.249665][T13670] devinet_ioctl+0xea2/0x1d80 [ 293.254339][T13670] ? __pfx_devinet_ioctl+0x10/0x10 [ 293.259449][T13670] ? get_user_ifreq+0x1bb/0x200 [ 293.264290][T13670] inet_ioctl+0x3d7/0x4f0 [ 293.268621][T13670] ? __pfx_inet_ioctl+0x10/0x10 [ 293.273471][T13670] ? tomoyo_path_number_perm+0x5dd/0x770 [ 293.279109][T13670] ? __lock_acquire+0x1397/0x2100 [ 293.284140][T13670] sock_do_ioctl+0x158/0x460 [ 293.288725][T13670] ? __pfx_sock_do_ioctl+0x10/0x10 [ 293.293840][T13670] sock_ioctl+0x626/0x8e0 [ 293.298161][T13670] ? __pfx_sock_ioctl+0x10/0x10 [ 293.303001][T13670] ? __fget_files+0x2a/0x410 [ 293.307588][T13670] ? __fget_files+0x2a/0x410 [ 293.312178][T13670] ? __pfx_sock_ioctl+0x10/0x10 [ 293.317035][T13670] __se_sys_ioctl+0xf5/0x170 [ 293.321627][T13670] do_syscall_64+0xf3/0x230 [ 293.326127][T13670] ? clear_bhb_loop+0x35/0x90 [ 293.330804][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.336691][T13670] RIP: 0033:0x7f76c6f8d169 [ 293.341096][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.360691][T13670] RSP: 002b:00007f76c7e74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.369100][T13670] RAX: ffffffffffffffda RBX: 00007f76c71a5fa0 RCX: 00007f76c6f8d169 [ 293.377071][T13670] RDX: 0000400000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 293.385034][T13670] RBP: 00007f76c700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.393000][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.400962][T13670] R13: 0000000000000000 R14: 00007f76c71a5fa0 R15: 00007fff35992678 [ 293.408936][T13670] [ 293.412095][T13670] Kernel Offset: disabled [ 293.416480][T13670] Rebooting in 86400 seconds..