last executing test programs: 2m3.42006832s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 2m2.25398646s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m59.06235634s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 1m41.812233157s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 1m40.235641446s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m36.669088766s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 1m21.981603332s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m20.735975868s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 1m17.549928168s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007300ffb1000000006926000000000000bf67000000000000150002000fff52004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8473e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b196b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 1m4.09486767s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m2.727575157s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 58.302134959s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 51.230728007s ago: executing program 0 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r2, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="5a7fea957f6931fb1d9493ea11160eed9f89f61c3bb216d40a470a169aed93528837d716e29baee6ed59eaf876d174e45cc60bad00d31d016fa1697dc8", 0x3d}, {&(0x7f0000000080)='@T8', 0x3}, {&(0x7f0000000180)="879128d17dfee914d0cf9fc29d1c15fadaa65656e5d7456c03e00aa9485acb65ffa6fc9f77d4a408dbfada8adc328bdae597ace784d377653fd4048d8fc374c8", 0x40}, {&(0x7f00000004c0)="f362970f3a8fd308070eadf3e0865579be7add133a9e2faec0febd64b2c4167ae6d3c0108c9c0e36e97c0e0651a4fe2131b8a9d6b5b0a67306117c8e3feaacd6c05fd81f537909c3ae6228b7fa947b71ba0f4c870a021fc711c87400696996d0708925e0530e95dc72aed3819d536c2cb0a52b2d9ce73e07421ad61eea6a79477dac93d88f95a7cdd02faf0313959a1d1b937be22bb4b7c8091917cec715c218a046f7afce6cf05a0f527d14ae1403b4f99aa34e97b7244afef26d8ae801a71a19341be1f56de3e6d207a19cb1fe2f88ec5b1fdddb5bca", 0xd7}], 0x4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x10000000) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 50.938353512s ago: executing program 0 (id=1895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100003080000d3fa5308000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006000900ff000000"], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r9 = socket(0x10, 0x2, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r10, 0x1}, 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r11, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r12, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r12, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) write$tun(r5, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0xc}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 50.06794966s ago: executing program 0 (id=1898): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0fe8a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c11650300000000000000649c1cfd138d5521f9451759c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3cc2367a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb031e7743f541cd0aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a1420cfd9e1f84d8271ff6606b2a44bc47b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b207000000000000001d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c050022a961546ed5365470fa503c1fac35b903e10c62bebc943c17ff1432d0881406bc176e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffff06aabca77e64c988dd413230d60a7f7681314df1c2a0f4249c7be5329ac624fb2997df9e6867053a4b239d17ba83b498812a8f57b9b52ebc8b1fe4382601bff5f5dbcd3d50a065bcc67943ba05f3a5366ca6d291f931d9cde41bdabdae4717317621abaa7179e2d44f8ebca654f9e4571963a3f198769e309fc99f6320f47140bb9a5e359804c2653d19462139d5c505dc6e4f178c9a098b51333cccfe0d2eb41dd079de3cfa60365787ca4b8eb920a06969c5da49fc87d37f18205f4b5c0f44d16a2d9f2bc894dfd78e819e54e79eb5ceb91451149e099e47b94fd53ed2dd33d43d8c681e027175e8d281ba4ac708543bc3f9e8e35532b7b90eee5df24d5ec9cd4e33a79f5b123cf15edeb8b0ee7cafbfebb907ccee427f3616d6fd9015432977a55aa00000000700"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x29a83a768e447add) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 49.954228415s ago: executing program 0 (id=1899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0xffffffffffffff22}], 0x1, 0x0, 0x2}, 0x40000100) 40.508221802s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.33680957s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 32.144767567s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 29.675647721s ago: executing program 0 (id=1899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0xffffffffffffff22}], 0x1, 0x0, 0x2}, 0x40000100) 19.023481754s ago: executing program 2 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.82950092s ago: executing program 1 (id=836): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000100)=""/35, 0x23}], 0x8}, 0x2a}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000002cc0)}, 0x5b}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/20, 0x14}, {&(0x7f0000002dc0)=""/8, 0x8}], 0x2, &(0x7f0000002e40)=""/30, 0x1e}}], 0x3, 0x1, &(0x7f0000002f40)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000f7b4afd0349fb3b7b7bfb580449e174f22c257e83f91e7baa0cd67000000000000ac000000", @ANYRES16=r8, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, 0x0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r12}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r14, 0x8b2a, &(0x7f0000000040)) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 9.062687112s ago: executing program 0 (id=1899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0xffffffffffffff22}], 0x1, 0x0, 0x2}, 0x40000100) 4.050628344s ago: executing program 3 (id=1990): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001000130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e240000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 3.960416062s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) 2.069425862s ago: executing program 3 (id=1991): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000600)=""/274, 0x112}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000dc0)=""/4083, 0xff3}, {&(0x7f0000000a00)=""/223, 0xdf}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) 1.01840194s ago: executing program 3 (id=1992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 168.555231ms ago: executing program 3 (id=1993): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c840}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x1, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 34.686196ms ago: executing program 3 (id=1994): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", '\x00\x00\x00\x00\a\x00'}, 0x38) (async) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) shutdown(r2, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000001080)="f217a8ea7bc273cfaeab968508180a33a845233417ffab89e13090cefa966a76fdaee47d0b7a178b3fffed", 0x2b, 0x0, &(0x7f0000000040)={0x11, 0x17, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000001100)=[@in={0x2, 0x4620, @private=0xa010101}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r6, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000001140)=""/4096, &(0x7f0000002140)=0x1000) (async) setsockopt$inet6_int(r8, 0x29, 0x48, 0x0, 0x0) (async) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)=@ipv6_getroute={0x24, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0x80, 0x5, 0x0, 0x2, 0xfe, 0x2, 0x1e00}, [@RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008004) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "5b834727082ebf7094d412e74de02dd6"}) 0s ago: executing program 3 (id=1995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @multicast1}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_BROADCAST={0x0, 0x2, @multicast}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "2cb2482266c0f47ff486091e48b6a875e5"}]}, 0xfffffefd}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x20004010) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 0:50:50:50 [ 395.432458][T13273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.503121][ T9755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.518810][T13273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.537728][ T9755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.553396][T13273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.571510][T13273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.580888][T13273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.929592][T13349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.117976][ T3912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.149638][ T3912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.331359][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.550898][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.640945][ T9739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.705375][ T9739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.761425][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.879970][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.031692][T13349] veth0_vlan: entered promiscuous mode [ 397.089578][T13349] veth1_vlan: entered promiscuous mode [ 397.249469][T13349] veth0_macvtap: entered promiscuous mode [ 397.258315][ T36] bridge_slave_1: left allmulticast mode [ 397.266488][ T36] bridge_slave_1: left promiscuous mode [ 397.272333][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.283694][ T36] bridge_slave_0: left allmulticast mode [ 397.293944][ T36] bridge_slave_0: left promiscuous mode [ 397.303487][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.250559][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.269490][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.295044][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.319516][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.328440][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.337162][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.359871][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.389132][ T36] bond0 (unregistering): Released all slaves [ 398.431441][T13349] veth1_macvtap: entered promiscuous mode [ 398.482472][T13349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.527827][T13349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.600334][T13349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.609459][T13349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.618337][T13349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.627241][T13349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.771125][T13754] validate_nla: 31 callbacks suppressed [ 398.771146][T13754] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 398.806103][T13757] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 398.824342][T13757] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1740'. [ 398.859286][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 398.884535][ T36] hsr_slave_0: left promiscuous mode [ 398.895127][ T36] hsr_slave_1: left promiscuous mode [ 398.901103][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.917208][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.930914][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.944083][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.001503][ T36] veth1_macvtap: left promiscuous mode [ 399.016126][ T36] veth0_macvtap: left promiscuous mode [ 399.027543][ T36] veth1_vlan: left promiscuous mode [ 399.034249][ T36] veth0_vlan: left promiscuous mode [ 399.319992][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.344207][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.352780][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.384347][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.392252][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.688953][ T36] team0 (unregistering): Port device team_slave_1 removed [ 399.732822][ T36] team0 (unregistering): Port device team_slave_0 removed [ 400.153436][T13754] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 400.428799][ T5849] Bluetooth: hci1: command tx timeout [ 400.497185][ T9739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.529003][ T9739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.703323][ T9182] tipc: Subscription rejected, illegal request [ 400.715112][ T9755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.722986][ T9755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.796492][T13749] chnl_net:caif_netlink_parms(): no params data found [ 401.030501][T13791] tipc: Enabled bearer , priority 10 [ 401.365832][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.373041][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.404731][T13749] bridge_slave_0: entered allmulticast mode [ 401.423058][T13749] bridge_slave_0: entered promiscuous mode [ 401.464267][ T5849] Bluetooth: hci2: command tx timeout [ 401.508352][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.622271][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.634336][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.644678][T13749] bridge_slave_1: entered allmulticast mode [ 401.665486][T13749] bridge_slave_1: entered promiscuous mode [ 401.726225][T13764] chnl_net:caif_netlink_parms(): no params data found [ 401.746125][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.774842][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.802277][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.850661][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.908488][T13749] team0: Port device team_slave_0 added [ 401.945340][T13749] team0: Port device team_slave_1 added [ 402.075487][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.093001][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.100152][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.129303][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.144074][T13764] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.151268][T13764] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.153526][ T5893] tipc: Node number set to 3341148054 [ 402.159823][T13764] bridge_slave_0: entered allmulticast mode [ 402.173540][T13764] bridge_slave_0: entered promiscuous mode [ 402.182449][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.193840][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.221647][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.248919][T13764] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.264145][T13764] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.272690][T13764] bridge_slave_1: entered allmulticast mode [ 402.284198][T13764] bridge_slave_1: entered promiscuous mode [ 402.420218][T13749] hsr_slave_0: entered promiscuous mode [ 402.432629][T13749] hsr_slave_1: entered promiscuous mode [ 402.475192][T13764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.507631][ T5849] Bluetooth: hci1: command tx timeout [ 402.517422][T13764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.794205][T13764] team0: Port device team_slave_0 added [ 402.845859][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.868217][T13764] team0: Port device team_slave_1 added [ 403.081129][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 403.083347][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.154923][T13764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.179900][T13764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.224235][T13764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.247934][T13764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.264877][T13764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.300076][T13764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.511986][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.523076][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.536704][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.547467][ T5833] Bluetooth: hci2: command tx timeout [ 403.552990][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.563166][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.572308][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.676299][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.788688][T13764] hsr_slave_0: entered promiscuous mode [ 403.795955][T13764] hsr_slave_1: entered promiscuous mode [ 403.802558][T13764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.813096][T13764] Cannot create hsr debugfs directory [ 404.203072][T13867] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 404.594242][ T51] Bluetooth: hci1: command tx timeout [ 404.909650][ T36] bridge_slave_1: left allmulticast mode [ 404.920799][ T36] bridge_slave_1: left promiscuous mode [ 404.928962][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.939553][ T36] bridge_slave_0: left allmulticast mode [ 404.945627][ T36] bridge_slave_0: left promiscuous mode [ 404.951591][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.966706][ T36] bridge_slave_1: left allmulticast mode [ 404.972557][ T36] bridge_slave_1: left promiscuous mode [ 404.978616][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.989224][ T36] bridge_slave_0: left allmulticast mode [ 404.996228][ T36] bridge_slave_0: left promiscuous mode [ 405.002155][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.545473][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.559509][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.570569][ T36] bond0 (unregistering): Released all slaves [ 405.627158][ T51] Bluetooth: hci3: command tx timeout [ 405.632941][ T5849] Bluetooth: hci2: command tx timeout [ 405.911693][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.923158][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.934022][ T36] bond0 (unregistering): Released all slaves [ 406.446507][T13915] netlink: 'syz.3.1761': attribute type 2 has an invalid length. [ 406.664073][ T5849] Bluetooth: hci1: command tx timeout [ 406.672694][T13918] x_tables: duplicate underflow at hook 2 [ 406.833393][T13749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 406.897568][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 406.944049][T13749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.025437][T13749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.173255][ T36] hsr_slave_0: left promiscuous mode [ 407.201384][ T36] hsr_slave_1: left promiscuous mode [ 407.231552][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.244689][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.263014][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.283458][T13941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 407.284342][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.339680][ T36] hsr_slave_0: left promiscuous mode [ 407.363416][ T36] hsr_slave_1: left promiscuous mode [ 407.385751][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.393334][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.411664][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.421533][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.471674][ T36] veth1_macvtap: left promiscuous mode [ 407.477610][ T36] veth0_macvtap: left promiscuous mode [ 407.483495][ T36] veth1_vlan: left promiscuous mode [ 407.489865][ T36] veth0_vlan: left promiscuous mode [ 407.496994][ T36] veth1_macvtap: left promiscuous mode [ 407.502654][ T36] veth0_macvtap: left promiscuous mode [ 407.508981][ T36] veth1_vlan: left promiscuous mode [ 407.514509][ T36] veth0_vlan: left promiscuous mode [ 407.708562][ T5849] Bluetooth: hci2: command tx timeout [ 407.708570][ T51] Bluetooth: hci3: command tx timeout [ 408.606531][ T36] team0 (unregistering): Port device team_slave_1 removed [ 408.653889][ T36] team0 (unregistering): Port device team_slave_0 removed [ 409.784242][ T51] Bluetooth: hci3: command tx timeout [ 409.913079][ T36] team0 (unregistering): Port device team_slave_1 removed [ 409.991485][ T36] team0 (unregistering): Port device team_slave_0 removed [ 410.504983][T13749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.523648][T13843] chnl_net:caif_netlink_parms(): no params data found [ 410.540730][T13944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.644282][T14002] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 410.722353][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 410.738284][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 411.125149][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.132538][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.142252][T13843] bridge_slave_0: entered allmulticast mode [ 411.151035][T13843] bridge_slave_0: entered promiscuous mode [ 411.159920][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.167285][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.174840][T13843] bridge_slave_1: entered allmulticast mode [ 411.182329][T13843] bridge_slave_1: entered promiscuous mode [ 411.303710][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.329823][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.395573][T13843] team0: Port device team_slave_0 added [ 411.405588][T13843] team0: Port device team_slave_1 added [ 411.413595][T13764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.470842][T13764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.484758][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.492793][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.520537][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.532796][T13764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.548898][T13764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.583087][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.597017][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.630299][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.782295][T13843] hsr_slave_0: entered promiscuous mode [ 411.789324][T13843] hsr_slave_1: entered promiscuous mode [ 411.796303][T13843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.805119][T13843] Cannot create hsr debugfs directory [ 411.816831][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.828111][T14034] netlink: 'syz.0.1773': attribute type 12 has an invalid length. [ 411.865316][ T51] Bluetooth: hci3: command tx timeout [ 412.129678][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.212213][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.219501][ T9755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.246772][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.254057][ T9755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.342325][T13764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.449563][T13764] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.531584][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.538875][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.640829][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.648231][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.058026][T13843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.137816][T13843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.205154][T13843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.247862][T13843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.512496][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.636923][T13764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.807939][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 413.818482][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 413.845953][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.858495][T13749] veth0_vlan: entered promiscuous mode [ 413.918559][T13764] veth0_vlan: entered promiscuous mode [ 413.957260][T13843] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.998469][T13764] veth1_vlan: entered promiscuous mode [ 414.038563][ T3912] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.045868][ T3912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.088322][T13749] veth1_vlan: entered promiscuous mode [ 414.121551][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.128820][ T9755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.292305][T14110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.310848][T14110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.357139][T13764] veth0_macvtap: entered promiscuous mode [ 414.502619][T14110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.521407][T14110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.547461][T13764] veth1_macvtap: entered promiscuous mode [ 414.593330][T13749] veth0_macvtap: entered promiscuous mode [ 414.641846][T13749] veth1_macvtap: entered promiscuous mode [ 414.688447][T14110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.706251][T14110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.789440][T13764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.847874][T14110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.870523][T14110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.895932][T14125] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 414.969903][T13764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.003304][T13764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.015800][T13764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.025346][T13764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.045193][T13764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.101123][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.187603][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.262900][ T9754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.274418][ T9754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.276568][T13749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.294616][T13749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.303659][T13749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.314091][T13749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.345603][T14110] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.355468][T14110] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.403012][T14110] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.412048][T14110] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.456879][T14110] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.465678][T14110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.485141][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.508067][T14110] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.520704][T14110] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.534987][ T3912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.543535][ T3912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.692080][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.724191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.058152][ T9182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.153129][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.195725][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.266806][ T9182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.463229][ T9182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.607577][ T9182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.695615][T13843] veth0_vlan: entered promiscuous mode [ 416.723814][T13843] veth1_vlan: entered promiscuous mode [ 416.917621][T13843] veth0_macvtap: entered promiscuous mode [ 416.969957][T13843] veth1_macvtap: entered promiscuous mode [ 417.008798][ T9182] bridge_slave_1: left allmulticast mode [ 417.016802][ T9182] bridge_slave_1: left promiscuous mode [ 417.022663][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.035986][ T9182] bridge_slave_0: left allmulticast mode [ 417.041695][ T9182] bridge_slave_0: left promiscuous mode [ 417.048698][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.512255][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.529822][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.546977][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.581868][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.582237][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.600972][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.609188][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.623621][ T9182] bond0 (unregistering): Released all slaves [ 417.661585][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.689289][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.701028][T13843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.711484][T13843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.720616][T13843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.729818][T13843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.035493][ T9182] hsr_slave_0: left promiscuous mode [ 418.041574][ T9182] hsr_slave_1: left promiscuous mode [ 418.048100][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.057107][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.066502][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.074267][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.095213][ T9182] veth1_macvtap: left promiscuous mode [ 418.100816][ T9182] veth0_macvtap: left promiscuous mode [ 418.107589][ T9182] veth1_vlan: left promiscuous mode [ 418.112937][ T9182] veth0_vlan: left promiscuous mode [ 418.404785][T14169] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1792'. [ 418.780492][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.800775][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 418.801536][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.829034][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.837806][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.858798][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.871820][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 419.309314][ T9755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.331604][ T9755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.500979][ T3912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.535828][ T3912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.639677][ T5849] Bluetooth: hci1: command tx timeout [ 419.665776][T14178] SET target dimension over the limit! [ 420.140308][T14162] chnl_net:caif_netlink_parms(): no params data found [ 420.736894][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.753117][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.760867][T14162] bridge_slave_0: entered allmulticast mode [ 420.775452][T14162] bridge_slave_0: entered promiscuous mode [ 420.791715][T14172] chnl_net:caif_netlink_parms(): no params data found [ 420.836318][ T9182] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.853022][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.865071][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.872324][T14162] bridge_slave_1: entered allmulticast mode [ 420.880094][T14162] bridge_slave_1: entered promiscuous mode [ 420.905429][ T5849] Bluetooth: hci2: command tx timeout [ 420.937860][ T9182] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.993620][ T9182] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.037750][T14162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.050154][T14162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.112680][ T9182] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.157207][T14162] team0: Port device team_slave_0 added [ 421.186599][T14162] team0: Port device team_slave_1 added [ 421.223934][T14172] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.231502][T14172] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.239277][T14172] bridge_slave_0: entered allmulticast mode [ 421.247065][T14172] bridge_slave_0: entered promiscuous mode [ 421.272406][T14162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.280141][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.307579][T14162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.322299][T14162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.330261][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.356510][T14162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.375632][T14172] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.382875][T14172] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.390441][T14172] bridge_slave_1: entered allmulticast mode [ 421.398156][T14172] bridge_slave_1: entered promiscuous mode [ 421.480584][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.496426][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.526804][T14162] hsr_slave_0: entered promiscuous mode [ 421.533179][T14162] hsr_slave_1: entered promiscuous mode [ 421.545509][T14162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.553153][T14162] Cannot create hsr debugfs directory [ 421.674686][T14172] team0: Port device team_slave_0 added [ 421.701564][T14172] team0: Port device team_slave_1 added [ 421.708762][ T5849] Bluetooth: hci1: command tx timeout [ 421.817274][ T9182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.873760][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.887609][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.920903][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.955028][ T9182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.978391][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.986229][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.012646][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.072932][ T9182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.379448][ T9182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.819400][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.829609][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.838600][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.847688][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.858903][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.940314][T14172] hsr_slave_0: entered promiscuous mode [ 422.949114][T14172] hsr_slave_1: entered promiscuous mode [ 422.980486][T14172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.984325][ T51] Bluetooth: hci2: command tx timeout [ 423.000065][T14172] Cannot create hsr debugfs directory [ 423.142115][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1805'. [ 423.479034][ T9182] bridge_slave_1: left allmulticast mode [ 423.489994][ T9182] bridge_slave_1: left promiscuous mode [ 423.500425][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.518121][ T9182] bridge_slave_0: left allmulticast mode [ 423.523912][ T9182] bridge_slave_0: left promiscuous mode [ 423.536890][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.558727][ T9182] bridge_slave_1: left allmulticast mode [ 423.569400][ T9182] bridge_slave_1: left promiscuous mode [ 423.578580][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.593703][ T9182] bridge_slave_0: left allmulticast mode [ 423.603020][ T9182] bridge_slave_0: left promiscuous mode [ 423.609635][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.785211][ T51] Bluetooth: hci1: command tx timeout [ 424.088365][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.100644][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.115437][ T9182] bond0 (unregistering): Released all slaves [ 424.428904][ T9182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.442655][ T9182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.453357][ T9182] bond0 (unregistering): Released all slaves [ 424.609645][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 424.915111][ T51] Bluetooth: hci3: command tx timeout [ 425.066190][ T51] Bluetooth: hci2: command tx timeout [ 425.092240][T14284] bond5: entered promiscuous mode [ 425.097986][T14284] bond5: entered allmulticast mode [ 425.103735][T14284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.253242][T14162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.278668][T14162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.448695][T14162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.552534][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 425.562577][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 425.596763][T14162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.621088][T14308] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 425.852644][T14247] chnl_net:caif_netlink_parms(): no params data found [ 425.864294][ T51] Bluetooth: hci1: command tx timeout [ 425.960855][ T9182] hsr_slave_0: left promiscuous mode [ 425.976065][ T9182] hsr_slave_1: left promiscuous mode [ 425.990976][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.013170][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.045305][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.052799][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.093537][ T9182] hsr_slave_0: left promiscuous mode [ 426.116269][ T9182] hsr_slave_1: left promiscuous mode [ 426.122493][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.130948][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.148475][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.162756][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.170519][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 426.360506][ T9182] veth1_macvtap: left promiscuous mode [ 426.369709][ T9182] veth0_macvtap: left promiscuous mode [ 426.394245][ T9182] veth1_vlan: left promiscuous mode [ 426.399748][ T9182] veth0_vlan: left promiscuous mode [ 426.452183][ T9182] veth1_macvtap: left promiscuous mode [ 426.468268][ T9182] veth0_macvtap: left promiscuous mode [ 426.484490][ T9182] veth1_vlan: left promiscuous mode [ 426.489956][ T9182] veth0_vlan: left promiscuous mode [ 426.553447][T14347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1823'. [ 426.609492][T14350] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 426.986772][ T51] Bluetooth: hci3: command tx timeout [ 427.144412][ T51] Bluetooth: hci2: command tx timeout [ 427.212245][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 427.262845][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 428.059181][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 428.109493][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 428.926475][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.933810][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.941215][T14247] bridge_slave_0: entered allmulticast mode [ 428.957860][T14247] bridge_slave_0: entered promiscuous mode [ 429.004550][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.024240][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.031539][T14247] bridge_slave_1: entered allmulticast mode [ 429.042685][T14247] bridge_slave_1: entered promiscuous mode [ 429.076178][ T51] Bluetooth: hci3: command tx timeout [ 429.219352][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.259002][T14373] netlink: 'syz.0.1829': attribute type 5 has an invalid length. [ 429.288827][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.379842][T14247] team0: Port device team_slave_0 added [ 429.399297][T14247] team0: Port device team_slave_1 added [ 429.480588][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 429.619190][T14172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.650643][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.660789][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.688209][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.721788][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.738071][T14172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.770756][T14172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.791992][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.809084][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.861149][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.943731][T14172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 430.043379][T14247] hsr_slave_0: entered promiscuous mode [ 430.059756][T14247] hsr_slave_1: entered promiscuous mode [ 430.117504][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.292086][ T3912] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.299620][ T3912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.388893][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.396162][ T9755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.468630][T14416] dvmrp0: entered allmulticast mode [ 430.915693][T14430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1838'. [ 430.944255][T14430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1838'. [ 431.079848][T14172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.147720][ T51] Bluetooth: hci3: command tx timeout [ 431.223567][T14172] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.351194][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.358420][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.413147][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.420419][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.475912][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.566834][T14458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1844'. [ 431.685120][T14162] veth0_vlan: entered promiscuous mode [ 431.736323][T14247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.749218][T14247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.767709][T14460] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 431.790439][T14162] veth1_vlan: entered promiscuous mode [ 431.799888][T14247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.813387][T14247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.828786][T14460] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1845'. [ 432.009527][T14162] veth0_macvtap: entered promiscuous mode [ 432.039825][T14162] veth1_macvtap: entered promiscuous mode [ 432.176076][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.223829][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.288288][T14162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.308582][T14162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.320755][T14162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.337363][T14162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.438059][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.458965][T14172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.558417][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.595301][T14481] syzkaller0: entered promiscuous mode [ 432.602051][T14481] syzkaller0: entered allmulticast mode [ 432.643014][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.650232][ T9754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.721491][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.728693][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.760628][ T3912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.770670][ T3912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.843362][T14172] veth0_vlan: entered promiscuous mode [ 432.925616][T14172] veth1_vlan: entered promiscuous mode [ 432.967568][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.007607][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.058133][T14172] veth0_macvtap: entered promiscuous mode [ 433.105639][T14172] veth1_macvtap: entered promiscuous mode [ 433.186228][T14501] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1850'. [ 433.227007][T14172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.246216][T14501] nbd: illegal input index 61504 [ 433.267325][T14172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.296720][T14172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.349225][T14172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.374660][T14172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.383528][T14172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.732679][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.851774][ T3912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.972763][ T9755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.994250][ T9755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.072876][ T3912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.168707][ T9757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.177079][ T9757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.234730][ T3912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.512647][ T3912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.657002][T14247] veth0_vlan: entered promiscuous mode [ 434.712814][T14247] veth1_vlan: entered promiscuous mode [ 434.906963][ T3912] bridge_slave_1: left allmulticast mode [ 434.912782][ T3912] bridge_slave_1: left promiscuous mode [ 434.941623][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.979475][ T3912] bridge_slave_0: left allmulticast mode [ 435.009858][ T3912] bridge_slave_0: left promiscuous mode [ 435.015915][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.183654][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1854'. [ 435.662791][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.672278][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.682664][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.711342][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.733818][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.832077][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.846866][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.858364][ T3912] bond0 (unregistering): Released all slaves [ 435.919336][T14247] veth0_macvtap: entered promiscuous mode [ 436.017695][T14247] veth1_macvtap: entered promiscuous mode [ 436.040372][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.083740][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.169033][T14247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.178892][T14247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.187973][T14247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.197895][T14247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.287380][ T3912] hsr_slave_0: left promiscuous mode [ 436.293661][ T3912] hsr_slave_1: left promiscuous mode [ 436.307103][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.320481][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.341561][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.350295][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.388499][ T3912] veth1_macvtap: left promiscuous mode [ 436.400295][ T3912] veth0_macvtap: left promiscuous mode [ 436.406212][ T3912] veth1_vlan: left promiscuous mode [ 436.411587][ T3912] veth0_vlan: left promiscuous mode [ 437.164810][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.184658][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.207176][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.216250][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.233175][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.475270][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 437.517031][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 437.865006][ T5849] Bluetooth: hci1: command tx timeout [ 438.203328][T14600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 438.536440][T14551] chnl_net:caif_netlink_parms(): no params data found [ 438.594070][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.630916][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.799547][T14621] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 438.817148][T14621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1863'. [ 438.827058][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 438.870044][ T9754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.889490][ T9754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.923340][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.933856][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.944142][T14551] bridge_slave_0: entered allmulticast mode [ 438.952403][T14551] bridge_slave_0: entered promiscuous mode [ 439.048156][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.074168][T14551] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.081510][T14551] bridge_slave_1: entered allmulticast mode [ 439.106039][T14551] bridge_slave_1: entered promiscuous mode [ 439.121322][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 439.295855][ T3912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.306651][ T5849] Bluetooth: hci2: command tx timeout [ 439.441397][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1867'. [ 439.459555][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 439.515297][ T3912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.617719][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.633441][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.908583][ T3912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.945564][ T5849] Bluetooth: hci1: command tx timeout [ 440.002641][T14551] team0: Port device team_slave_0 added [ 440.028527][T14587] chnl_net:caif_netlink_parms(): no params data found [ 440.083198][ T3912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.113489][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.121239][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.139618][T14551] team0: Port device team_slave_1 added [ 440.328843][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.342794][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.376343][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.389670][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.396806][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.422990][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.596535][T14587] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.603835][T14587] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.617143][T14587] bridge_slave_0: entered allmulticast mode [ 440.625591][T14587] bridge_slave_0: entered promiscuous mode [ 440.640418][T14551] hsr_slave_0: entered promiscuous mode [ 440.648515][T14551] hsr_slave_1: entered promiscuous mode [ 440.655849][T14551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.663457][T14551] Cannot create hsr debugfs directory [ 440.694515][T14587] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.701737][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.709801][T14587] bridge_slave_1: entered allmulticast mode [ 440.717883][T14587] bridge_slave_1: entered promiscuous mode [ 440.819231][ T3912] bridge_slave_1: left allmulticast mode [ 440.826449][ T3912] bridge_slave_1: left promiscuous mode [ 440.832327][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.846903][ T3912] bridge_slave_0: left allmulticast mode [ 440.852612][ T3912] bridge_slave_0: left promiscuous mode [ 440.861599][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.257837][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.269195][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.279492][ T3912] bond0 (unregistering): Released all slaves [ 441.299841][T14587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.393391][T14587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.395908][ T5849] Bluetooth: hci2: command tx timeout [ 441.622517][T14587] team0: Port device team_slave_0 added [ 441.773788][T14587] team0: Port device team_slave_1 added [ 442.024613][ T5849] Bluetooth: hci1: command tx timeout [ 442.032614][T14587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.095559][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.123332][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.137744][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.152177][T14587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.164641][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.174900][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.185596][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 442.233701][T14587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.252269][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.299087][T14587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.362642][ T3912] hsr_slave_0: left promiscuous mode [ 442.373933][ T3912] hsr_slave_1: left promiscuous mode [ 442.389999][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.418049][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.434489][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.455477][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.553456][ T3912] veth1_macvtap: left promiscuous mode [ 442.569778][ T3912] veth0_macvtap: left promiscuous mode [ 442.576661][ T3912] veth1_vlan: left promiscuous mode [ 442.582183][ T3912] veth0_vlan: left promiscuous mode [ 442.611739][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1877'. [ 442.685764][T14712] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1877'. [ 443.151447][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'. [ 443.178120][T14719] netlink: 'syz.0.1878': attribute type 7 has an invalid length. [ 443.199607][T14719] netlink: 'syz.0.1878': attribute type 8 has an invalid length. [ 443.264351][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 443.469081][ T5849] Bluetooth: hci2: command tx timeout [ 443.770085][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 443.817019][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 444.114462][ T5849] Bluetooth: hci1: command tx timeout [ 444.264864][ T5849] Bluetooth: hci3: command tx timeout [ 444.511175][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'. [ 444.583157][T14587] hsr_slave_0: entered promiscuous mode [ 444.602920][T14587] hsr_slave_1: entered promiscuous mode [ 444.613491][T14587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.623036][T14587] Cannot create hsr debugfs directory [ 445.531919][T14551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.544228][ T5849] Bluetooth: hci2: command tx timeout [ 445.617813][T14551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.632522][T14551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.705046][ T3912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.737650][T14551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.876340][ T3912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.944551][T14689] chnl_net:caif_netlink_parms(): no params data found [ 446.018329][ T3912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.057846][T14786] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1891'. [ 446.155931][ T3912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.180744][T14781] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1891'. [ 446.218618][T14787] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1891'. [ 446.344085][ T5849] Bluetooth: hci3: command tx timeout [ 446.474622][T14800] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 446.511768][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.542317][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.564548][T14689] bridge_slave_0: entered allmulticast mode [ 446.593049][T14689] bridge_slave_0: entered promiscuous mode [ 446.643144][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.665174][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.672483][T14689] bridge_slave_1: entered allmulticast mode [ 446.697533][T14807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.704908][T14807] IPv6: NLM_F_CREATE should be set when creating new route [ 446.714355][T14689] bridge_slave_1: entered promiscuous mode [ 446.749446][T14810] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 446.774149][T14810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 446.839134][T14810] !: entered promiscuous mode [ 446.846595][T14810] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 446.868140][T14689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.950400][T14689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.992393][ T3912] bridge_slave_1: left allmulticast mode [ 446.999255][ T3912] bridge_slave_1: left promiscuous mode [ 447.005549][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.017462][ T3912] bridge_slave_0: left allmulticast mode [ 447.023547][ T3912] bridge_slave_0: left promiscuous mode [ 447.030516][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.534905][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.546650][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.557760][ T3912] bond0 (unregistering): Released all slaves [ 447.670122][T14587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.683862][T14689] team0: Port device team_slave_0 added [ 447.802848][T14587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.843293][T14689] team0: Port device team_slave_1 added [ 447.877598][T14587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.911253][T14587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.023764][T14689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.041957][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.083232][T14689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.116309][T14689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.123322][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.181980][T14689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.436455][ T5849] Bluetooth: hci3: command tx timeout [ 448.448640][T14689] hsr_slave_0: entered promiscuous mode [ 448.460473][T14689] hsr_slave_1: entered promiscuous mode [ 448.472105][T14689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.483824][T14689] Cannot create hsr debugfs directory [ 448.603609][ T3912] hsr_slave_0: left promiscuous mode [ 448.614735][ T3912] hsr_slave_1: left promiscuous mode [ 448.630241][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.639521][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.657157][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.671955][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.676249][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.690045][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.698437][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.708023][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.722414][ T3912] veth1_macvtap: left promiscuous mode [ 448.729301][ T3912] veth0_macvtap: left promiscuous mode [ 448.735093][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.742566][ T3912] veth1_vlan: left promiscuous mode [ 448.748645][ T3912] veth0_vlan: left promiscuous mode [ 449.240955][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 449.286938][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 449.761892][T14551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.919655][T14551] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.042532][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.050086][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.075378][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.082600][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.471963][T14551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.504605][ T5849] Bluetooth: hci3: command tx timeout [ 450.556612][ T3912] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.567119][ T3912] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.632781][T14587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.689288][ T3912] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.740363][ T3912] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.824643][ T5849] Bluetooth: hci4: command tx timeout [ 450.865489][ T3912] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.881878][ T3912] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.972936][T14587] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.005985][ T3912] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.017222][ T3912] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.117315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.124599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.135674][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.142905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.200976][T14551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.220715][T14849] chnl_net:caif_netlink_parms(): no params data found [ 451.418954][T14689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.499275][T14689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.546020][T14689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.586481][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.593729][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.602043][T14849] bridge_slave_0: entered allmulticast mode [ 451.610215][T14849] bridge_slave_0: entered promiscuous mode [ 451.646402][T14689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.666291][T14849] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.673497][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.682572][T14849] bridge_slave_1: entered allmulticast mode [ 451.691584][T14849] bridge_slave_1: entered promiscuous mode [ 451.701630][T14551] veth0_vlan: entered promiscuous mode [ 452.832307][ T3912] erspan0 (unregistering): left promiscuous mode [ 452.900797][ T3912] dvmrp0 (unregistering): left allmulticast mode [ 452.907554][ T5849] Bluetooth: hci4: command tx timeout [ 453.620499][ T3912] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 453.629553][ T3912] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 453.646737][ T3912] bond0 (unregistering): Released all slaves [ 453.663163][ T3912] bond1 (unregistering): Released all slaves [ 453.681428][ T3912] bond2 (unregistering): Released all slaves [ 453.697791][ T3912] bond3 (unregistering): Released all slaves [ 453.716754][ T3912] bond4 (unregistering): Released all slaves [ 453.735680][ T3912] bond5 (unregistering): Released all slaves [ 453.825992][T14849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.871411][T14849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.908955][T14587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.981651][ T3912] tipc: Disabling bearer [ 453.988379][ T3912] tipc: Left network mode [ 454.047443][ T3912] IPVS: stopping master sync thread 10441 ... [ 454.062429][ T3912] IPVS: stopping backup sync thread 7606 ... [ 454.096234][T14551] veth1_vlan: entered promiscuous mode [ 454.156830][T14849] team0: Port device team_slave_0 added [ 454.223253][T14849] team0: Port device team_slave_1 added [ 454.316416][T14919] netlink: 'syz.3.1917': attribute type 8 has an invalid length. [ 454.355196][T14849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.362214][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.390351][T14849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.445442][T14849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.452456][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.481312][T14849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.637443][ T3912] hsr_slave_0: left promiscuous mode [ 454.654739][ T3912] hsr_slave_1: left promiscuous mode [ 454.696267][ T3912] veth0_macvtap: left allmulticast mode [ 454.702135][ T3912] veth0_macvtap: left promiscuous mode [ 454.984270][ T5849] Bluetooth: hci4: command tx timeout [ 454.991725][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 455.786685][T14587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.850417][T14849] hsr_slave_0: entered promiscuous mode [ 455.862997][T14849] hsr_slave_1: entered promiscuous mode [ 455.873068][T14551] veth0_macvtap: entered promiscuous mode [ 455.956858][T14551] veth1_macvtap: entered promiscuous mode [ 456.162935][T14551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.180781][T14689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.213131][T14551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.270669][T14551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.280318][T14551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.289136][T14551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.298539][T14551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.324794][T14944] netlink: 'syz.3.1922': attribute type 29 has an invalid length. [ 456.360025][T14587] veth0_vlan: entered promiscuous mode [ 456.397807][T14689] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.421926][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.429154][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.445597][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.452753][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.462666][T14944] netlink: 'syz.3.1922': attribute type 29 has an invalid length. [ 456.488045][T14587] veth1_vlan: entered promiscuous mode [ 456.689604][T14587] veth0_macvtap: entered promiscuous mode [ 456.740480][T14587] veth1_macvtap: entered promiscuous mode [ 456.745870][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.768817][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.832898][T14587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.856989][ T9755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.868214][T14587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.889288][ T9755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.926421][T14587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.943420][T14587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.955968][T14587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.965871][T14587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.064752][ T5849] Bluetooth: hci4: command tx timeout [ 457.251761][T14849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.298771][T14849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.317092][T14849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.342374][T14849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.402780][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.499659][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.555051][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.579312][ T9182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.622925][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.712471][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.751059][T14689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.765234][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.785811][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.113419][ T1093] bridge_slave_1: left allmulticast mode [ 458.127114][ T1093] bridge_slave_1: left promiscuous mode [ 458.132968][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.150923][ T1093] bridge_slave_0: left allmulticast mode [ 458.157183][ T1093] bridge_slave_0: left promiscuous mode [ 458.162938][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.782365][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.799591][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.810797][ T1093] bond0 (unregistering): Released all slaves [ 458.898369][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.915274][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.931531][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.931553][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.950998][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.962116][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.090266][T14849] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.159297][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.166518][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.213875][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.221076][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.251609][ T1093] hsr_slave_0: left promiscuous mode [ 459.261252][ T1093] hsr_slave_1: left promiscuous mode [ 459.268271][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.276303][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.286670][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.294356][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.321568][ T1093] veth1_macvtap: left promiscuous mode [ 459.327232][ T1093] veth0_macvtap: left promiscuous mode [ 459.332845][ T1093] veth1_vlan: left promiscuous mode [ 459.341555][ T1093] veth0_vlan: left promiscuous mode [ 459.806097][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 459.851377][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 460.348393][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.358185][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.366316][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.381857][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.398600][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.476613][T14980] IPv6: sit1: Disabled Multicast RS [ 460.626926][T14689] veth0_vlan: entered promiscuous mode [ 460.772039][T14689] veth1_vlan: entered promiscuous mode [ 460.979889][T14975] chnl_net:caif_netlink_parms(): no params data found [ 461.072127][T14994] sit0: entered promiscuous mode [ 461.074950][ T5849] Bluetooth: hci1: command tx timeout [ 461.099455][T14994] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 461.108190][T14994] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1930'. [ 461.201056][T14689] veth0_macvtap: entered promiscuous mode [ 461.309954][T14975] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.322038][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.338243][T14975] bridge_slave_0: entered allmulticast mode [ 461.352362][T14975] bridge_slave_0: entered promiscuous mode [ 461.383372][T14975] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.394223][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.406450][T14975] bridge_slave_1: entered allmulticast mode [ 461.415253][T14975] bridge_slave_1: entered promiscuous mode [ 461.427373][T14689] veth1_macvtap: entered promiscuous mode [ 461.523730][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.542675][T14982] chnl_net:caif_netlink_parms(): no params data found [ 461.615830][ T1093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.653271][T14689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.667718][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.716282][T14689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.756902][ T1093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.788215][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'. [ 461.883517][T14689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.893613][T14689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.909102][T14689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.918911][T14689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.990374][ T1093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.081393][T14849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.103816][T14975] team0: Port device team_slave_0 added [ 462.149504][ T1093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.182446][T14975] team0: Port device team_slave_1 added [ 462.280425][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.287945][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.295400][T14982] bridge_slave_0: entered allmulticast mode [ 462.303082][T14982] bridge_slave_0: entered promiscuous mode [ 462.332144][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.343313][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.352695][T14982] bridge_slave_1: entered allmulticast mode [ 462.362944][T14982] bridge_slave_1: entered promiscuous mode [ 462.381833][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.399546][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.440144][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.452879][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.460119][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.486688][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.504492][ T5849] Bluetooth: hci2: command tx timeout [ 462.630832][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.687393][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.838224][T14975] hsr_slave_0: entered promiscuous mode [ 462.848383][T14975] hsr_slave_1: entered promiscuous mode [ 462.855544][T14975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.863174][T14975] Cannot create hsr debugfs directory [ 462.939399][T14982] team0: Port device team_slave_0 added [ 462.953537][ T1093] bridge_slave_1: left allmulticast mode [ 462.963037][ T1093] bridge_slave_1: left promiscuous mode [ 462.972958][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.992987][ T1093] bridge_slave_0: left allmulticast mode [ 463.002427][ T1093] bridge_slave_0: left promiscuous mode [ 463.008746][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.151036][ T5849] Bluetooth: hci1: command tx timeout [ 463.447735][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.458900][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.473564][ T1093] bond0 (unregistering): Released all slaves [ 463.531154][T14982] team0: Port device team_slave_1 added [ 463.658300][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.665752][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.692073][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.725822][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.732821][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.759108][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.806772][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.819461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.967825][T14982] hsr_slave_0: entered promiscuous mode [ 463.974735][T14982] hsr_slave_1: entered promiscuous mode [ 463.981182][T14982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.996297][T14982] Cannot create hsr debugfs directory [ 464.007976][T14849] veth0_vlan: entered promiscuous mode [ 464.090063][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.103022][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.153671][ T1093] hsr_slave_0: left promiscuous mode [ 464.164315][ T1093] hsr_slave_1: left promiscuous mode [ 464.170542][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.178686][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.194699][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.202237][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.240697][ T1093] veth1_macvtap: left promiscuous mode [ 464.246850][ T1093] veth0_macvtap: left promiscuous mode [ 464.252459][ T1093] veth1_vlan: left promiscuous mode [ 464.258136][ T1093] veth0_vlan: left promiscuous mode [ 464.586858][ T5849] Bluetooth: hci2: command tx timeout [ 464.772675][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 464.820192][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 465.229494][ T5849] Bluetooth: hci1: command tx timeout [ 465.359109][T14849] veth1_vlan: entered promiscuous mode [ 465.667972][T15067] netlink: 'syz.3.1943': attribute type 8 has an invalid length. [ 465.676324][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 465.690620][T14849] veth0_macvtap: entered promiscuous mode [ 465.720530][T14849] veth1_macvtap: entered promiscuous mode [ 465.731921][T15068] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1943'. [ 465.772910][T15067] bridge0: entered allmulticast mode [ 465.920397][T14849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.969806][T14849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.049926][ T1093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.068417][T14849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.078045][T14849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.089664][T14849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.101094][T14849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.159571][ T1093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.185973][T14975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.256403][ T1093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.316060][T14975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.356199][T14975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.381906][T14975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.442168][ T1093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.664553][ T5849] Bluetooth: hci2: command tx timeout [ 466.722451][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.745992][ T9182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.920329][ T1093] bridge_slave_1: left allmulticast mode [ 466.935860][ T1093] bridge_slave_1: left promiscuous mode [ 466.941720][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.969481][ T1093] bridge_slave_0: left allmulticast mode [ 466.990829][ T1093] bridge_slave_0: left promiscuous mode [ 467.000768][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.307274][ T5849] Bluetooth: hci1: command tx timeout [ 467.560334][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.581710][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.597228][ T1093] bond0 (unregistering): Released all slaves [ 467.639288][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.684719][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.995404][T15114] netlink: 'syz.3.1944': attribute type 10 has an invalid length. [ 468.476363][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.484110][T14982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.493837][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.502395][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.513141][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.521116][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.534793][T14982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.716892][ T1093] hsr_slave_0: left promiscuous mode [ 468.744931][ T1093] hsr_slave_1: left promiscuous mode [ 468.752141][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.764211][ T5849] Bluetooth: hci2: command tx timeout [ 468.774288][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.805049][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.812533][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.902346][ T1093] veth1_macvtap: left promiscuous mode [ 468.954068][ T1093] veth0_macvtap: left promiscuous mode [ 468.959885][ T1093] veth1_vlan: left promiscuous mode [ 468.984444][ T1093] veth0_vlan: left promiscuous mode [ 469.367908][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.377837][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.391856][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.413411][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.422808][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.805659][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 469.848795][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 470.254955][T14982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.270294][T14982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 470.285841][T15129] bridge_slave_0: invalid flags given to default FDB implementation [ 470.337635][T14975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.567752][T14975] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.593691][ T5849] Bluetooth: hci3: command tx timeout [ 470.636865][T15157] netlink: 'syz.3.1947': attribute type 29 has an invalid length. [ 470.740664][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.747887][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.892816][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.900099][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.544248][ T5849] Bluetooth: hci4: command tx timeout [ 471.566258][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.720272][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.754403][T15119] chnl_net:caif_netlink_parms(): no params data found [ 471.831410][T15135] chnl_net:caif_netlink_parms(): no params data found [ 471.902798][T14982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.967438][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.200945][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.287842][T14975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.310293][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.468857][T15225] tipc: Started in network mode [ 472.473912][T15225] tipc: Node identity ac14140c, cluster identity 4711 [ 472.481078][T15225] tipc: Enabling of bearer rejected, failed to enable media [ 472.569631][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.576882][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.616646][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.640244][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.657504][T15119] bridge_slave_0: entered allmulticast mode [ 472.664124][ T5849] Bluetooth: hci3: command tx timeout [ 472.675632][T15119] bridge_slave_0: entered promiscuous mode [ 472.712330][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.733650][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.751476][T15119] bridge_slave_1: entered allmulticast mode [ 472.775172][T15119] bridge_slave_1: entered promiscuous mode [ 472.850968][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.867705][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.880796][T15135] bridge_slave_0: entered allmulticast mode [ 472.892252][T15135] bridge_slave_0: entered promiscuous mode [ 472.902548][T15235] bridge_slave_0: invalid flags given to default FDB implementation [ 472.922343][T15119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.021806][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.033161][T15135] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.041371][T15135] bridge_slave_1: entered allmulticast mode [ 473.053462][T15135] bridge_slave_1: entered promiscuous mode [ 473.088681][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.095920][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.144284][T15119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.209676][T15247] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1958'. [ 473.418740][ T1093] bridge_slave_1: left allmulticast mode [ 473.430629][ T1093] bridge_slave_1: left promiscuous mode [ 473.441063][T15255] FAULT_INJECTION: forcing a failure. [ 473.441063][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.456240][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.464762][T15255] CPU: 1 UID: 0 PID: 15255 Comm: syz.3.1959 Not tainted 6.16.0-rc1-syzkaller-00121-gd0fa59897e04 #0 PREEMPT(full) [ 473.464795][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.464808][T15255] Call Trace: [ 473.464816][T15255] [ 473.464825][T15255] dump_stack_lvl+0x189/0x250 [ 473.464876][T15255] ? __pfx____ratelimit+0x10/0x10 [ 473.464910][T15255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.464942][T15255] ? __pfx__printk+0x10/0x10 [ 473.464966][T15255] ? __might_fault+0xb0/0x130 [ 473.465002][T15255] should_fail_ex+0x414/0x560 [ 473.465035][T15255] _copy_from_user+0x2d/0xb0 [ 473.465058][T15255] kstrtouint_from_user+0xc4/0x170 [ 473.465091][T15255] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 473.465144][T15255] proc_fail_nth_write+0x88/0x240 [ 473.465171][T15255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 473.465206][T15255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 473.465235][T15255] vfs_write+0x27e/0xa90 [ 473.465281][T15255] ? __pfx_vfs_write+0x10/0x10 [ 473.465316][T15255] ? __fget_files+0x2a/0x420 [ 473.465353][T15255] ? __fget_files+0x3a0/0x420 [ 473.465376][T15255] ? __fget_files+0x2a/0x420 [ 473.465411][T15255] ksys_write+0x145/0x250 [ 473.465435][T15255] ? __pfx_ksys_write+0x10/0x10 [ 473.465452][T15255] ? rcu_is_watching+0x15/0xb0 [ 473.465493][T15255] ? do_syscall_64+0xbe/0x3b0 [ 473.465518][T15255] do_syscall_64+0xfa/0x3b0 [ 473.465537][T15255] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.465568][T15255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.465590][T15255] ? clear_bhb_loop+0x60/0xb0 [ 473.465618][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.465640][T15255] RIP: 0033:0x7f9c8bd8d3df [ 473.465660][T15255] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 473.465680][T15255] RSP: 002b:00007f9c8cb97030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 473.465703][T15255] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c8bd8d3df [ 473.465719][T15255] RDX: 0000000000000001 RSI: 00007f9c8cb970a0 RDI: 0000000000000004 [ 473.465733][T15255] RBP: 00007f9c8cb97090 R08: 0000000000000000 R09: 0000000000000000 [ 473.465747][T15255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 473.465760][T15255] R13: 0000000000000000 R14: 00007f9c8bfb5fa0 R15: 00007ffd1f87dba8 [ 473.465796][T15255] [ 473.469361][ T1093] bridge_slave_0: left allmulticast mode [ 473.634846][ T5849] Bluetooth: hci4: command tx timeout [ 473.655500][ T1093] bridge_slave_0: left promiscuous mode [ 473.726658][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.446610][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.464279][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.476017][ T1093] bond0 (unregistering): Released all slaves [ 474.511662][T15135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.529350][T15135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.557011][T15119] team0: Port device team_slave_0 added [ 474.615851][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1961'. [ 474.699849][T15119] team0: Port device team_slave_1 added [ 474.749817][ T5849] Bluetooth: hci3: command tx timeout [ 474.812420][T15135] team0: Port device team_slave_0 added [ 474.830883][T15135] team0: Port device team_slave_1 added [ 474.871387][T15119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.878807][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.909364][T15119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.920745][T14975] veth0_vlan: entered promiscuous mode [ 475.021302][T15135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.029000][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.055167][T15135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.067268][T15119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.075361][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.103599][T15119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.151705][T15135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.159104][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.187751][T15135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.313752][T15119] hsr_slave_0: entered promiscuous mode [ 475.321431][T15119] hsr_slave_1: entered promiscuous mode [ 475.327798][T15119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.336531][T15119] Cannot create hsr debugfs directory [ 475.391310][T15135] hsr_slave_0: entered promiscuous mode [ 475.399119][T15135] hsr_slave_1: entered promiscuous mode [ 475.406354][T15135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.414129][T15135] Cannot create hsr debugfs directory [ 475.420372][T14975] veth1_vlan: entered promiscuous mode [ 475.498257][ T1093] hsr_slave_0: left promiscuous mode [ 475.514398][ T1093] hsr_slave_1: left promiscuous mode [ 475.520785][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.534870][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.543547][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.551630][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.588062][ T1093] veth1_macvtap: left promiscuous mode [ 475.593798][ T1093] veth0_macvtap: left promiscuous mode [ 475.599603][ T1093] veth1_vlan: left promiscuous mode [ 475.605735][ T1093] veth0_vlan: left promiscuous mode [ 475.705370][ T5849] Bluetooth: hci4: command tx timeout [ 476.291841][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 476.338073][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 476.824880][ T5849] Bluetooth: hci3: command tx timeout [ 477.333438][T14975] veth0_macvtap: entered promiscuous mode [ 477.362105][T14982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.448923][T14975] veth1_macvtap: entered promiscuous mode [ 477.643587][T14975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.711708][T14975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.747261][T14975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.774464][T14975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.783280][T14975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.797149][ T5849] Bluetooth: hci4: command tx timeout [ 477.802677][T14975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.825407][T14982] veth0_vlan: entered promiscuous mode [ 477.850068][T14982] veth1_vlan: entered promiscuous mode [ 478.032023][T14982] veth0_macvtap: entered promiscuous mode [ 478.152748][T14982] veth1_macvtap: entered promiscuous mode [ 478.163831][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.178647][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.308582][T14982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.334770][T15135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.348177][T15135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.359181][T15135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.372240][T15135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.390394][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.400241][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.430943][T14982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.459037][T14982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.470556][T14982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.482953][T14982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.492316][T14982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.756130][ T3912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.783343][ T3912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.930908][ T3912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.949437][T15119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.966322][ T9755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.972383][T15119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.984348][ T9755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.003422][T15135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.025797][T15119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.110576][ T3912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.150937][T15119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.251043][ T3912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.281900][T15135] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.313104][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.320467][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.393818][ T3912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.422425][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.429703][ T9757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.820142][T15119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.866137][ T3912] bridge_slave_1: left allmulticast mode [ 479.871853][ T3912] bridge_slave_1: left promiscuous mode [ 479.894370][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.950355][ T3912] bridge_slave_0: left allmulticast mode [ 479.964006][ T3912] bridge_slave_0: left promiscuous mode [ 479.969849][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.546304][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.578152][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.593088][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.612491][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.630846][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.657595][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.674641][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.685493][ T3912] bond0 (unregistering): Released all slaves [ 480.716363][T15119] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.800859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.808120][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.859484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.866743][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.141473][T15135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.269092][ T3912] hsr_slave_0: left promiscuous mode [ 481.276335][ T3912] hsr_slave_1: left promiscuous mode [ 481.282457][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.292232][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.300762][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.308884][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.339809][ T3912] veth1_macvtap: left promiscuous mode [ 481.346426][ T3912] veth0_macvtap: left promiscuous mode [ 481.352137][ T3912] veth1_vlan: left promiscuous mode [ 481.358299][ T3912] veth0_vlan: left promiscuous mode [ 482.248603][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.269468][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.283770][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.370302][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.378813][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.667091][ T5849] Bluetooth: hci1: command tx timeout [ 482.722714][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 482.772120][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 483.558481][T15135] veth0_vlan: entered promiscuous mode [ 483.767774][T15135] veth1_vlan: entered promiscuous mode [ 483.961742][T15364] chnl_net:caif_netlink_parms(): no params data found [ 484.307114][T15119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.341802][T15135] veth0_macvtap: entered promiscuous mode [ 484.429086][T15135] veth1_macvtap: entered promiscuous mode [ 484.441218][ T5849] Bluetooth: hci2: command tx timeout [ 484.546321][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.557979][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.570405][T15364] bridge_slave_0: entered allmulticast mode [ 484.599082][T15364] bridge_slave_0: entered promiscuous mode [ 484.641727][ T3912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.676217][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.683525][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.692073][T15364] bridge_slave_1: entered allmulticast mode [ 484.701556][T15364] bridge_slave_1: entered promiscuous mode [ 484.724805][T15389] chnl_net:caif_netlink_parms(): no params data found [ 484.744593][ T5849] Bluetooth: hci1: command tx timeout [ 484.853557][ T3912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.900885][T15135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.022459][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.148673][ T3912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.198488][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.347730][T15135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.366290][T15135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.382647][T15135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.391626][T15135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.401521][T15135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.469350][ T3912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.637905][T15364] team0: Port device team_slave_0 added [ 485.653493][T15364] team0: Port device team_slave_1 added [ 485.829070][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.836476][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.862898][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.926711][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.945200][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.988183][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.078263][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.086537][T15389] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.093803][T15389] bridge_slave_0: entered allmulticast mode [ 486.102898][T15389] bridge_slave_0: entered promiscuous mode [ 486.168442][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.176112][T15389] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.185115][T15389] bridge_slave_1: entered allmulticast mode [ 486.194703][T15389] bridge_slave_1: entered promiscuous mode [ 486.203820][T15119] veth0_vlan: entered promiscuous mode [ 486.238386][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.261904][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.397674][T15364] hsr_slave_0: entered promiscuous mode [ 486.404437][T15364] hsr_slave_1: entered promiscuous mode [ 486.427419][T15389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.447864][T15119] veth1_vlan: entered promiscuous mode [ 486.504215][ T5849] Bluetooth: hci2: command tx timeout [ 486.517702][ T3912] bridge_slave_1: left allmulticast mode [ 486.523517][ T3912] bridge_slave_1: left promiscuous mode [ 486.537576][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.556400][ T3912] bridge_slave_0: left allmulticast mode [ 486.562349][ T3912] bridge_slave_0: left promiscuous mode [ 486.574275][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.615937][ T3912] bridge_slave_1: left allmulticast mode [ 486.621754][ T3912] bridge_slave_1: left promiscuous mode [ 486.628057][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.645277][ T3912] bridge_slave_0: left allmulticast mode [ 486.651740][ T3912] bridge_slave_0: left promiscuous mode [ 486.658486][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.824117][ T5849] Bluetooth: hci1: command tx timeout [ 486.959678][ T3912] bond3 (unregistering): (slave geneve2): Releasing active interface [ 486.969701][ T3912] geneve2 (unregistering): left promiscuous mode [ 487.408037][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.418869][ T3912] bond_slave_1: left promiscuous mode [ 487.426830][ T3912] bond0 (unregistering): Released all slaves [ 487.534839][ T3912] bond1 (unregistering): Released all slaves [ 487.640472][ T3912] bond2 (unregistering): Released all slaves [ 487.750700][ T3912] bond3 (unregistering): Released all slaves [ 487.851376][ T3912] bond4 (unregistering): Released all slaves [ 488.156285][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.169397][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.181119][ T3912] bond0 (unregistering): Released all slaves [ 488.199193][T15389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.358828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.369643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.402641][ T3912] IPVS: stopping master sync thread 8565 ... [ 488.417806][T15389] team0: Port device team_slave_0 added [ 488.446719][T15389] team0: Port device team_slave_1 added [ 488.594895][ T5849] Bluetooth: hci2: command tx timeout [ 488.612483][T15497] netlink: 'syz.3.1982': attribute type 4 has an invalid length. [ 488.631422][T15119] veth0_macvtap: entered promiscuous mode [ 488.662752][T15389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.669825][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.698968][T15389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.712287][T15389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.719340][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.748091][T15389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.904199][ T5849] Bluetooth: hci1: command tx timeout [ 488.941491][T15119] veth1_macvtap: entered promiscuous mode [ 489.479934][T15389] hsr_slave_0: entered promiscuous mode [ 489.501084][T15389] hsr_slave_1: entered promiscuous mode [ 489.520651][T15389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.544636][T15389] Cannot create hsr debugfs directory [ 489.732116][T15518] netlink: 'syz.3.1984': attribute type 11 has an invalid length. [ 489.754010][T15518] netlink: 'syz.3.1984': attribute type 11 has an invalid length. [ 489.761899][T15518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1984'. [ 489.823844][T15119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.839974][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.849469][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.860917][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.872096][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.880054][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.914244][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 489.950018][T15119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.116051][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.123549][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.133074][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.141914][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.158250][ T3912] hsr_slave_0: left promiscuous mode [ 490.167312][ T3912] hsr_slave_1: left promiscuous mode [ 490.173241][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.180793][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.190877][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.198430][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.229154][ T3912] veth0_macvtap: left promiscuous mode [ 490.236468][ T3912] veth1_vlan: left promiscuous mode [ 490.241826][ T3912] veth0_vlan: left promiscuous mode [ 490.249277][ T3912] veth1_macvtap: left promiscuous mode [ 490.254952][ T3912] veth0_macvtap: left promiscuous mode [ 490.260673][ T3912] veth1_vlan: left promiscuous mode [ 490.273318][ T3912] veth0_vlan: left promiscuous mode [ 490.668941][ T5849] Bluetooth: hci2: command tx timeout [ 490.833347][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 490.877759][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 491.636825][ T3912] team0 (unregistering): Port device team_slave_1 removed [ 491.684101][ T3912] team0 (unregistering): Port device team_slave_0 removed [ 491.945292][ T5849] Bluetooth: hci4: command tx timeout [ 492.170649][T15119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.180443][T15119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.190257][T15119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.199175][T15119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.219267][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1986'. [ 492.926661][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.955572][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.203483][T15364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.219896][T15364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.233496][T15364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.233561][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.287811][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.316610][T15364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.576453][T15521] chnl_net:caif_netlink_parms(): no params data found [ 493.636322][T15551] netlink: 'syz.3.1989': attribute type 2 has an invalid length. [ 493.646270][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 493.670755][ T3912] IPVS: stop unused estimator thread 0... [ 494.015076][ T3912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.034713][ T5849] Bluetooth: hci4: command tx timeout [ 494.041443][T15521] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.055678][T15521] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.062990][T15521] bridge_slave_0: entered allmulticast mode [ 494.077251][T15521] bridge_slave_0: entered promiscuous mode [ 494.090392][T15521] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.103171][T15521] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.117445][T15521] bridge_slave_1: entered allmulticast mode [ 494.129624][T15521] bridge_slave_1: entered promiscuous mode [ 494.174678][ T3912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.239957][T15521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.281917][T15364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.303484][ T3912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.322492][T15521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.380292][T15389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.390587][T15389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.406848][T15521] team0: Port device team_slave_0 added [ 494.428102][ T3912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.446438][T15389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.462330][T15521] team0: Port device team_slave_1 added [ 494.489429][T15389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.528766][T15521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.536541][T15521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.563462][T15521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.585547][T15521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.596388][T15521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.624892][T15521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.649655][T15364] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.673005][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.680212][ T9755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.731724][T15521] hsr_slave_0: entered promiscuous mode [ 494.740891][T15521] hsr_slave_1: entered promiscuous mode [ 494.748386][T15521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.756161][T15521] Cannot create hsr debugfs directory [ 494.860306][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.867468][ T9757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.069265][ T3912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.169275][ T3912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.210350][T15389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.250266][ T3912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.322304][ T3912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.344593][T15389] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.368477][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.375717][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.418436][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.425689][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.592736][T15389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.603195][T15389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.644905][ T3912] bridge_slave_1: left allmulticast mode [ 495.650629][ T3912] bridge_slave_1: left promiscuous mode [ 495.659584][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.675206][ T3912] bridge_slave_0: left allmulticast mode [ 495.680897][ T3912] bridge_slave_0: left promiscuous mode [ 495.687028][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.698304][ T3912] bridge_slave_1: left allmulticast mode [ 495.704380][ T3912] bridge_slave_1: left promiscuous mode [ 495.710248][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.720181][ T3912] bridge_slave_0: left allmulticast mode [ 495.727681][ T3912] bridge_slave_0: left promiscuous mode [ 495.733434][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.019872][T15574] atomic_op ffff88807de6f198 conn xmit_atomic 0000000000000000 [ 496.109532][ T5849] Bluetooth: hci4: command tx timeout [ 496.161325][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.185720][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.193758][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.214705][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.222617][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.328510][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.340132][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.350553][ T3912] bond0 (unregistering): Released all slaves [ 496.652421][ T3912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.663587][ T3912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.674980][ T3912] bond0 (unregistering): Released all slaves [ 496.743271][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.090412][T15580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.111992][T15580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.311192][T15364] veth0_vlan: entered promiscuous mode [ 497.353067][T15389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.455328][T15364] veth1_vlan: entered promiscuous mode [ 497.482076][T15575] chnl_net:caif_netlink_parms(): no params data found [ 497.592500][T15521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.630349][ T3912] hsr_slave_0: left promiscuous mode [ 497.636613][ T3912] hsr_slave_1: left promiscuous mode [ 497.642493][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.655014][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.663242][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.676495][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.691704][ T3912] hsr_slave_0: left promiscuous mode [ 497.699509][ T3912] hsr_slave_1: left promiscuous mode [ 497.707815][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.716337][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.731290][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.740091][ T30] audit: type=1107 audit(1750255210.312:7): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 497.764114][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.819572][ T3912] veth1_macvtap: left promiscuous mode [ 497.830495][ T3912] veth0_macvtap: left promiscuous mode [ 497.836290][ T3912] veth1_vlan: left promiscuous mode [ 497.841936][ T3912] veth0_vlan: left promiscuous mode [ 497.860486][ T3912] veth1_macvtap: left promiscuous mode [ 497.867300][ T3912] veth0_macvtap: left promiscuous mode [ 497.873096][ T3912] veth1_vlan: left promiscuous mode [ 497.878533][ T3912] veth0_vlan: left promiscuous mode [ 497.943716][T15596] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 497.966670][ T3912] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 497.978624][ T3912] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 497.988263][ T3912] CPU: 1 UID: 0 PID: 3912 Comm: kworker/u8:8 Not tainted 6.16.0-rc1-syzkaller-00121-gd0fa59897e04 #0 PREEMPT(full) [ 498.000450][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.010588][ T3912] Workqueue: netns cleanup_net [ 498.015402][ T3912] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 498.021177][ T3912] Code: ff ff ff e8 69 e1 41 01 89 c5 31 ff 89 c6 e8 ae 18 9c f7 85 ed 74 45 e8 65 14 9c f7 eb 05 e8 5e 14 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 8b ff f7 49 8b 2c 24 49 8d 7c [ 498.040811][ T3912] RSP: 0018:ffffc9000d037038 EFLAGS: 00010206 [ 498.046890][ T3912] RAX: 000000001fffe000 RBX: 1ffff1100b508782 RCX: ffff888031931e00 [ 498.054878][ T3912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 498.062873][ T3912] RBP: 0000000000000001 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 498.070862][ T3912] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: 00000000ffff0000 [ 498.078848][ T3912] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805a843c10 [ 498.086857][ T3912] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 498.095797][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.102394][ T3912] CR2: 0000200000000440 CR3: 000000004fc30000 CR4: 00000000003526f0 [ 498.110395][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.118398][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.126386][ T3912] Call Trace: [ 498.129674][ T3912] [ 498.132702][ T3912] __ipv6_dev_mc_dec+0x30d/0x390 [ 498.138182][ T3912] __ipv6_ifa_notify+0x43d/0xac0 [ 498.143142][ T3912] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 498.148633][ T3912] ? __lock_acquire+0xab9/0xd20 [ 498.153502][ T3912] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.158917][ T3912] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.164154][ T3912] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.169593][ T3912] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.175469][ T3912] addrconf_ifdown+0xe69/0x1880 [ 498.180356][ T3912] ? tls_dev_event+0x717/0xec0 [ 498.185155][ T3912] ? __pfx_addrconf_ifdown+0x10/0x10 [ 498.190478][ T3912] addrconf_notify+0x1bc/0x1010 [ 498.195354][ T3912] notifier_call_chain+0x1b3/0x3e0 [ 498.200510][ T3912] dev_close_many+0x29c/0x410 [ 498.205214][ T3912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.211232][ T3912] ? __pfx_dev_close_many+0x10/0x10 [ 498.216443][ T3912] unregister_netdevice_many_notify+0x834/0x2320 [ 498.222800][ T3912] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.228283][ T3912] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.233692][ T3912] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 498.240482][ T3912] ? unregister_netdevice_queue+0x1b3/0x380 [ 498.246487][ T3912] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 498.252654][ T3912] default_device_exit_batch+0x819/0x890 [ 498.258310][ T3912] ? __pfx___might_resched+0x10/0x10 [ 498.263613][ T3912] ? __pfx_default_device_exit_batch+0x10/0x10 [ 498.269801][ T3912] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 498.275290][ T3912] ? net_generic+0x1e/0x240 [ 498.279826][ T3912] ? __pfx_default_device_exit_batch+0x10/0x10 [ 498.286017][ T3912] ops_undo_list+0x522/0x990 [ 498.290642][ T3912] ? __pfx_ops_undo_list+0x10/0x10 [ 498.295775][ T3912] cleanup_net+0x4c5/0x800 [ 498.300203][ T3912] ? __pfx_cleanup_net+0x10/0x10 [ 498.305171][ T3912] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.310412][ T3912] ? process_scheduled_works+0x9ef/0x17b0 [ 498.316182][ T3912] ? process_scheduled_works+0x9ef/0x17b0 [ 498.322268][ T3912] process_scheduled_works+0xae1/0x17b0 [ 498.327933][ T3912] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.333980][ T3912] worker_thread+0x8a0/0xda0 [ 498.338636][ T3912] kthread+0x70e/0x8a0 [ 498.342738][ T3912] ? __pfx_worker_thread+0x10/0x10 [ 498.347883][ T3912] ? __pfx_kthread+0x10/0x10 [ 498.352492][ T3912] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.357727][ T3912] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.362961][ T3912] ? __pfx_kthread+0x10/0x10 [ 498.367654][ T3912] ret_from_fork+0x3fc/0x770 [ 498.372279][ T3912] ? __pfx_ret_from_fork+0x10/0x10 [ 498.377412][ T3912] ? __switch_to_asm+0x39/0x70 [ 498.382245][ T3912] ? __switch_to_asm+0x33/0x70 [ 498.387019][ T3912] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.391621][ T3912] ret_from_fork_asm+0x1a/0x30 [ 498.396499][ T3912] [ 498.399628][ T3912] Modules linked in: [ 498.404895][ T3912] ---[ end trace 0000000000000000 ]--- [ 498.411250][ T51] Bluetooth: hci4: command tx timeout [ 498.416745][ T51] Bluetooth: hci3: command tx timeout [ 498.422532][ T3912] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 498.428754][ T3912] Code: ff ff ff e8 69 e1 41 01 89 c5 31 ff 89 c6 e8 ae 18 9c f7 85 ed 74 45 e8 65 14 9c f7 eb 05 e8 5e 14 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 8b ff f7 49 8b 2c 24 49 8d 7c [ 498.465216][ T3912] RSP: 0018:ffffc9000d037038 EFLAGS: 00010206 [ 498.471370][ T3912] RAX: 000000001fffe000 RBX: 1ffff1100b508782 RCX: ffff888031931e00 [ 498.479440][ T3912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 498.487489][ T3912] RBP: 0000000000000001 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 498.495681][ T3912] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: 00000000ffff0000 [ 498.503698][ T3912] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805a843c10 [ 498.511944][ T3912] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 498.521051][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.527936][ T3912] CR2: 0000200000000440 CR3: 000000000df38000 CR4: 00000000003526f0 [ 498.537301][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.545396][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.553429][ T3912] Kernel panic - not syncing: Fatal exception [ 498.559775][ T3912] Kernel Offset: disabled [ 498.564117][ T3912] Rebooting in 86400 seconds..