last executing test programs: 1m23.243400005s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 1m22.369613682s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 1m18.288649736s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 1m10.773752527s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 1m9.747254712s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 1m9.637679739s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 54.192544667s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 53.188764538s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 52.113368811s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 39.980834378s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 37.073982507s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 35.848896612s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 29.156618003s ago: executing program 0 (id=1272): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2d00000000", @ANYRES32=0x0, @ANYBLOB="100000002bc5fa3d1c0012800b0001006272696467650092dc502258dc34428bd980db1be795ff7468b450f5165a60731079baf728d0bff43f810d3f300ce66125aa375b1b036a6e72ef107836e89d83ba7bb04df17e0ec305788d91d9d073243e06c46c9d0831f604f882788df38c70105d0296669837b53f0000e2ffffffffffffff0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xf, 0x0, 0x0, 0xf, 0x3, {0x10, 0x4, 0x0, 0x7, 0xffff, 0x68, 0x4, 0x5, 0x2e, 0x8, @broadcast, @loopback, {[@lsrr={0x83, 0x2b, 0x61, [@multicast2, @remote, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) recvmmsg(r4, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/111, 0x6f}, {0x0}], 0x2}, 0x1000}, {{0x0, 0x0, 0x0}, 0x400000}], 0x2, 0x100, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000c1, 0x0) 28.256543769s ago: executing program 0 (id=1279): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r1, 0x0, 0x0, 0x40010082, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x1, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0xffffffff, 0x25dfdbfb, {0xc}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, 0x0, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) 27.306164204s ago: executing program 0 (id=1286): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00040000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200009000000"], 0x3c}}, 0x8000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00040000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200009000000"], 0x3c}}, 0x8000) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) (async) 27.028722977s ago: executing program 0 (id=1288): socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000001dc910268377822b08000300", @ANYRES32=r2], 0x2c}}, 0x808) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000001dc910268377822b08000300", @ANYRES32=r2], 0x2c}}, 0x808) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 26.727782369s ago: executing program 0 (id=1291): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffd) 26.678138944s ago: executing program 0 (id=1292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000071100d00000000009500000000000000e6582da86c9db092d988db292d7fcb1012058d64e0d3beb6f45f6d44ca13209286e2c5292ab72d1af005079bb5cacc5dda97a274f3dfdb3635e08adcd2e34af526108e1739cae0441844e7e169f98d4c61f31d73b749cb1dc866180f93a9bdc7e8f704a8de54e2610184c835360490bc3b839b1b3a4a90e52a8b4616d1cdcdd7d30c96eb3af966ab897194be1c6f295d9cd6519040a965de87c2a5e99a1b61c36ff721303ece640957e5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x3, 0x5, 0x68, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x7, 0x9d5d, 0x7}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x4, 0x17, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@noop, @timestamp={0x44, 0xc, 0x29, 0x0, 0x0, [0x3, 0x81]}, @end, @generic={0x83, 0x9, "3d645d0c9c7a1f"}, @generic={0x83, 0x4, "e2c6"}, @rr={0x7, 0x2b, 0x18, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @empty, @multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x8, [{@local}, {@multicast1, 0x1ff}]}, @lsrr={0x83, 0x17, 0xc2, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @private=0xa010100]}, @end]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r3, 0x4, 0x81, 0x4, 0x3, 0x8, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x8000, 0xdcf5, 0x7}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x70, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xbcef}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x80}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x227}, @ETHTOOL_A_COALESCE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 25.658445917s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 24.46552108s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 21.647349295s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 11.544185607s ago: executing program 32 (id=1292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000071100d00000000009500000000000000e6582da86c9db092d988db292d7fcb1012058d64e0d3beb6f45f6d44ca13209286e2c5292ab72d1af005079bb5cacc5dda97a274f3dfdb3635e08adcd2e34af526108e1739cae0441844e7e169f98d4c61f31d73b749cb1dc866180f93a9bdc7e8f704a8de54e2610184c835360490bc3b839b1b3a4a90e52a8b4616d1cdcdd7d30c96eb3af966ab897194be1c6f295d9cd6519040a965de87c2a5e99a1b61c36ff721303ece640957e5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x3, 0x5, 0x68, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x7, 0x9d5d, 0x7}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x4, 0x17, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@noop, @timestamp={0x44, 0xc, 0x29, 0x0, 0x0, [0x3, 0x81]}, @end, @generic={0x83, 0x9, "3d645d0c9c7a1f"}, @generic={0x83, 0x4, "e2c6"}, @rr={0x7, 0x2b, 0x18, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @empty, @multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x8, [{@local}, {@multicast1, 0x1ff}]}, @lsrr={0x83, 0x17, 0xc2, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @private=0xa010100]}, @end]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r3, 0x4, 0x81, 0x4, 0x3, 0x8, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x8000, 0xdcf5, 0x7}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x70, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xbcef}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x80}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x227}, @ETHTOOL_A_COALESCE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 11.468312503s ago: executing program 1 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 10.573155239s ago: executing program 3 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) close(r0) 9.189598141s ago: executing program 4 (id=872): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) 2.593694609s ago: executing program 2 (id=1363): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[@ANYBLOB="142000800b060102000000000000000900000000"], 0x14}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000840}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f9, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES64=r6, @ANYBLOB="0100000000000000000002000000090001007309"], 0x34}}, 0x85) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff6c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07000700000000418647440020000a00000008000300", @ANYRES32=r11, @ANYBLOB="1400508005000900020000000500020000000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="528a2defacd0"}]}, 0x40}, 0x1, 0x0, 0x0, 0x2050}, 0x800) 2.252402486s ago: executing program 2 (id=1364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x58, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="3a1e01", 0x3}], 0x1, 0x0, 0x0, 0x80}, 0x4c004) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x0, 0x0, 0x0) 2.238585345s ago: executing program 2 (id=1365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.097857406s ago: executing program 2 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x3f, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000777465f900000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) 1.916599584s ago: executing program 2 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0x1}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0x800}) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005200010300000000000000001c"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000380)="3e86e0a773bc6f6191062603de23fa4daf058e467ae43fe8cb4f44a00326052db8a5e02493fc68cc578085d6992ca84889687da44e09798b799f0f6320494c33e0bdf62bacc8a0381dedc7182eb2ca8a57b06d64c26b106a87ccdc2fc9d3a3ef63997e0550eecdca8c99410249fd8483058bb9301cd59023821b477eda6b24ec6c803ff8188a02c5b246e97ddc74612da36b4ab6c70a27db02b53ef6f07d505c6801c43bd8aee3b6cbf1ea85c72d65f780cb5c32322f36bf3ff1fbc418b7c518b56600c39c26ee8ee3459afb7ac7309c582d683ed3895a7d95ec98c79b8ef37047fc8a61d7aff40a5bf8c33c6f244fa3b94ef30102b5563c955962d0b21435da397f224d8a4f3184d4a9fa6840f5bb46da155c669684343b5c36ae5ff738f4b840dd07dbb1d47030a871ad3d2aec756dce3591fed295034bd96a24b5406cbedb024ccc00c44c21e39d2150f9308e262973a21cbe0da9ef2b7356b7c04196aa4b4fa113c5e0fe5a64c4b26982e03c780addb8a937d70d34b64fb4daa7129546ee5443af241f9887f48ba74a119cac615612ef760c43f83dc03d7fa9a71a2bdcf8f5b8a718693391e129055438d725fca4183c26e8e99d790fa8749180a859bea0f0b5866e66b86f371876722101578de0a4c809357024518998247867bfaed379957365edb55da7ec8f15fd25ee9a12e314b50be43ca96445d31cee9e9fa20fd60b1b35681b6955fc9dabd6f320a65fbb827e0f799700dc451fd3feda872b8ca593094e1cfca6c5fe941545ad22c490dbb64dc787757cb0a7af712ef7a22f1f3047f308e33042265a7824f43e0dc67ba3e04029ed01e9ef8618bda539e0f6d364b0544a907b7c0a8132995995e33ce35a51dde88ea920e726b309526da8e66931b0bedc3c343fda8b37d58a73d3baded056d1e8fe2d982401939b0b6a5be9e04113081b22d5e3305bae0598d759e5b633a8621c6983799d19ae06341e0c7a15603d964176d6b66806a8ea77da7d2dddc32caae5a243f6dcf25360f54d8d2543fa61e3c021c072e903d081a154dc20db77e5e02a2df7dc38aaa2ce0beda33ff67be5d8f1e39220602f37bea1b5cb059a90a1674d6897522895ed9970efaae5bf15218241ab9f858fbf8ab9ce78a2b7c8e5d3fb4821a656235aea2ddde03c1535d8d841ae9f376a870ba072ad9d1bf1d2d87f3af50b99877fbcb4daf5a75342a1b423028eb43c336dc3301226e62e9c3dad790cbae115b0b766b7e0f950cdd7f5243858b89a6319508f9761467d591d53376741bcaed2378bb4f65c8acae09296e01c22d2ac4a4f7cc223e4943bf9811253e430c728ccc50fa4b165c5da6e033105d5bc27fd67dedd62cb1888155a8585f218e6ce18840a6db8ba82918970c41b3207dccf053bcaeb67999d7291faee7c56e9d7f00419fe3227837928bc7fb918d02f8cf8936189be62aff607e3129fe30fb80cc1da810c2f08a4c93f4a0f89a58a4527d5b420078a410b60bb714738c663dd2bb8b1cff00f28e302218e2776315d5839e8fd7e4d43b370e753cc7a4ff9498de325eb489cb05b288e104d402bc7def3b5a31174ef831d688bce154db2fe2333327b25b518788d972eedad11bb42d0b7c729b787daae4c7cfc8e1b145eb3ab72ffe02e1613c10001c658e9ac794e9b2b6f25ecf1f99203d9eb9a98915b3576214610d49639d59580c81e7532cce5c2a72ec143a5d646413e0bfba916525e82e2bd4ad01d4e05906b1e8531fbc4b636b0f52302585e96a48d44f664434e957104efdafc9e60cb7f02a408cd7ada308f5f04fac6e74a59e02c1b5182a135ecc1334cf67c0cffa36d68e415135e28ff20a6f9829891e912d8f31ca3bd77ec4dd2352bca19abfcf9dda201ae48968b3228469d4c7824b9f4dfa98557feae02ed163d8266e0dab7f7e5817bd4f60b71cbdf217ec6b80ca9cce819ca43dc52dabb6945411d3a639c8470b6d87a78fb0cc71fa674de1bab44d8034765a79065daa016cc00e9cf0daa35997a5adcca3149368bed209e17989e1f6173ae6373db7f52ced6217abf7371b646dece92eeda33105878affa4c0803fd06a8a6ae4c12707a5ecf620fd6f35c3dfd21375cc8810c7796da9a58adea6ede9df1b19bdf4e4ffc1d786ca4f63ae4128d00180fd6f7d92fb194d79c244b1b23ee6496e0024e8d2e14c0272cc68bf6ee0b46f2f5c085d33ac27d5a495e5bea616e85f1f97099e31a1807751206a3fea1cd5b84a51381931f54ae043006e39664927b1492a83712e21bff36a1667656e07758d241d7b7c7d31da33616c869991aa7dc895ee796ef8183ebe35948c43bb170b159145365f86500901bf53e41eedd90d1714ac2b1c170a54a5f26ae0cba6dbc0669f3cf069637f84fb4fd671c505ea581cd26571a2b93c46f120ce7b349f947f084fca49fa35d46837932eeaef68e1ed2ace3e0a0d856438af3d4af65819194359554c00754403226f81996b0a2a9bafaaf52712734b8e995bac96ec1ab6edf63499b48599dea288c9d5995efcce7eb789bb0a1322c5050f8a5ab325e21b0a3b7820c12ce3450d542816ad29dd2382c16419b0c12e3551d80c72b67ad617acd8d0b22f5344f1acb0d2b776b653aa32f1251e9e962170523448801ce66af16663784e20d8367a24120fafc89b1d0370d93aa54e30da388076a9ab322c70d06828bf19dbc0f9610277d6d7beb31d714a58d55168c40b2ca9b2c5b34a03b3bcb7f917fbae04de3eab64297d84b67009a16415d67a2d2f4ad747bb695d81f1435e02056c431c9e60ab44336cb18907f31131234604f7e5a0ca287a1b4968a326745f74d25deed68f8fdb8690f80f43d84d8fadd26b99aa76a0d320fc82741e53b2314d77a84ba5dc0a50a34d2610de10de18ec6bd76c7ab6bc049075ccc06a513c5b90a898bd44285c8fff2f1b4365c27584a66cf1e8249931f3852585e2fdbd05964720a1c188a7a30b8d87515d68bfe6c7f29eb7144316c9237b121b24f78c7a3472128e0c391c99afae0ad4ce9899e7afd1786319ab17c63694dc18880a0db7d00896adab648660661b3f80f0d297c8b74846136a02aae189d90741eead3a46f293268981f5f07789f5c6118379fcd47932327f1f32fffe9ede4fe4ea14878f2e983351e6aa51251ab917eff7139bc12697f3d5b214a69f5989d7e8f5442f0e36c2787c647e45b9cbe7ddff68467c238b6410fd6a05d0d435cdf171b3a61f98a41eeac2d50d2a0bac23077e5779f8abcf13a2e94af4e222fb8161c85ab0628fe668b6b5c1924f1ef397bf50bc395c4e6719dea2a642b8510bcd4a25735c8f15dee9e27d672c37bb91852e90800d896ca08b6e33151d0730feb814736c1456b61b61a71440f2f59f92f9146117f3764403ff8c25a0d13e2c13fa6120c6e9a2d56fc092a5565ea87bee5d31f5f5ab8cdf1bf9b957dbe0c65e6cd8d1ba57088f6099796799686baf5bc4315fcda598d02b7c0131bcbaf25834b01a12bc8c74d0504cb7631ab5996711fe4ea6eb01fd9560c9c3d6742c2f3ac7ceb5eb4460c77bc4703073b4df13172e7631488af6768e77d3883b3c778127f87f8f21e1a3150e753b871225cb98a1350db342a7f1bd4783be8a9907e21fd471c70570896f9ad80ab12b66cf87ab9026565832fac04dc1a3b32c6dae9b625c77990ed11803d2adabb33967bd8935c283d79cb549695baa0eb3a1558c27eddd1adc9e1792aee3cfcaaa1833b9e8f11767e44bde35417cf26fa28739038ef7bf0a3018c5e4db793fc1d4ac883979c92dce2b4305a496896f378bdcb27ac9ef80abf113d324e3b2b123164c9b8ae07383c1dbe43a3f1316ef475328208bec7f24c2d6d65c74c5220314ad8e8f4df5d78bf7e2baeed155166c7031c51a7cb5cd5f9da6da572ef50fa57569507181e8a28f90e30e36dc26f880330cc653ddc77a0490f77d73372830bd711afa11cd327808b1fe4590a56bafe977b77e063158cb9740135d983cbc894c761bf1dc7fb24344ef2aeef567acfb6bfe92a50118d42e4af9b02e41383eff5bf8762ba8c22ce12c285f670e396e8ff6391fc426c1b35a0a0851d91e68ff88f44e2d9e642a8941f9793dd40c6f1ca78f9eee5d018eaecb1412e9560428e5b40cd8d8593d0aa5de06a2a1ef79821e27b796dbb35f3e8c222a298b65688901159f3e217e4a29a7019b22312fa453227d1f51be848fb097f7a48289e057a65369dcfab8fa3c617ee20ec7cbeb4774683b66070439b4301f2403afe253eba5cb07fbcc40c46a60db6e394deae8c05cda81dec16f22b84d62aef0ec79c4b89dd4a65919ac746fbc3966c5c8d2473b28cff86c39824cb6ccbf8abcb8cc00f21d2a3c00362f1a88bbdabfdd858eba489a2a51ea0649f265f89eed0b03951633562f28cfdc3f0659d03bfb5cb12af8a937aecd772f80a168205344d99ba78158b15e6cf531b021f9f26a549f17bba4710026370ca2d8c6a6464a5dc3c07eae6d7c09f4a240ca551c893a4ef17a7b1c40d476a757c0053607d87cf245afb183077d54cbc37ac04360e8645ea601c640bed1d4ab2452ef76fa7217741c77c048c24346e237b979e23e68a1bf5f88ce5815a92345d97f81f20dcb592dec3ee091c022eda7fd4ab39c733e094ce22ee2f7f8823f2a3f8798f34f34506c0a3a51be0da40f8ba4f50e0abda8b0f660dcd0a3f3dbb4c3fdbc41ccf05c2b6e399c9f3ecc004ac31d19c8119aaca44b82af73aae2473386bc320b49974e792a5d845fe5e93da9dfc75356bb844eab2e7dfe01dbe25a5eaf5bcca282e4215a308c443eae2fd1786c3e8229927eaaa85bf6d7e13826b45147d4bcafb65342bdf194a26553d13d9962bd2894b53658898f4ceeaf74060a7765f344e5cb6df0b77538b198bc548fc3c2afcdebbdf824b9991a9506bfcc660d5b04d34ef71524327e56f7dad4a9ae5ac8f951e1439173c400ed4a5bdca7eefad68126168b60ed33c5d238eec280fb5d302ea1d8befca3996fd09e2e5a13ee4aa53ed8fe12caff5023767d845b70f997de6860f5e32ce635eb9e3b6a061130111eed53798dbb55906578eacd384a474581cea6b68e2e7f3e3a360587d6a3343bb0da11437c41a9d0a7fb64f35f50ad5f3f530d0665ba62acb278386d2032c3bf889126861ef8f6edac0ae7c2ca79c6f0b7c90841023f2d882ff95e9b79c6efd9d495c0dee06f2e355504b2d8d35550f0517e03c738622e029b87236cbdfe0b8f7368f72afabdd5459482e1f4d2ca35233742225b4fab99ec043663aa41f3f34d4af2207f53de5b799334c2165f611ac3028cb50538e98f78c18602ac4be4dfd5677bc2189799ebd187c16bf8b948a1e3ad174b7b23049b3c35304d552f96f7a2a4f033e7d09769a5df0f821135d768aa1e100f2c6efb3f4df6253cbe332d55a4cc2147e7e065345a52635e842c49582258d86735b7f66d04effe3742e2d17d9d2ef14098b45987ad2a791697480990dc290b8dbdb6aa4af6c2c6de5cfbd18fd78eb6ec00459a0adeb6ecd9f66ad4425f547d9f3133b7a9ed5e78eb9bb6a62e9aee641ac5315e6a8bc1cc889d577a11b2e6ee5dd2699d0379b7f4786dcb2a88d7bc93895d6e86eb58501fe70955eb97db46d6cfb2bf4958f3c39294cde72d18e48f03e4b53f60f5ca78486501ca136c5f8bdd1bb2edfe76a7606b15fa4d13b252a7bf3c7b587ba7711d73fb568d797e32928000775ef0236b1e6670d00ec3c007d6e1fd06e923bc0074e6d909a9bf6aca5262ebe1e0054102b074164", &(0x7f0000000200)=""/189, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000380)="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", &(0x7f0000000200)=""/189, 0x4}, 0x20) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) close(r3) 0s ago: executing program 2 (id=1368): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) bind$netlink(r0, 0x0, 0x0) (async) bind$netlink(r0, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbb, &(0x7f0000000100)={@multicast, @random="00e300", @void, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}], @llc={@snap={0x3, 0x1, "9126", "a2d74e", 0x8906, "1fbe60a628086623b0e756653f79ce044fe77896f28ab6eefe13d03551974c5bb4ac7348d32b7e8b6e4cafe20e60a387d150b87cb9694e84c21d3d4d2c70b7cdb6061ba9db11759f267e354957b4b5b4e8bb87b662e5893f72e3a43cc64fa28533678eda72be0e4d858377fb0bcdc50b0f980367c58dd7d1577a5af19f0f0bebf78ddf59fe6a05b442549fa53db90114cb59519689a5ef35"}}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04080400000000001800128008000100677470000c000280080002006321b1dd7c2742cab346d9c3a3a68c597f090d1eddb3c25a7bc4b82dd15ed7afa43cd7a8e116936e91b757cf954e39f4a84fb396be9643f3ccd864f52b011e9b3addfb10c56b4f1c85682b94ae90eb37ed19825c81f8283a1c036c437e4bdd8622983dc2d2f7304ded659c6650941084b4762930331c3ee8bb3339724edf127bd4f51389fac7931f4ca32dac9c61374a0776e83c533f8de4e5", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04080400000000001800128008000100677470000c000280080002006321b1dd7c2742cab346d9c3a3a68c597f090d1eddb3c25a7bc4b82dd15ed7afa43cd7a8e116936e91b757cf954e39f4a84fb396be9643f3ccd864f52b011e9b3addfb10c56b4f1c85682b94ae90eb37ed19825c81f8283a1c036c437e4bdd8622983dc2d2f7304ded659c6650941084b4762930331c3ee8bb3339724edf127bd4f51389fac7931f4ca32dac9c61374a0776e83c533f8de4e5", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) kernel console output (not intermixed with test programs): ace: batadv_slave_1 [ 180.771518][ T36] veth1_macvtap: left promiscuous mode [ 180.779354][ T36] veth0_macvtap: left promiscuous mode [ 180.788561][ T36] veth1_vlan: left promiscuous mode [ 180.793997][ T36] veth0_vlan: left promiscuous mode [ 181.362500][ T36] team0 (unregistering): Port device team_slave_1 removed [ 181.432766][ T36] team0 (unregistering): Port device team_slave_0 removed [ 181.765092][ T5836] Bluetooth: hci1: command tx timeout [ 181.915036][ T5836] Bluetooth: hci2: command tx timeout [ 182.062162][ T9624] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 182.089274][ T9624] team0: Device ipvlan2 is already an upper device of the team interface [ 182.168294][ T9643] bond5: entered allmulticast mode [ 182.174286][ T9643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.235894][ T5836] Bluetooth: hci3: command tx timeout [ 182.406620][ T9652] SET target dimension over the limit! [ 182.548747][ T9582] chnl_net:caif_netlink_parms(): no params data found [ 182.701031][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 182.925976][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 182.983678][ T9582] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.991609][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.004744][ T9582] bridge_slave_0: entered allmulticast mode [ 183.014045][ T9582] bridge_slave_0: entered promiscuous mode [ 183.061243][ T9582] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.069822][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.078789][ T9582] bridge_slave_1: entered allmulticast mode [ 183.086786][ T9582] bridge_slave_1: entered promiscuous mode [ 183.126283][ T9686] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 183.157840][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.288740][ T9582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.321272][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.377947][ T9582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.385278][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 183.428236][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.435539][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.442689][ T9578] bridge_slave_0: entered allmulticast mode [ 183.453523][ T9578] bridge_slave_0: entered promiscuous mode [ 183.490005][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.521736][ T9582] team0: Port device team_slave_0 added [ 183.543338][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1081'. [ 183.555998][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.563174][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.576303][ T9578] bridge_slave_1: entered allmulticast mode [ 183.584114][ T9578] bridge_slave_1: entered promiscuous mode [ 183.620609][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.635140][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.643031][ T9592] bridge_slave_0: entered allmulticast mode [ 183.651202][ T9592] bridge_slave_0: entered promiscuous mode [ 183.662535][ T9582] team0: Port device team_slave_1 added [ 183.738780][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.785487][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.792882][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.806393][ T9592] bridge_slave_1: entered allmulticast mode [ 183.814770][ T9592] bridge_slave_1: entered promiscuous mode [ 183.835122][ T5836] Bluetooth: hci1: command tx timeout [ 183.851855][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.865771][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.892839][ T9582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.913915][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.943748][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.994995][ T5836] Bluetooth: hci2: command tx timeout [ 184.006445][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.020280][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.048595][ T9582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.085144][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.157494][ T9578] team0: Port device team_slave_0 added [ 184.172904][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.253487][ T9578] team0: Port device team_slave_1 added [ 184.315366][ T5836] Bluetooth: hci3: command tx timeout [ 184.382515][ T9592] team0: Port device team_slave_0 added [ 184.398083][ T9582] hsr_slave_0: entered promiscuous mode [ 184.404751][ T9582] hsr_slave_1: entered promiscuous mode [ 184.411225][ T9582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.419018][ T9582] Cannot create hsr debugfs directory [ 184.448038][ T9743] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 184.457000][ T47] IPVS: starting estimator thread 0... [ 184.459260][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.474343][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.506825][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.520660][ T9592] team0: Port device team_slave_1 added [ 184.569858][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.577691][ T9744] IPVS: using max 43 ests per chain, 103200 per kthread [ 184.587868][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.614886][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.701495][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.708605][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.737799][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.808098][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.828626][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.835973][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.864262][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.946881][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.990110][ T9578] hsr_slave_0: entered promiscuous mode [ 185.000364][ T9578] hsr_slave_1: entered promiscuous mode [ 185.007342][ T9578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.015204][ T9578] Cannot create hsr debugfs directory [ 185.038992][ T9750] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 185.073170][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 185.090665][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191582][ T9750] team0: Port device geneve0 added [ 185.269914][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.299654][ T9592] hsr_slave_0: entered promiscuous mode [ 185.306433][ T9592] hsr_slave_1: entered promiscuous mode [ 185.313044][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.321037][ T9592] Cannot create hsr debugfs directory [ 185.759022][ T9766] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.783398][ T36] bridge_slave_1: left allmulticast mode [ 185.789538][ T36] bridge_slave_1: left promiscuous mode [ 185.795515][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.807339][ T36] bridge_slave_0: left allmulticast mode [ 185.813013][ T36] bridge_slave_0: left promiscuous mode [ 185.818960][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.837363][ T36] bridge_slave_1: left allmulticast mode [ 185.850142][ T36] bridge_slave_1: left promiscuous mode [ 185.859427][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.877490][ T36] bridge_slave_0: left allmulticast mode [ 185.889223][ T36] bridge_slave_0: left promiscuous mode [ 185.895162][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.926128][ T5836] Bluetooth: hci1: command tx timeout [ 186.077071][ T5836] Bluetooth: hci2: command tx timeout [ 186.402913][ T5836] Bluetooth: hci3: command tx timeout [ 186.668774][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.679591][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.693101][ T36] bond0 (unregistering): Released all slaves [ 186.782539][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.793180][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.809118][ T36] bond0 (unregistering): Released all slaves [ 186.910014][ T9772] openvswitch: netlink: Message has 8 unknown bytes. [ 187.040437][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 187.361747][ T9791] lo: left promiscuous mode [ 187.502213][ T36] hsr_slave_0: left promiscuous mode [ 187.518304][ T36] hsr_slave_1: left promiscuous mode [ 187.524354][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.558444][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.566406][ T9800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.575445][ T9800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.584944][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.592384][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.632914][ T36] hsr_slave_0: left promiscuous mode [ 187.672573][ T36] hsr_slave_1: left promiscuous mode [ 187.679246][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.725111][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.757207][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.770856][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.780137][ T9816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.790733][ T9816] netlink: 'syz.2.1111': attribute type 10 has an invalid length. [ 187.839372][ T36] veth1_macvtap: left promiscuous mode [ 187.845099][ T36] veth0_macvtap: left promiscuous mode [ 187.850799][ T36] veth1_vlan: left promiscuous mode [ 187.856206][ T36] veth0_vlan: left promiscuous mode [ 187.857191][ T9819] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1111'. [ 187.875465][ T36] veth1_macvtap: left promiscuous mode [ 187.881036][ T36] veth0_macvtap: left promiscuous mode [ 187.887291][ T36] veth1_vlan: left promiscuous mode [ 187.892629][ T36] veth0_vlan: left promiscuous mode [ 188.005088][ T5836] Bluetooth: hci1: command tx timeout [ 188.155271][ T5836] Bluetooth: hci2: command tx timeout [ 188.383524][ T36] team0 (unregistering): Port device team_slave_1 removed [ 188.418922][ T36] team0 (unregistering): Port device team_slave_0 removed [ 188.493269][ T5836] Bluetooth: hci3: command tx timeout [ 189.034533][ T36] team0 (unregistering): Port device team_slave_1 removed [ 189.079433][ T36] team0 (unregistering): Port device team_slave_0 removed [ 189.432183][ T9816] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.441612][ T1318] bond0: (slave dummy0): interface is now down [ 189.456340][ T1151] bond0: (slave dummy0): interface is now down [ 189.476102][ T1318] bond0: (slave dummy0): interface is now down [ 189.489730][ T1318] bond0: now running without any active interface! [ 189.590551][ T9824] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1114'. [ 189.670251][ T9828] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 189.680557][ T9828] veth0_macvtap: left promiscuous mode [ 189.893367][ T9834] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 190.064064][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 190.074020][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 190.620026][ T9592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.658090][ T9592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.672556][ T9592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.727714][ T9592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.746496][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'. [ 190.791062][ T9853] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 190.800062][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'. [ 190.820186][ T9856] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 190.831213][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'. [ 190.871376][ T9582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.893340][ T9582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.925989][ T9582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.941308][ T9582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.033445][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 191.162644][ T9578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.188460][ T9578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.213853][ T9578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.268037][ T9578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.359176][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.484752][ T9882] xt_hashlimit: size too large, truncated to 1048576 [ 191.551920][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.592300][ T9884] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1133'. [ 191.620308][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.627478][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.660800][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.668091][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.800366][ T9582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.922741][ T9582] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.964205][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.000701][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.007965][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.056925][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.069122][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 192.081411][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.088715][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.120528][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.127720][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.171242][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.178440][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.410947][ T9899] unknown channel width for channel at 909000KHz? [ 192.441954][ T9899] unknown channel width for channel at 909000KHz? [ 192.547877][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.623885][ T9909] FAULT_INJECTION: forcing a failure. [ 192.623885][ T9909] name failslab, interval 1, probability 0, space 0, times 1 [ 192.676505][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.0.1140 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 192.676536][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.676553][ T9909] Call Trace: [ 192.676565][ T9909] [ 192.676574][ T9909] dump_stack_lvl+0x189/0x250 [ 192.676624][ T9909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.676653][ T9909] ? __pfx__printk+0x10/0x10 [ 192.676680][ T9909] ? __pfx___might_resched+0x10/0x10 [ 192.676716][ T9909] should_fail_ex+0x414/0x560 [ 192.676753][ T9909] should_failslab+0xa8/0x100 [ 192.676781][ T9909] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 192.676808][ T9909] ? __alloc_skb+0x112/0x2d0 [ 192.676831][ T9909] __alloc_skb+0x112/0x2d0 [ 192.676854][ T9909] netlink_sendmsg+0x5c6/0xb30 [ 192.676895][ T9909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.676929][ T9909] ? aa_sock_msg_perm+0x94/0x160 [ 192.676951][ T9909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.676973][ T9909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.677004][ T9909] __sock_sendmsg+0x219/0x270 [ 192.677034][ T9909] ____sys_sendmsg+0x505/0x830 [ 192.677062][ T9909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.677095][ T9909] ? import_iovec+0x74/0xa0 [ 192.677123][ T9909] ___sys_sendmsg+0x21f/0x2a0 [ 192.677148][ T9909] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.677209][ T9909] ? __fget_files+0x2a/0x420 [ 192.677234][ T9909] ? __fget_files+0x3a0/0x420 [ 192.677271][ T9909] __x64_sys_sendmsg+0x19b/0x260 [ 192.677296][ T9909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.677336][ T9909] ? do_syscall_64+0xba/0x210 [ 192.677361][ T9909] do_syscall_64+0xf6/0x210 [ 192.677382][ T9909] ? clear_bhb_loop+0x45/0xa0 [ 192.677408][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.677433][ T9909] RIP: 0033:0x7f86b878e969 [ 192.677456][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.677473][ T9909] RSP: 002b:00007f86b95cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.677499][ T9909] RAX: ffffffffffffffda RBX: 00007f86b89b5fa0 RCX: 00007f86b878e969 [ 192.677514][ T9909] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 192.677526][ T9909] RBP: 00007f86b95cf090 R08: 0000000000000000 R09: 0000000000000000 [ 192.677539][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.677550][ T9909] R13: 0000000000000000 R14: 00007f86b89b5fa0 R15: 00007ffc27724178 [ 192.677593][ T9909] [ 192.725846][ T9582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.034299][ T9592] veth0_vlan: entered promiscuous mode [ 193.058817][ T9592] veth1_vlan: entered promiscuous mode [ 193.098961][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.254038][ T9592] veth0_macvtap: entered promiscuous mode [ 193.272543][ T9578] veth0_vlan: entered promiscuous mode [ 193.290009][ T9592] veth1_macvtap: entered promiscuous mode [ 193.368469][ T9578] veth1_vlan: entered promiscuous mode [ 193.396021][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.447636][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.459777][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.472583][ T9927] unknown channel width for channel at 909000KHz? [ 193.493819][ T9927] unknown channel width for channel at 909000KHz? [ 193.503254][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.519012][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.530977][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.550705][ T9592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.561543][ T9592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.571241][ T9592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.580917][ T9592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.650256][ T9578] veth0_macvtap: entered promiscuous mode [ 193.691547][ T9578] veth1_macvtap: entered promiscuous mode [ 193.728335][ T9592] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 193.745240][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.771582][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.784271][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.806622][ T9582] veth0_vlan: entered promiscuous mode [ 193.851986][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.863257][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.879274][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.889990][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.907458][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.924602][ T9582] veth1_vlan: entered promiscuous mode [ 193.939452][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.951540][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.951572][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.984095][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.994333][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.006579][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.018466][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.062539][ T9578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.073631][ T9578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.083929][ T9578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.092948][ T9578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.131908][ T9582] veth0_macvtap: entered promiscuous mode [ 194.188745][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202805][ T9582] veth1_macvtap: entered promiscuous mode [ 194.338505][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.349428][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.359487][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.371422][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.381930][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.392423][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.403566][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.421952][ T9578] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 194.432401][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.472018][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.499733][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.513721][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.525627][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.535838][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.546488][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.559913][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.576352][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.605220][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.693638][ T9582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.715846][ T9582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.724584][ T9582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.754904][ T9582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.860851][ T1012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.893702][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.909996][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.989189][ T1012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.171160][ T1012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.293774][ T9582] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 195.335389][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.408571][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.451497][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.462926][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.476125][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.492140][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.501214][ T1012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.516626][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.525573][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.760129][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.775167][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.892871][ T1012] bridge_slave_1: left allmulticast mode [ 195.898792][ T1012] bridge_slave_1: left promiscuous mode [ 195.904612][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.917588][ T1012] bridge_slave_0: left allmulticast mode [ 195.923261][ T1012] bridge_slave_0: left promiscuous mode [ 195.929478][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.247345][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.258080][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.268141][ T1012] bond0 (unregistering): Released all slaves [ 196.480259][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 196.572598][ T1012] hsr_slave_0: left promiscuous mode [ 196.581859][ T1012] hsr_slave_1: left promiscuous mode [ 196.588277][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.595792][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.646038][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.653518][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.774859][ T1012] veth1_macvtap: left promiscuous mode [ 196.803318][ T1012] veth0_macvtap: left promiscuous mode [ 196.815184][ T1012] veth1_vlan: left promiscuous mode [ 196.833832][ T1012] veth0_vlan: left promiscuous mode [ 197.168711][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.179187][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.188305][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.198616][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.214612][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.597352][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 197.598540][ T5834] Bluetooth: hci1: command tx timeout [ 197.718562][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 197.748523][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.772407][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.789353][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.810149][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.818420][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.291525][T10013] FAULT_INJECTION: forcing a failure. [ 198.291525][T10013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.297253][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.319375][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.320091][T10013] CPU: 1 UID: 0 PID: 10013 Comm: syz.2.1163 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 198.320120][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.320133][T10013] Call Trace: [ 198.320141][T10013] [ 198.320150][T10013] dump_stack_lvl+0x189/0x250 [ 198.320184][T10013] ? __lock_acquire+0xaac/0xd20 [ 198.320216][T10013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.320246][T10013] ? __pfx__printk+0x10/0x10 [ 198.320267][T10013] ? __might_fault+0xb0/0x130 [ 198.320307][T10013] should_fail_ex+0x414/0x560 [ 198.320343][T10013] _copy_from_iter+0x1db/0x15a0 [ 198.320375][T10013] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 198.320398][T10013] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 198.320426][T10013] ? __pfx__copy_from_iter+0x10/0x10 [ 198.320451][T10013] ? __build_skb_around+0x257/0x3e0 [ 198.320477][T10013] ? netlink_sendmsg+0x642/0xb30 [ 198.320506][T10013] ? skb_put+0x11b/0x210 [ 198.320530][T10013] netlink_sendmsg+0x6b2/0xb30 [ 198.320571][T10013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.320606][T10013] ? aa_sock_msg_perm+0x94/0x160 [ 198.320629][T10013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.320652][T10013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.320683][T10013] __sock_sendmsg+0x219/0x270 [ 198.320715][T10013] ____sys_sendmsg+0x505/0x830 [ 198.320744][T10013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.320776][T10013] ? import_iovec+0x74/0xa0 [ 198.320807][T10013] ___sys_sendmsg+0x21f/0x2a0 [ 198.320832][T10013] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.320896][T10013] ? __fget_files+0x2a/0x420 [ 198.320923][T10013] ? __fget_files+0x3a0/0x420 [ 198.320961][T10013] __x64_sys_sendmsg+0x19b/0x260 [ 198.320987][T10013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.321028][T10013] ? do_syscall_64+0xba/0x210 [ 198.321053][T10013] do_syscall_64+0xf6/0x210 [ 198.321082][T10013] ? clear_bhb_loop+0x45/0xa0 [ 198.321108][T10013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.321129][T10013] RIP: 0033:0x7f719698e969 [ 198.321146][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.321176][T10013] RSP: 002b:00007f719776e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.321196][T10013] RAX: ffffffffffffffda RBX: 00007f7196bb5fa0 RCX: 00007f719698e969 [ 198.321211][T10013] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 198.321222][T10013] RBP: 00007f719776e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.321234][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.321246][T10013] R13: 0000000000000000 R14: 00007f7196bb5fa0 R15: 00007ffd3e659418 [ 198.321277][T10013] [ 198.424776][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 198.433549][ T9978] bridge_slave_0: entered allmulticast mode [ 198.616125][ T9978] bridge_slave_0: entered promiscuous mode [ 198.624809][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.632560][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.640130][ T9978] bridge_slave_1: entered allmulticast mode [ 198.648418][ T9978] bridge_slave_1: entered promiscuous mode [ 198.705717][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1165'. [ 198.763362][T10028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1165'. [ 198.783345][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.859982][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.990860][T10030] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 199.003721][ T9978] team0: Port device team_slave_0 added [ 199.086570][ T9978] team0: Port device team_slave_1 added [ 199.120090][T10034] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 199.138672][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.145731][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.175891][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.188472][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.200624][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.227451][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.262334][T10034] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 199.284674][ T5834] Bluetooth: hci2: command tx timeout [ 199.332809][T10038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.361763][T10042] xt_TCPMSS: Only works on TCP SYN packets [ 199.472701][ T9978] hsr_slave_0: entered promiscuous mode [ 199.481010][ T9978] hsr_slave_1: entered promiscuous mode [ 199.490113][ T9978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.498136][ T9978] Cannot create hsr debugfs directory [ 199.646067][ T1012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.685619][ T5834] Bluetooth: hci1: command tx timeout [ 199.701709][T10001] chnl_net:caif_netlink_parms(): no params data found [ 199.747662][ T1012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.780225][T10008] chnl_net:caif_netlink_parms(): no params data found [ 199.869237][ T1012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.925120][ T5834] Bluetooth: hci3: command tx timeout [ 200.000209][ T1012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.157682][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.164993][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.172229][T10001] bridge_slave_0: entered allmulticast mode [ 200.186753][T10001] bridge_slave_0: entered promiscuous mode [ 200.202963][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.210244][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.218430][T10001] bridge_slave_1: entered allmulticast mode [ 200.226407][T10001] bridge_slave_1: entered promiscuous mode [ 200.296312][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.304465][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.312075][T10008] bridge_slave_0: entered allmulticast mode [ 200.321308][T10008] bridge_slave_0: entered promiscuous mode [ 200.330009][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.337306][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.346426][T10008] bridge_slave_1: entered allmulticast mode [ 200.353828][T10008] bridge_slave_1: entered promiscuous mode [ 200.462599][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.497403][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.569993][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.616887][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.753581][T10001] team0: Port device team_slave_0 added [ 200.764654][T10001] team0: Port device team_slave_1 added [ 200.866772][T10008] team0: Port device team_slave_0 added [ 200.913160][T10008] team0: Port device team_slave_1 added [ 200.970926][ T1012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.998413][T10086] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1179'. [ 201.009158][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.017157][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.049765][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.161627][T10086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.177465][T10086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.191067][T10086] bond0 (unregistering): Released all slaves [ 201.236056][ T1012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.252844][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.260319][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.287532][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.342559][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.351430][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.375037][ T5834] Bluetooth: hci2: command tx timeout [ 201.382921][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.440087][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.456129][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.487256][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.556085][ T1012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.627169][T10001] hsr_slave_0: entered promiscuous mode [ 201.647821][T10001] hsr_slave_1: entered promiscuous mode [ 201.667637][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.681270][T10001] Cannot create hsr debugfs directory [ 201.758054][ T5834] Bluetooth: hci1: command tx timeout [ 201.787160][ T1012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.929271][T10008] hsr_slave_0: entered promiscuous mode [ 201.936925][T10008] hsr_slave_1: entered promiscuous mode [ 201.943299][T10008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.951823][T10008] Cannot create hsr debugfs directory [ 201.995450][ T5834] Bluetooth: hci3: command tx timeout [ 202.073453][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 202.219367][ T9978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.253698][ T9978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.313341][ T9978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.328001][ T9978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.369074][ T1012] bridge_slave_1: left allmulticast mode [ 202.374802][ T1012] bridge_slave_1: left promiscuous mode [ 202.383518][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.392865][ T1012] bridge_slave_0: left allmulticast mode [ 202.399261][ T1012] bridge_slave_0: left promiscuous mode [ 202.405664][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.427520][ T1012] bridge_slave_1: left allmulticast mode [ 202.433187][ T1012] bridge_slave_1: left promiscuous mode [ 202.439494][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.450359][ T1012] bridge_slave_0: left allmulticast mode [ 202.456881][ T1012] bridge_slave_0: left promiscuous mode [ 202.462559][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.062772][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.080204][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.092719][ T1012] bond0 (unregistering): Released all slaves [ 203.180260][T10133] sctp: [Deprecated]: syz.0.1194 (pid 10133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.180260][T10133] Use struct sctp_sack_info instead [ 203.202553][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 203.239122][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.253962][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.264533][ T1012] bond0 (unregistering): Released all slaves [ 203.435784][ T5834] Bluetooth: hci2: command tx timeout [ 203.521959][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 203.835690][ T5834] Bluetooth: hci1: command tx timeout [ 203.913465][ T1012] hsr_slave_0: left promiscuous mode [ 203.922128][ T1012] hsr_slave_1: left promiscuous mode [ 203.933775][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.941511][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.949737][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.957586][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.971253][ T1012] hsr_slave_0: left promiscuous mode [ 203.977520][ T1012] hsr_slave_1: left promiscuous mode [ 203.983872][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.991350][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.999603][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.007628][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.042681][ T1012] veth1_macvtap: left promiscuous mode [ 204.048685][ T1012] veth0_macvtap: left promiscuous mode [ 204.054391][ T1012] veth1_vlan: left promiscuous mode [ 204.059831][ T1012] veth0_vlan: left promiscuous mode [ 204.067349][ T1012] veth1_macvtap: left promiscuous mode [ 204.072895][ T1012] veth0_macvtap: left promiscuous mode [ 204.078562][ T5834] Bluetooth: hci3: command tx timeout [ 204.084635][ T1012] veth1_vlan: left promiscuous mode [ 204.090112][ T1012] veth0_vlan: left promiscuous mode [ 204.610085][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 204.650929][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 204.991937][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 205.427984][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 205.467207][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 205.515331][ T5834] Bluetooth: hci2: command tx timeout [ 205.819906][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.917209][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.951915][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.959113][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.991514][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.998679][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.049510][T10171] unknown channel width for channel at 909000KHz? [ 206.066546][T10171] unknown channel width for channel at 909000KHz? [ 206.104062][ T9978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.155721][ T5834] Bluetooth: hci3: command tx timeout [ 206.441611][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.503351][T10008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.527407][T10008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.549060][T10008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.578779][T10008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.609152][T10185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1204'. [ 206.765157][ T9978] veth0_vlan: entered promiscuous mode [ 206.771915][T10001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.809692][T10001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.844447][T10001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.861699][T10001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.906491][ T9978] veth1_vlan: entered promiscuous mode [ 207.030914][ T9978] veth0_macvtap: entered promiscuous mode [ 207.064228][ T9978] veth1_macvtap: entered promiscuous mode [ 207.156606][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.168591][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.180614][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.217345][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.226968][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.239330][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.250632][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.292476][T10008] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.307963][ T9978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.317822][ T9978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.326673][ T9978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.340546][ T9978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.358377][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.383939][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.391239][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.437743][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.444964][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.533622][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.646347][T10225] netlink: 'syz.0.1215': attribute type 13 has an invalid length. [ 207.651211][ T9978] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 207.669466][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.701795][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.709035][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.729669][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.736869][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.751749][T10225] macvtap0: entered allmulticast mode [ 207.758099][T10225] macvtap0: refused to change device tx_queue_len [ 207.778875][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.816005][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.913731][T10232] netlink: 'syz.0.1216': attribute type 4 has an invalid length. [ 207.914657][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.954310][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.101465][T10238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1218'. [ 208.239989][T10244] netlink: 'syz.2.1219': attribute type 8 has an invalid length. [ 208.271839][T10008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.370368][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.418525][T10249] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 208.452480][T10249] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 208.474558][T10251] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1221'. [ 208.497072][T10251] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1221'. [ 208.650443][T10001] veth0_vlan: entered promiscuous mode [ 208.693538][T10001] veth1_vlan: entered promiscuous mode [ 208.728966][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 208.744994][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 208.753888][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 208.841567][ T1318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.870493][T10008] veth0_vlan: entered promiscuous mode [ 208.933804][T10001] veth0_macvtap: entered promiscuous mode [ 208.949975][T10008] veth1_vlan: entered promiscuous mode [ 208.980483][T10001] veth1_macvtap: entered promiscuous mode [ 209.028317][ T1318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.058596][T10261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.112511][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.129735][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.140295][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.152706][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.167886][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.192495][ T1318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.238121][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.249073][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.260628][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.271438][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.283467][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.330348][ T1318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.360013][T10001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.369448][T10001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.382633][T10001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.391556][T10001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.418433][T10008] veth0_macvtap: entered promiscuous mode [ 209.450028][T10008] veth1_macvtap: entered promiscuous mode [ 209.501802][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.513219][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.575006][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.598470][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.615080][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.637660][T10264] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 209.649164][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.671344][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 209.673148][T10008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.775780][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.815987][T10270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1225'. [ 209.826944][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.858216][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.889064][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.924892][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.955224][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.986536][T10008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.126232][T10001] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 210.154412][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.200996][T10008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.225608][T10008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.234358][T10008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.265561][T10008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.282191][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.301989][ T1318] bridge_slave_1: left allmulticast mode [ 210.315305][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.322786][ T1318] bridge_slave_1: left promiscuous mode [ 210.328668][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.344598][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.347801][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.370135][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.427446][ T1318] bridge_slave_0: left allmulticast mode [ 210.433150][ T1318] bridge_slave_0: left promiscuous mode [ 210.445190][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.863018][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.877737][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.889845][ T1318] bond0 (unregistering): Released all slaves [ 210.927470][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.939470][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.995715][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.003914][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.133304][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 211.142928][T10306] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1235'. [ 211.167433][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 211.403327][T10008] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 211.413238][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.488088][ T1318] hsr_slave_0: left promiscuous mode [ 211.494123][ T1318] hsr_slave_1: left promiscuous mode [ 211.500689][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.509193][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.517779][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.525318][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.545701][ T1318] veth1_macvtap: left promiscuous mode [ 211.551234][ T1318] veth0_macvtap: left promiscuous mode [ 211.557151][ T1318] veth1_vlan: left promiscuous mode [ 211.565068][ T1318] veth0_vlan: left promiscuous mode [ 212.088666][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 212.124128][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 212.472552][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.480636][ T5836] Bluetooth: hci1: command tx timeout [ 212.486531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.522433][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.540859][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.751066][T10282] chnl_net:caif_netlink_parms(): no params data found [ 212.977628][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.995664][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.002942][T10282] bridge_slave_0: entered allmulticast mode [ 213.026789][T10282] bridge_slave_0: entered promiscuous mode [ 213.046044][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.053228][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.070749][T10282] bridge_slave_1: entered allmulticast mode [ 213.087010][T10282] bridge_slave_1: entered promiscuous mode [ 213.241103][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.263221][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.371924][ T1318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.395245][T10282] team0: Port device team_slave_0 added [ 213.395687][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.404493][T10282] team0: Port device team_slave_1 added [ 213.410755][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.422107][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.431488][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.442382][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.470376][ T1318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.501415][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.508944][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.536568][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.568690][ T1318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.597040][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.604044][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.631463][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.669193][ T1318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.738885][T10282] hsr_slave_0: entered promiscuous mode [ 213.745421][T10282] hsr_slave_1: entered promiscuous mode [ 213.751512][T10282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.760800][T10282] Cannot create hsr debugfs directory [ 213.873514][T10348] unknown channel width for channel at 909000KHz? [ 213.889936][T10348] unknown channel width for channel at 909000KHz? [ 213.908639][T10351] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 214.176075][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 214.183221][ T1318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.380835][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.393411][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.413057][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.431475][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.441742][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.545997][ T1318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.555193][ T5834] Bluetooth: hci1: command tx timeout [ 214.677236][ T1318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.700810][T10367] syzkaller0: entered promiscuous mode [ 214.719830][T10367] syzkaller0: entered allmulticast mode [ 214.772413][T10344] chnl_net:caif_netlink_parms(): no params data found [ 214.803836][ T1318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.005063][T10344] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.012264][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.023273][T10344] bridge_slave_0: entered allmulticast mode [ 215.033254][T10344] bridge_slave_0: entered promiscuous mode [ 215.068736][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.076357][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.083654][T10344] bridge_slave_1: entered allmulticast mode [ 215.091304][T10344] bridge_slave_1: entered promiscuous mode [ 215.169344][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.194770][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.313140][ T1318] bridge_slave_1: left allmulticast mode [ 215.326156][ T1318] bridge_slave_1: left promiscuous mode [ 215.332911][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.350216][ T1318] bridge_slave_0: left allmulticast mode [ 215.357106][ T1318] bridge_slave_0: left promiscuous mode [ 215.362965][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.376742][ T1318] bridge_slave_1: left allmulticast mode [ 215.382488][ T1318] bridge_slave_1: left promiscuous mode [ 215.388604][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.409928][ T1318] bridge_slave_0: left allmulticast mode [ 215.417115][ T1318] bridge_slave_0: left promiscuous mode [ 215.423562][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.516477][ T5834] Bluetooth: hci2: command tx timeout [ 215.820983][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1257'. [ 216.028544][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.040925][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.051035][ T1318] bond0 (unregistering): Released all slaves [ 216.143084][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.159919][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.170628][ T1318] bond0 (unregistering): Released all slaves [ 216.202369][T10344] team0: Port device team_slave_0 added [ 216.213486][T10344] team0: Port device team_slave_1 added [ 216.446141][T10344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.453156][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.485969][ T5834] Bluetooth: hci3: command tx timeout [ 216.486568][T10344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.521196][T10368] chnl_net:caif_netlink_parms(): no params data found [ 216.541706][T10344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.570424][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.611156][T10344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.635786][ T5834] Bluetooth: hci1: command tx timeout [ 216.676630][T10420] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 216.723201][T10426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1263'. [ 216.732453][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 216.742070][T10426] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1263'. [ 216.751244][T10426] netlink: 'syz.0.1263': attribute type 3 has an invalid length. [ 216.759532][T10426] netlink: 'syz.0.1263': attribute type 2 has an invalid length. [ 216.767415][T10426] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1263'. [ 216.862939][T10426] bond0: entered promiscuous mode [ 216.868173][T10426] bond0: entered allmulticast mode [ 216.873689][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.901057][T10282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.918533][T10282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.976758][T10282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.038722][T10434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1264'. [ 217.073967][T10344] hsr_slave_0: entered promiscuous mode [ 217.081309][T10344] hsr_slave_1: entered promiscuous mode [ 217.087825][T10344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.095478][T10344] Cannot create hsr debugfs directory [ 217.101031][T10282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.117697][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.126505][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.133720][T10368] bridge_slave_0: entered allmulticast mode [ 217.141096][T10368] bridge_slave_0: entered promiscuous mode [ 217.149730][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.156982][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.164140][T10368] bridge_slave_1: entered allmulticast mode [ 217.174292][T10368] bridge_slave_1: entered promiscuous mode [ 217.260388][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.276689][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.333074][ T1318] hsr_slave_0: left promiscuous mode [ 217.339411][ T1318] hsr_slave_1: left promiscuous mode [ 217.346102][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.353560][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.361872][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.370144][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.382540][ T1318] hsr_slave_0: left promiscuous mode [ 217.389710][ T1318] hsr_slave_1: left promiscuous mode [ 217.395982][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.403415][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.411438][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.419267][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.457775][ T1318] veth1_macvtap: left promiscuous mode [ 217.463335][ T1318] veth0_macvtap: left promiscuous mode [ 217.469630][ T1318] veth1_vlan: left promiscuous mode [ 217.475116][ T1318] veth0_vlan: left promiscuous mode [ 217.481967][ T1318] veth1_macvtap: left promiscuous mode [ 217.487929][ T1318] veth0_macvtap: left promiscuous mode [ 217.494449][ T1318] veth1_vlan: left promiscuous mode [ 217.500068][ T1318] veth0_vlan: left promiscuous mode [ 217.595162][ T5834] Bluetooth: hci2: command tx timeout [ 218.026174][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1269'. [ 218.195117][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 218.232682][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 218.556296][ T5834] Bluetooth: hci3: command tx timeout [ 218.715063][ T5834] Bluetooth: hci1: command tx timeout [ 218.880075][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 218.916186][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 219.323048][T10448] netlink: 'syz.0.1268': attribute type 25 has an invalid length. [ 219.331149][T10448] netlink: 'syz.0.1268': attribute type 7 has an invalid length. [ 219.368787][T10368] team0: Port device team_slave_0 added [ 219.379437][T10368] team0: Port device team_slave_1 added [ 219.556161][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.567608][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.573316][T10460] netlink: 'syz.0.1272': attribute type 12 has an invalid length. [ 219.594288][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.616702][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.623678][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.650125][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.675978][ T5834] Bluetooth: hci2: command tx timeout [ 219.907613][T10368] hsr_slave_0: entered promiscuous mode [ 219.914436][T10368] hsr_slave_1: entered promiscuous mode [ 219.921756][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.938312][T10368] Cannot create hsr debugfs directory [ 220.032744][ T2152] IPVS: starting estimator thread 0... [ 220.040611][T10472] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.138825][T10474] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.158273][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.313508][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.360330][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.367552][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.393507][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.400734][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.500638][T10344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.512274][T10344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.540025][T10344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.555798][T10489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.594226][T10344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.636035][ T5834] Bluetooth: hci3: command tx timeout [ 220.866737][T10344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.911471][T10344] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.971033][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.978235][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.996118][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.029908][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.037118][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.049811][T10368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.063392][T10368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.087911][T10368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.109944][T10368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.206717][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 221.254813][T10344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.269782][T10344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.370122][T10282] veth0_vlan: entered promiscuous mode [ 221.434504][T10282] veth1_vlan: entered promiscuous mode [ 221.475628][T10511] netlink: 'syz.2.1285': attribute type 11 has an invalid length. [ 221.632567][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.699273][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.712400][T10282] veth0_macvtap: entered promiscuous mode [ 221.742105][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.742338][T10282] veth1_macvtap: entered promiscuous mode [ 221.751319][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.764933][ T5834] Bluetooth: hci2: command tx timeout [ 221.789852][T10526] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1289'. [ 221.804593][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.811789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.816836][T10526] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1289'. [ 221.833170][T10344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.872219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.879412][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.903071][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.922167][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.939995][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.962669][T10530] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 221.980744][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.999579][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.016458][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.054326][T10282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.064453][T10282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.080962][T10282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.093308][T10282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.159787][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 222.282554][T10344] veth0_vlan: entered promiscuous mode [ 222.348851][T10344] veth1_vlan: entered promiscuous mode [ 222.373811][T10282] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 222.390314][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.457614][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.466415][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.531300][T10344] veth0_macvtap: entered promiscuous mode [ 222.545153][T10551] netlink: 'syz.2.1295': attribute type 11 has an invalid length. [ 222.574926][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.582783][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.603071][T10547] xt_CT: No such helper "pptp" [ 222.612260][T10344] veth1_macvtap: entered promiscuous mode [ 222.679928][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.704325][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.715391][ T5834] Bluetooth: hci3: command tx timeout [ 222.724643][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.738830][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.770576][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.831268][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.842478][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.854280][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.880538][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.901667][T10344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.940747][T10344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.951200][T10344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.961299][T10344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.970065][T10344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.994697][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.143581][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.252376][T10572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 223.289800][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.372021][T10572] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 223.471784][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.532745][T10344] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 223.543528][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.560624][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.569830][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.613421][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.658976][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.668636][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.738774][T10368] veth0_vlan: entered promiscuous mode [ 223.778434][T10368] veth1_vlan: entered promiscuous mode [ 223.872275][T10368] veth0_macvtap: entered promiscuous mode [ 223.892385][T10368] veth1_macvtap: entered promiscuous mode [ 223.900677][ T12] bridge_slave_1: left allmulticast mode [ 223.906762][ T12] bridge_slave_1: left promiscuous mode [ 223.912469][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.922632][ T12] bridge_slave_0: left allmulticast mode [ 223.930038][ T12] bridge_slave_0: left promiscuous mode [ 223.936145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.425329][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.445086][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.459464][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.480963][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.489950][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.490074][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.538161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.553203][ T12] bond0 (unregistering): Released all slaves [ 224.576078][T10583] tipc: MTU too low for tipc bearer [ 224.621721][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.634250][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.652623][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.664571][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.675923][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.688204][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.705892][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.750273][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.761770][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.771958][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.782592][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.793276][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.809850][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.821192][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.862845][T10368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.872587][T10368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.889707][T10368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.899104][T10368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.990959][ T12] hsr_slave_0: left promiscuous mode [ 224.999643][ T12] hsr_slave_1: left promiscuous mode [ 225.006982][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.014506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.023549][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.031550][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.050934][ T12] veth1_macvtap: left promiscuous mode [ 225.056672][ T12] veth0_macvtap: left promiscuous mode [ 225.062388][ T12] veth1_vlan: left promiscuous mode [ 225.067806][ T12] veth0_vlan: left promiscuous mode [ 225.440501][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.477291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.942138][T10590] netlink: 'syz.2.1301': attribute type 21 has an invalid length. [ 225.960665][T10590] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.968989][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.977857][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.986317][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.000729][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.008960][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.246681][T10368] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 226.263395][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.326556][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.342376][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.424755][T10586] chnl_net:caif_netlink_parms(): no params data found [ 226.475407][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.492751][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.555644][ T5834] Bluetooth: hci1: command tx timeout [ 226.626823][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.634024][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.665801][T10586] bridge_slave_0: entered allmulticast mode [ 226.673435][T10586] bridge_slave_0: entered promiscuous mode [ 226.717125][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.724339][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.741369][T10586] bridge_slave_1: entered allmulticast mode [ 226.760335][T10586] bridge_slave_1: entered promiscuous mode [ 226.858210][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.902130][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.974287][T10586] team0: Port device team_slave_0 added [ 227.007592][T10586] team0: Port device team_slave_1 added [ 227.171583][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.184914][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.212262][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.225325][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.232307][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.259272][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.329970][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.411326][T10592] chnl_net:caif_netlink_parms(): no params data found [ 227.473025][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.510169][T10586] hsr_slave_0: entered promiscuous mode [ 227.516876][T10586] hsr_slave_1: entered promiscuous mode [ 227.522996][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.531443][T10586] Cannot create hsr debugfs directory [ 227.607887][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.683446][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.743075][T10592] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.750529][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.764247][T10592] bridge_slave_0: entered allmulticast mode [ 227.772024][T10592] bridge_slave_0: entered promiscuous mode [ 227.786248][T10592] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.793509][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.801361][T10592] bridge_slave_1: entered allmulticast mode [ 227.808897][T10592] bridge_slave_1: entered promiscuous mode [ 227.871413][T10592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.906812][T10592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.016943][T10592] team0: Port device team_slave_0 added [ 228.052729][T10592] team0: Port device team_slave_1 added [ 228.075750][ T5834] Bluetooth: hci2: command tx timeout [ 228.145288][ T12] bridge_slave_1: left allmulticast mode [ 228.151072][ T12] bridge_slave_1: left promiscuous mode [ 228.161964][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 228.166892][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.181609][T10636] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1308'. [ 228.190933][T10636] nbd: must specify at least one socket [ 228.201894][ T12] bridge_slave_0: left allmulticast mode [ 228.214923][ T12] bridge_slave_0: left promiscuous mode [ 228.220678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.436076][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.446822][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.466198][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.482077][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.492076][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.635161][ T5834] Bluetooth: hci1: command tx timeout [ 228.707739][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.720011][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.731097][ T12] bond0 (unregistering): Released all slaves [ 228.744362][T10592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.752172][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.779557][T10592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.823936][T10592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.831321][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.860650][T10592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.023281][T10592] hsr_slave_0: entered promiscuous mode [ 229.030647][T10592] hsr_slave_1: entered promiscuous mode [ 229.042098][T10592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.053129][T10592] Cannot create hsr debugfs directory [ 229.088549][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 229.125783][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 229.253264][ T12] hsr_slave_0: left promiscuous mode [ 229.264573][ T12] hsr_slave_1: left promiscuous mode [ 229.271028][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.279070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.287666][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.295408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.322665][ T12] veth1_macvtap: left promiscuous mode [ 229.328765][ T12] veth0_macvtap: left promiscuous mode [ 229.337154][ T12] veth1_vlan: left promiscuous mode [ 229.342688][ T12] veth0_vlan: left promiscuous mode [ 229.811736][ T12] team0 (unregistering): Port device team_slave_1 removed [ 229.849746][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.156231][ T5834] Bluetooth: hci2: command tx timeout [ 230.405337][T10586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.447756][T10586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.500078][T10586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.518339][T10586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.562054][ T5834] Bluetooth: hci3: command tx timeout [ 230.577727][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 230.609962][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 230.684278][T10637] chnl_net:caif_netlink_parms(): no params data found [ 230.718115][ T5834] Bluetooth: hci1: command tx timeout [ 230.900205][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.992676][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.022048][T10637] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.032237][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.049317][T10637] bridge_slave_0: entered allmulticast mode [ 231.065240][T10637] bridge_slave_0: entered promiscuous mode [ 231.077389][T10637] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.084713][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.092089][T10637] bridge_slave_1: entered allmulticast mode [ 231.101602][T10637] bridge_slave_1: entered promiscuous mode [ 231.133735][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.203926][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.246188][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 231.273740][T10637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.287559][T10637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.316986][T10685] gretap0: left allmulticast mode [ 231.322054][T10685] gretap0: left promiscuous mode [ 231.330702][T10685] bridge0: port 1(gretap0) entered disabled state [ 231.474449][T10637] team0: Port device team_slave_0 added [ 231.497275][T10637] team0: Port device team_slave_1 added [ 231.528998][T10592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.542428][T10592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.574191][T10592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.629630][T10637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.636880][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.668208][T10637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.683600][T10592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.703335][T10637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.711980][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.738466][T10637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.846547][T10637] hsr_slave_0: entered promiscuous mode [ 231.856226][T10637] hsr_slave_1: entered promiscuous mode [ 231.863593][T10637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.885125][T10637] Cannot create hsr debugfs directory [ 231.900248][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.908960][ T12] bridge_slave_1: left allmulticast mode [ 231.914644][ T12] bridge_slave_1: left promiscuous mode [ 231.922254][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.932588][ T12] bridge_slave_0: left allmulticast mode [ 231.938690][ T12] bridge_slave_0: left promiscuous mode [ 231.944396][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.237248][ T5834] Bluetooth: hci2: command tx timeout [ 232.256384][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.269419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.279650][ T12] bond0 (unregistering): Released all slaves [ 232.389987][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.489291][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.496449][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.577760][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.585025][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.635228][ T5834] Bluetooth: hci3: command tx timeout [ 232.768076][ T12] hsr_slave_0: left promiscuous mode [ 232.774133][ T12] hsr_slave_1: left promiscuous mode [ 232.782180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.792322][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.799835][ T5834] Bluetooth: hci1: command tx timeout [ 232.807598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.815482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.841015][ T12] veth1_macvtap: left promiscuous mode [ 232.846827][ T12] veth0_macvtap: left promiscuous mode [ 232.852498][ T12] veth1_vlan: left promiscuous mode [ 232.857951][ T12] veth0_vlan: left promiscuous mode [ 233.344193][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.382041][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.884802][T10586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.013925][T10592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.080506][T10592] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.102953][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.110154][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.149810][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.157026][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.192414][T10742] tipc: Started in network mode [ 234.197966][T10742] tipc: Node identity fe2be5e8b2b5, cluster identity 4711 [ 234.207952][T10742] tipc: Enabled bearer , priority 0 [ 234.293116][T10741] syzkaller0: entered promiscuous mode [ 234.299036][T10741] syzkaller0: entered allmulticast mode [ 234.305335][T10741] tipc: Resetting bearer [ 234.318766][ T5834] Bluetooth: hci2: command tx timeout [ 234.341130][T10739] tipc: Resetting bearer [ 234.715461][ T5834] Bluetooth: hci3: command tx timeout [ 235.327962][ T5883] tipc: Node number set to 1285481960 [ 235.464425][T10739] tipc: Disabling bearer [ 235.511642][T10637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.531445][T10637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.578814][T10637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.605092][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 235.609091][T10637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.621348][T10747] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1332'. [ 235.631675][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 235.679466][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.841714][T10586] veth0_vlan: entered promiscuous mode [ 235.883923][T10586] veth1_vlan: entered promiscuous mode [ 235.933443][T10637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.952193][T10592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.999598][T10637] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.027421][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.034603][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.057140][T10586] veth0_macvtap: entered promiscuous mode [ 236.071618][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.078762][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.093038][T10586] veth1_macvtap: entered promiscuous mode [ 236.155513][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.168680][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.179838][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.194534][T10592] veth0_vlan: entered promiscuous mode [ 236.207823][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.219227][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.231011][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.249399][T10592] veth1_vlan: entered promiscuous mode [ 236.268668][T10586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.278055][T10586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.288466][T10586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.297628][T10586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.372166][T10592] veth0_macvtap: entered promiscuous mode [ 236.388279][T10592] veth1_macvtap: entered promiscuous mode [ 236.456322][T10586] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 236.470117][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.485390][T10592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.497648][T10592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.508120][T10592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.519160][T10592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.534565][T10592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.571759][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.580161][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.604190][T10592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.616800][T10592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.627518][T10592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.639062][T10592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.650425][T10592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.692976][T10592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.702447][T10592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.711857][T10592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.720895][T10592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.733679][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.749610][T10637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.758329][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.795916][ T5834] Bluetooth: hci3: command tx timeout [ 236.908451][T10592] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 236.927826][T10592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.958213][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.993260][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.047492][T10769] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 237.091616][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.144381][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.431743][ T9323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.646934][T10637] veth0_vlan: entered promiscuous mode [ 237.691885][ T9323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.738734][T10637] veth1_vlan: entered promiscuous mode [ 237.780929][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.793928][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.803437][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.816692][T10637] veth0_macvtap: entered promiscuous mode [ 237.826432][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.837220][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.872092][ T9323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.894119][T10637] veth1_macvtap: entered promiscuous mode [ 237.936997][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.975449][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.997918][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.010323][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.021458][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.032249][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.044683][T10637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.091073][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.102711][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.122090][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.132611][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.143335][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.154242][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.167202][T10637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.213850][ T9323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.283648][T10637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.294116][T10637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.304203][T10637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.320694][T10637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.561318][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.570690][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.585576][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.594225][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.605735][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.620933][T10637] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 238.631001][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.665634][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.673515][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.723342][ T9323] bridge_slave_1: left allmulticast mode [ 238.731175][ T9323] bridge_slave_1: left promiscuous mode [ 238.737303][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.747503][ T9323] bridge_slave_0: left allmulticast mode [ 238.753156][ T9323] bridge_slave_0: left promiscuous mode [ 238.761233][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.071936][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.083063][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.092965][ T9323] bond0 (unregistering): Released all slaves [ 239.120273][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.129836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.157296][T10784] chnl_net:caif_netlink_parms(): no params data found [ 239.733479][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.743667][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.751513][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.759745][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.768110][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.847386][ T9323] hsr_slave_0: left promiscuous mode [ 239.865294][ T9323] hsr_slave_1: left promiscuous mode [ 239.872010][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.885189][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.905915][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.913363][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.926773][ T5836] Bluetooth: hci1: command tx timeout [ 239.942630][ T9323] veth1_macvtap: left promiscuous mode [ 239.949139][ T9323] veth0_macvtap: left promiscuous mode [ 239.954776][ T9323] veth1_vlan: left promiscuous mode [ 239.963483][ T9323] veth0_vlan: left promiscuous mode [ 240.359840][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 240.396801][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 240.651421][ T5836] Bluetooth: hci2: command tx timeout [ 240.956731][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.964054][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.996763][T10784] bridge_slave_0: entered allmulticast mode [ 241.011878][T10784] bridge_slave_0: entered promiscuous mode [ 241.032067][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.041014][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.048477][T10784] bridge_slave_1: entered allmulticast mode [ 241.056404][T10784] bridge_slave_1: entered promiscuous mode [ 241.142911][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.160647][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.168685][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.177767][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.187508][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.224714][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.272478][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.434393][T10784] team0: Port device team_slave_0 added [ 241.452754][T10784] team0: Port device team_slave_1 added [ 241.558927][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.566276][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.595497][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.621791][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.629099][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.655351][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.710699][T10834] x_tables: duplicate underflow at hook 2 [ 241.801261][T10784] hsr_slave_0: entered promiscuous mode [ 241.808222][T10784] hsr_slave_1: entered promiscuous mode [ 241.814652][T10784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.823091][T10784] Cannot create hsr debugfs directory [ 241.836138][ T5834] Bluetooth: hci3: command tx timeout [ 241.854197][T10792] chnl_net:caif_netlink_parms(): no params data found [ 241.883434][T10840] tipc: Trying to set illegal importance in message [ 242.005155][ T5834] Bluetooth: hci1: command tx timeout [ 242.077898][T10844] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 242.087999][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.124012][T10808] chnl_net:caif_netlink_parms(): no params data found [ 242.287773][ T9323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.452007][ T9323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.541682][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.552978][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.560487][T10792] bridge_slave_0: entered allmulticast mode [ 242.568290][T10792] bridge_slave_0: entered promiscuous mode [ 242.580590][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.588532][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.596758][T10808] bridge_slave_0: entered allmulticast mode [ 242.603934][T10808] bridge_slave_0: entered promiscuous mode [ 242.612749][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.620075][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.628708][T10808] bridge_slave_1: entered allmulticast mode [ 242.636667][T10808] bridge_slave_1: entered promiscuous mode [ 242.654129][ T9323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.715996][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.723227][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.725114][ T5834] Bluetooth: hci2: command tx timeout [ 242.731010][T10792] bridge_slave_1: entered allmulticast mode [ 242.743804][T10792] bridge_slave_1: entered promiscuous mode [ 242.836754][ T9323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.857182][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 242.894081][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.920520][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.959745][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.990386][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.066164][T10869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1350'. [ 243.210417][T10792] team0: Port device team_slave_0 added [ 243.232550][T10792] team0: Port device team_slave_1 added [ 243.241263][T10874] netlink: 'syz.2.1352': attribute type 28 has an invalid length. [ 243.249354][T10874] netlink: 'syz.2.1352': attribute type 3 has an invalid length. [ 243.262033][T10808] team0: Port device team_slave_0 added [ 243.264983][T10874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1352'. [ 243.281361][T10808] team0: Port device team_slave_1 added [ 243.287459][ T5834] Bluetooth: hci5: command tx timeout [ 243.368408][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.376106][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.402603][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.453179][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.468596][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.496292][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.532171][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.539786][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.566583][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.586069][T10820] chnl_net:caif_netlink_parms(): no params data found [ 243.600394][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.608184][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.635322][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.656408][T10784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.751954][T10784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.786217][T10808] hsr_slave_0: entered promiscuous mode [ 243.793378][T10808] hsr_slave_1: entered promiscuous mode [ 243.800777][T10808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.809940][T10808] Cannot create hsr debugfs directory [ 243.847363][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 243.921902][T10784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.926142][ T5834] Bluetooth: hci3: command tx timeout [ 243.974796][T10792] hsr_slave_0: entered promiscuous mode [ 243.985953][T10792] hsr_slave_1: entered promiscuous mode [ 243.992159][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.000945][T10792] Cannot create hsr debugfs directory [ 244.013334][T10784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.075159][ T5834] Bluetooth: hci1: command tx timeout [ 244.258605][ T9323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.275425][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.287446][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.294705][T10820] bridge_slave_0: entered allmulticast mode [ 244.302876][T10820] bridge_slave_0: entered promiscuous mode [ 244.370548][ T9323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.390159][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.401289][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.409288][T10820] bridge_slave_1: entered allmulticast mode [ 244.417052][T10820] bridge_slave_1: entered promiscuous mode [ 244.443118][ T9323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.578049][ T9323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.639326][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.669424][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.799680][ T5834] Bluetooth: hci2: command tx timeout [ 244.853623][T10820] team0: Port device team_slave_0 added [ 244.880866][T10820] team0: Port device team_slave_1 added [ 244.988598][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.998368][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.024604][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.038988][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.053827][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.089770][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.214708][ T9323] bridge_slave_1: left allmulticast mode [ 245.220978][ T9323] bridge_slave_1: left promiscuous mode [ 245.227034][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.244747][ T9323] bridge_slave_0: left allmulticast mode [ 245.250639][ T9323] bridge_slave_0: left promiscuous mode [ 245.256546][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.268490][ T9323] bridge_slave_1: left allmulticast mode [ 245.275507][ T9323] bridge_slave_1: left promiscuous mode [ 245.281234][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.291461][ T9323] bridge_slave_0: left allmulticast mode [ 245.299391][ T9323] bridge_slave_0: left promiscuous mode [ 245.305377][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.356239][ T5834] Bluetooth: hci5: command tx timeout [ 245.870860][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.881944][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.893345][ T9323] bond0 (unregistering): Released all slaves [ 245.995154][ T5834] Bluetooth: hci3: command tx timeout [ 246.001740][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.012685][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.023410][ T9323] bond0 (unregistering): Released all slaves [ 246.047601][T10916] netdevsim netdevsim2: Direct firmware load for +. failed with error -2 [ 246.067284][T10916] netdevsim netdevsim2: Falling back to sysfs fallback for: +. [ 246.071385][T10820] hsr_slave_0: entered promiscuous mode [ 246.081962][T10820] hsr_slave_1: entered promiscuous mode [ 246.103564][T10820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.118188][T10820] Cannot create hsr debugfs directory [ 246.155562][ T5834] Bluetooth: hci1: command tx timeout [ 246.289637][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 246.300897][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.550077][T10925] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 246.593007][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.680010][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.687214][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.753470][ T9323] hsr_slave_0: left promiscuous mode [ 246.760434][ T9323] hsr_slave_1: left promiscuous mode [ 246.767803][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.777400][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.787447][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.796433][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.816936][ T9323] hsr_slave_0: left promiscuous mode [ 246.823554][ T9323] hsr_slave_1: left promiscuous mode [ 246.830232][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.837847][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.846581][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.854028][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.875651][ T5834] Bluetooth: hci2: command tx timeout [ 246.894224][ T9323] veth1_macvtap: left promiscuous mode [ 246.900142][ T9323] veth0_macvtap: left promiscuous mode [ 246.905975][ T9323] veth1_vlan: left promiscuous mode [ 246.911642][ T9323] veth0_vlan: left promiscuous mode [ 246.918682][ T9323] veth1_macvtap: left promiscuous mode [ 246.924205][ T9323] veth0_macvtap: left promiscuous mode [ 246.929898][ T9323] veth1_vlan: left promiscuous mode [ 246.935282][ T9323] veth0_vlan: left promiscuous mode [ 247.439046][ T5834] Bluetooth: hci5: command tx timeout [ 247.472497][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 247.514341][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 248.075498][ T5834] Bluetooth: hci3: command tx timeout [ 248.216570][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 248.256345][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 248.630377][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.637600][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.655537][T10808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.688939][T10808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.708725][T10808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.728831][T10808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.795738][ T1318] wlan1: Trigger new scan to find an IBSS to join [ 248.797521][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 248.804567][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 248.822129][ T1318] ------------[ cut here ]------------ [ 248.827832][ T1318] WARNING: CPU: 0 PID: 1318 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 248.838463][ T1318] Modules linked in: [ 248.842624][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 248.854991][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.865883][ T1318] Workqueue: events_unbound cfg80211_wiphy_work [ 248.872184][ T1318] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.879083][ T1318] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 248.898868][ T1318] RSP: 0018:ffffc900045cf8a0 EFLAGS: 00010293 [ 248.905272][ T1318] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff888027373c00 [ 248.913528][ T1318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.921787][ T1318] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffffffff1efd7ce [ 248.930543][ T1318] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888028a13268 [ 248.939291][ T1318] R13: ffff888028a10e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 248.947668][ T1318] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 248.959608][ T1318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.967121][ T1318] CR2: 00007f719774cf98 CR3: 000000005759e000 CR4: 00000000003526f0 [ 248.975274][ T1318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.983277][ T1318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.991352][ T1318] Call Trace: [ 248.994665][ T1318] [ 248.997687][ T1318] ieee80211_ibss_work+0xde7/0x1060 [ 249.003030][ T1318] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 249.008788][ T1318] ? ieee80211_iface_work+0xf39/0xfe0 [ 249.014298][ T1318] ? rcu_is_watching+0x15/0xb0 [ 249.019194][ T1318] cfg80211_wiphy_work+0x2dc/0x460 [ 249.024343][ T1318] ? process_scheduled_works+0x9ec/0x17a0 [ 249.030242][ T1318] process_scheduled_works+0xadb/0x17a0 [ 249.036220][ T1318] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.042269][ T1318] worker_thread+0x8a0/0xda0 [ 249.046994][ T1318] kthread+0x70e/0x8a0 [ 249.051102][ T1318] ? __pfx_worker_thread+0x10/0x10 [ 249.056284][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.061223][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.065960][ T1318] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.071224][ T1318] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.076543][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.081190][ T1318] ret_from_fork+0x4b/0x80 [ 249.085682][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.090310][ T1318] ret_from_fork_asm+0x1a/0x30 [ 249.095248][ T1318] [ 249.098307][ T1318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.105630][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 249.117814][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 249.127884][ T1318] Workqueue: events_unbound cfg80211_wiphy_work [ 249.134143][ T1318] Call Trace: [ 249.137428][ T1318] [ 249.140365][ T1318] dump_stack_lvl+0x99/0x250 [ 249.144973][ T1318] ? __asan_memcpy+0x40/0x70 [ 249.149580][ T1318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.154832][ T1318] ? __pfx__printk+0x10/0x10 [ 249.159445][ T1318] panic+0x2db/0x790 [ 249.163362][ T1318] ? __pfx_panic+0x10/0x10 [ 249.167794][ T1318] ? show_trace_log_lvl+0x4fb/0x550 [ 249.173019][ T1318] ? ret_from_fork_asm+0x1a/0x30 [ 249.177966][ T1318] __warn+0x31b/0x4b0 [ 249.181964][ T1318] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 249.187969][ T1318] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 249.193966][ T1318] report_bug+0x2be/0x4f0 [ 249.198337][ T1318] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 249.204333][ T1318] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 249.210328][ T1318] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 249.216335][ T1318] handle_bug+0x84/0x160 [ 249.220590][ T1318] exc_invalid_op+0x1a/0x50 [ 249.225104][ T1318] asm_exc_invalid_op+0x1a/0x20 [ 249.229961][ T1318] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 249.236584][ T1318] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 249.256201][ T1318] RSP: 0018:ffffc900045cf8a0 EFLAGS: 00010293 [ 249.262288][ T1318] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff888027373c00 [ 249.270270][ T1318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.278248][ T1318] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffffffff1efd7ce [ 249.286227][ T1318] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888028a13268 [ 249.294205][ T1318] R13: ffff888028a10e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 249.302191][ T1318] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 249.308210][ T1318] ieee80211_ibss_work+0xde7/0x1060 [ 249.313433][ T1318] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 249.319092][ T1318] ? ieee80211_iface_work+0xf39/0xfe0 [ 249.324471][ T1318] ? rcu_is_watching+0x15/0xb0 [ 249.329255][ T1318] cfg80211_wiphy_work+0x2dc/0x460 [ 249.334378][ T1318] ? process_scheduled_works+0x9ec/0x17a0 [ 249.340116][ T1318] process_scheduled_works+0xadb/0x17a0 [ 249.345707][ T1318] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.351716][ T1318] worker_thread+0x8a0/0xda0 [ 249.356330][ T1318] kthread+0x70e/0x8a0 [ 249.360408][ T1318] ? __pfx_worker_thread+0x10/0x10 [ 249.365520][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.370152][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.374746][ T1318] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.379955][ T1318] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.385168][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.389765][ T1318] ret_from_fork+0x4b/0x80 [ 249.394201][ T1318] ? __pfx_kthread+0x10/0x10 [ 249.398799][ T1318] ret_from_fork_asm+0x1a/0x30 [ 249.403588][ T1318] [ 249.406802][ T1318] Kernel Offset: disabled [ 249.411144][ T1318] Rebooting in 86400 seconds..