last executing test programs: 1m17.0760018s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 1m16.102832742s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 1m2.322999804s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 1m1.685851004s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 47.23349135s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 46.512807573s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 31.989530443s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 31.446564991s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 9.792877996s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 9.79272753s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 9.792605536s ago: executing program 3 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000080)=@gettaction={0x78, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x78}}, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000003880)=[{{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000002}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140)=0xbfb, 0x4) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000000b010100000000000000000a000001080003400000000108000240000000000800024000000003060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x84) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1}, 0xfd}, 0x18) 9.792504159s ago: executing program 4 (id=2215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x232a, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2002cc64, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d98679", 0x1c, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0xf18, @mcast2, 0x3, 0x1, 0x8}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf252000000024002d80050004000000000005000100a800000008000300090000000c00060000000000000000000c002d80080003000900"/74], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000004) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/71, 0x47, 0x100, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25170000000c0006000100000001000000600030800500020005"], 0x80}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000810) 1.909312735s ago: executing program 1 (id=2773): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async, rerun: 64) r4 = socket$inet(0x2, 0x80001, 0x84) (rerun: 64) bind$inet(r4, &(0x7f00000003c0)={0x2, 0xce20, @empty}, 0x10) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20008044) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdc00}, 0x10}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008000) 1.898309259s ago: executing program 2 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0xa, 0xbe38) 1.794490333s ago: executing program 2 (id=2775): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) 1.728323317s ago: executing program 1 (id=2776): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) 1.630217178s ago: executing program 1 (id=2777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x11, 0x7}, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) 1.595277134s ago: executing program 2 (id=2778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x9}, [{}, {}, {}, {}, {}, {}, {}, {0x9}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x2000000}, {0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffa}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffe}, {0x0, 0x400000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'dvmrp1\x00', {0x2, 0x4e21, @local}}) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x68, 0x9, 0x4, 0x9, 0x20, 'syz0\x00', "9f280303877ba4eb33930113b04f8021bac1146ea91378786f919f76954b815b", "b8a88a8aac3cca096399547e75cebaeab1631b3fe125ca11143ee20aa344e371", [{0x1, 0x4, {0x0, 0x80000000}}, {0x3, 0x9, {0x3, 0x4}}, {0x100, 0x6, {0x2, 0x1}}, {0x9, 0x8, {0x3, 0x5}}, {0x4, 0x8, {0x1, 0x5}}, {0x3, 0x8, {0x3, 0x2}}, {0x6, 0x2, {0x2, 0x7f}}, {0x4, 0x1, {0x1, 0x5}}, {0x8000, 0x3, {0x0, 0x4}}, {0xf, 0x7, {0x1, 0x6}}, {0x7fff, 0x100, {0x3, 0x6}}, {0x800, 0x4, {0x1}}, {0x3, 0x4, {0x0, 0xfa}}, {0x8000, 0x8, {0x0, 0xa23}}, {0x4, 0x1, {0x2, 0x6}}, {0xb7, 0x400, {0x3, 0x1}}, {0x0, 0xc, {0x0, 0x2}}, {0xc247, 0xfff3, {0x2, 0x7}}, {0x1, 0x0, {0x0, 0x7}}, {0xd, 0x1, {0x4, 0x400}}, {0x8, 0xf6, {0x3, 0xffffffff}}, {0xfff9, 0xe8, {0x3, 0x4}}, {0x9, 0x1, {0x1, 0x4f01b1b3}}, {0x1, 0x8, {0x0, 0x1104}}, {0x743, 0x4, {0x0, 0x10000}}, {0x7, 0x4, {0x0, 0x100}}, {0x4, 0x0, {0x1, 0xffffffff}}, {0x9276, 0x8, {0x3, 0x1}}, {0x6, 0x1, {0x0, 0x1}}, {0x0, 0x0, {0x2, 0x4}}, {0x5, 0x0, {0x1, 0x200}}, {0x2, 0x40, {0x2, 0xc5}}, {0x8, 0xf2, {0x3, 0x202}}, {0x1, 0xe, {0x2, 0xfffff6c6}}, {0x4, 0x4, {0x3, 0x5}}, {0x5, 0x8001, {0x2, 0x7ff}}, {0x2, 0x100, {0x2, 0x2}}, {0x9, 0x800, {0x0, 0x4}}, {0x52, 0x8, {0x3, 0x1a}}, {0x9, 0x4d, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4c000}, 0x20040000) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0x1}, 0x2) (async) write(r1, &(0x7f0000000040)="09000000010000", 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r3=>0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x4c}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a000000000000631141000000000095af7e2a25000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) close(r2) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd0}, 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.453271158s ago: executing program 1 (id=2779): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) 1.428070575s ago: executing program 0 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="c2dbfce4a4c4c274", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_cmd={0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000000000000000000bab94e7f56d85262f9b30166fd50db49847c8bd9a6dbc8721ef0cad56d35112d12ed6f56ef", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e6400000000a1fe028008001f00000000000800070006000000"], 0x44}}, 0x4000) 1.28696975s ago: executing program 0 (id=2781): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r4, r3, 0x0, 0x7ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x11c, 0x4, 0x0, 0x74efdfe049b861ab) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, &(0x7f0000000280)="8e40c67b59c5b12e9771", &(0x7f00000004c0)=""/173}, 0x20) r7 = socket(0xf, 0x800, 0x5) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000003000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000140000000000000000"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r11}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0xca231000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=@delqdisc={0x150, 0x25, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0x5}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x6, 0xd9a, 0x1, 0x2, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x49, 0xec, 0x6, 0x7, 0x6427b99434ae5eae, 0x1, 0x100, 0x4}}, {0xc, 0x2, [0xc, 0xf8a, 0x2, 0x6]}}, {{0x1c, 0x1, {0x4, 0x9, 0x7, 0x101, 0x0, 0x5, 0x4, 0x7}}, {0x12, 0x2, [0xa8, 0xf65, 0x7fff, 0x2, 0x7, 0xb, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0x3, 0x1, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x5, 0x3, 0xd6, 0x2, 0x0, 0x0, 0x6, 0x6}}, {0x10, 0x2, [0xfffd, 0x7, 0x3ff, 0x7, 0xa, 0x5]}}, {{0x1c, 0x1, {0x3, 0x8, 0xb0f4, 0x1, 0x0, 0x5e, 0x40, 0x4}}, {0xc, 0x2, [0x9, 0x84, 0x0, 0x3]}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xc085}, 0x4004000) 1.139686703s ago: executing program 0 (id=2782): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xcc}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000001900000000000000009500000000000000d0a22f54e7b832bf444c4f9d824b795ca277c3f9d67941ba7deb7c8414a39b4201d54524219600a2da0f568065a523eee39206a6d1ba3f153e0a4ec4f61c87e3c22551d827ffc08c4fbcb2efb53fab94623effd1478c9512039233aba155fd9df2f4a95d67dc428662d0ae2530820ac9df0aae9a8e09e87512e6ff73a3977b58d09560804776296040ece83ea80759707e2756212bc9d0e25ecf9cdb97c9370188c3fc34a82a797836d07638a12ba51447b212be7eedbc0e74f4b6d2e078dac409b1bbe4b366c4d3d31f5df679666f3c1c60"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r4 = socket(0x2a, 0x80000, 0x8) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0x1c, 0xe}}}, 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x6, 0x0, 0xdb, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000911821000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x1, 0x6, @dev}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="c438", @ANYRES64=0x0], 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r12, 0xf503, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018000c8069740014d517291d23028008e400000000000000a48daf398555dc92d8d82b776706926e20786da90e506ef985b46a6efafa67b97e3fc74d36d9f498860082de603de300f8940b158f5133fb0af7bf6a1847b1524b19c69e30b3ebc1334e9be431", @ANYRES32=r14, @ANYRES32=r6], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r14, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 810.799856ms ago: executing program 2 (id=2783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0), 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 64) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x6, 0x1d, 0x0, 0x0, @str='\xd2\x88'}]}, 0x28}], 0x1}, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000e000000100000000000000000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0xf8}}, 0x0) (rerun: 64) 768.173681ms ago: executing program 1 (id=2784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="00000000000001000000000000000000", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x67}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000100000000000c0000001800058008000100756470000c000280080004"], 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)={0x208, r9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcf13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x35b2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x208}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x70, r12, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffff403, 0x41}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000670000f208000300", @ANYRES32=r10, @ANYBLOB="0800c302000000000800c400010000001200c5"], 0x194}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000600000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 621.199153ms ago: executing program 0 (id=2785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) listen(0xffffffffffffffff, 0xfffffffb) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000580600fe8000000000000000000000000000bbfe8800000000000000000000000000012c0008b96500000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="44200000907800001e0401a10402fe0df989000000002e98026a27fe04f98913127224407c80fe8a3616b4bf3400006cc81e122002ac1414bb000b855502287d33f37f000031a33da355fc189a09eb3b584c0237eeeda0dab044181b0dafe9e0af2ef0b81db66fe02d5c3fc599c2d87a010134279eeb8ae70ae50f9e1bea7508fdf8508af87552699cbf798c3f1a82e790b082550eca1fea660de5faed1dea5414db797d1f0ff46bd62c9b269affffffffffffffff7fb0825b414f320aab0b88e9a69e208a37c03bfe26b085ec0577cb8e4f755f0966ebd69599609be1a89d667601"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0xc0010020, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xfffffff9, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe800000000000000000", @ANYRES8], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 457.336819ms ago: executing program 0 (id=2786): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x4dc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x1, 0xa, 0x0, 0x48, 0x1}, @call={0x85, 0x0, 0x0, 0x4c}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x67, &(0x7f0000000200)=""/103, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x2, 0x10, 0x6}], 0x10, 0x4d5, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0)=r2, 0x4) close(r0) 339.478371ms ago: executing program 0 (id=2787): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r3=>0x0}) sendmsg$nl_route(r2, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000001540)=@ipv6_getaddrlabel={0x8c, 0x4a, 0x300, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, r3, 0xab68}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000015) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) close(r4) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) setsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000440)="a3aa3ae4587d40848ea7f8c886ea8d52fdb26cf053dedc5e75545cf940e11b03febde2076a230d04e03246e35f4b6d890a92ca095af21bbcf0f01dfe4838f663d10f88ff5662282dfde298eb8eaeafc6d0eb588dc1e7b06b288f6dea80f1eba48b3153fa96ba02fa01ec8b7d49ddf9acf017a473890f454a2512fa76d40c62b079aa29d1bb756f3d33fd67be3aa82ba399f9ddc67de5d0e9637f1818291f2a1b587a678b185160a6cc92bd62d6ee48b3bd91b43cd2a077dfdedd9b38b06bcfc5013f28f91b68dce15fef3fa3b376c950622cda618dfcd82eb2b3d8594a070519d9a209d95f8814a5bd5cf64a48f56d692974e5aedd85d8541dd08e9d95572f758f07e808e541b86fc0066a70c890631adb950ef92e5bdc11d7835a984346969234b2bcc5d0ac18a36e70f6d4a0216e1e0027f2cbf179c2fb9319d193ecab8a0f9a8e65243e6ee52abd28e81870ed23e95b11e98fad582c3bf650a693760a92a0ee252f54cba541de2cf01edc86d4e54208677179e336406e877b9f3a1a76a72b513c28cc16924adb350f92e86331169617b27bcc71fa5329e9bf353a468bb837857be1d3405f25f9aaf26c2fdb000ed83c22fbc1f6785a163097179f2c970fe51205260c5af9d3c4348722f389498dd997fcc53bd6e490868d02ce04da2969bfb9a2b4718af269f221d98472482dc0f2caa9a8c5a965e7046e8f609663572253e28647e7f13384b0b3ea43164979e134a5fd1695b18af583dd9d91e0c0d2e39d7b7786042b508993cb27f1947b83324f4a6daee49be8c252ad14338fae3b43669d263f529eec24e626eb8e1f80efbba88a7d684e24bae3011fb67315b2dd1cc69495f6420ceedcbae3ee192d7e045c90525a158333a803b63389ea5fbda1d8e400eb6fdc9df13b21a1ce5eff8587ffb1bd1b4583bf314f3bcc530ddb205995e7a6a0b1d12f9927500b82abc4e9f5528923dd09a2bbf0ca4e8817dcec20c7a49a09901d927bf8735c02bb15607c254400fcb678b01ca043f8d62ffdf600ecf90783c0cd81b04621c484f5c109ac06cd03b9966832575adbcc713af2ad927249196c3235c0170a0bb4972cf13784ab0adfe496c219886912628e4f23f381183ee374cef632fe8d6c55731d404557892246ca55d91401037e3c47a4803b9c809c0bf153460d6caf8e7faea45f7c851ca46dda82d41cd7764041b6b4892376af644ab073864e90dd29a30789263ca516f7f75ca38f259ee9ffb33e3e875d73159791420f1fe62f4b4b7127295e8a802bc0d80bf2b6605560edce3a72614baa10979a40233f84f1a45c0d63b56b7dc94443f0f8902f5f295bd51ea0b21522ce7b9640ae5332d547fccff73ea7f463c10609ad017b0901c8bc67fad7a2f52fd62450953c25838f42677c780769176027168311b9fe8c3f7b03700a83ba2f0794653e527f9a6aa8917d5386bfde69ceaea04a853c68f32b3972213b4baecb1dce94911de50aa31d125b2d47eab043ad3d0ff1d5df3909cd168e14fa5741211b6ec049dbe97ec763076af6a015cb16c8695d7367b49a19f07354b4fd0f0e3bc2d3a76f87f3216ac6505c27f42cf9cad29d58e40a48c60837d986600740996ae70e89b3726fe3a7ba75277ccbda2fd303e0a564e1fef0f3bacff29ef9855ab90dc5c4925eff4b45554d7a4613bac892e23a65b92118a972643ed5a67cc3d7ca1e5ae50ad786eed33b4d0516b90dbadf93262b0ce99ac4d6667d4bb302812806b2059aea09987157a7f204dd08c836a17ab7d6d60db182a842c192a248cb144538babdfe2ab16bd0bbd8a2547c8d2f7e18fce7ef612f883d25995bcbdc9e9ccb8a95533a54155afa6f23acce23f7610f484212958dd45ebac0bd55530476e7a6439a36167595acbaba14385298ef184ace223bc4027251b11fbee23768db0879a93bb276e09aea5b30fa7f094b2a0045bf6ede87541eb53af32f63bfb64450ed4cebdb3b58d83ef806c545dcd32481dec17031d07ec748f7a8bef464c36f5b6b6f847cb1563445fe606a5e724c9de4d73e296a316ce1d3681dcc8ebcfcc743ec09919fb069959ef702416879ae05ea14703452dc667a151472244db955f7941753a9bebd4ef8baaa06b1c9bcda2cdfb387dec573f6fc4ed1ad07dfd3177b2a814b8b4e701631f0069ae71e9f06fd37920e7cfeadf6bbe0cbf916aec1f52ea2514d9493279eb4625e852169530a8492ff8d909f013ccf1f5bc22b8aa6a6c6ec90e56c93a8d1b357eefd273ace5b6d8e48ce591d47d07322ec35be8543d6531f1fdf33608d439ddcfa429c1169f64645d6284a8638b3488e1594a31bba55faf51e145400fc6d5fc1d34d4e5daaa96687fe2a5cdcb11a92e20c0f95da403314459d4d82b90db9fd8fabfe12b4957a8f8624d4ccf7e466f14e3571b51e5b815bd8a7aae698f2258e4c9ab879f382e9f69215896176a9f82f9dd5d089a16fb94770d123fae7c44c4922d0899aa0189485ca97f7f80d9fbb3fec747af94fc24235e5ec784b7024724241a31e274df28de00d0cbbb1447088bfa355456f8e9a63dec855edf386d533e58e1c19ff2c67ceaf0d367879a07cc2628bc8dbd0d56bd4338a4505277ba899ad27c74dc608936fdc676747bc43a059545b9aaf8fca839a6fb2c6038b5748f93c43ddc5d81201d005d1381cc623c2bdcbdb01939d68ee089312cf6c7c85da4d0d42fd3941723fb2b6093e6127e98ed0cb1a8291a2a26121900dca9861735247c74c9c2148e7732f4b5f13bf8946bc7f0baeae69e14a1c7182092f5f8643d87f504c7f30f0be6a8682a19816896eed10dbc83fc91c38aac639e3de00659cce823728a49b166575933b26324254ca668c9441ca8e7efe6388eff0391b74a964d4013d4ddfd86b9c5f260c2415e37ddd0545aa5e70ace44abad0cd169e5a62ad0526b7a696ade83ca04df338893fd0ed5049f9004066b9825f63c660df3636ef757c0d9279a58daf98b4e61223ca9a71a4e87fd4ce2d9a200e995db2f2952d59d14a5af581cd2fd181d202c14201394e03da073df4739a083073561fccb0edc1771f2a6023fdf172729b939f600b7dc1a96d680528c4e818059f46efabf4cfbb4127b917a9cb71fdcfafd9dc23b6a843c56ab3825aa68bbdc64f6b3e47201689595b05f04b7b4b4163b6583179e6bef6200d66e0224bab13647ba1b5ed1685db4cd2ae168d27c6e1104e380e3add17b7606444383a7556998ad9d874b5fc6184631b4040dd431478f20e14c40613580f552236af02fd34edf738ceb70aaed5a36b51e063d8632fcd414ce6577714045adda3fc872f381ca284111f163271041c377219839ae17e4d072afabe59edd5f22f62f1878bc967cfe47da15f5d93ef0db4e68c9dfc1c2027011ba619643705b519759f9f640f6892af4927efb4c9d76c3491f6213d21da68b73ea9ce986d2daf2302e80631f868c5a5fde098c7dbb3176fd134b6cc315757f56c068dabee95280f9cc169a7734e0b6d8275dc677bfea2800947795b6da85cc3978788056ae2d455345c998eb36a53d47586c4adfec00c04630a9f21948b5ec96dba02dcd6a456a766543fb83089e7721e18d06fad2f5f7fad00658121e886e5e9ed98fdfbb8e09012caaa22275f85fafc3d744b49ecd760a2a167a0c168ba6f98d0e440789be57e3490aa7f100ef607252be7bd14e386920647989e95aeb0ddaa43616bfdd890b1793ca7029945073df76316320351aaf46dafd060f766c7f6f1a1b642db70f4535e44fc4ae066daf8ce324474c6e50adcd01b364d4d4c08dfa381b12e85b627b52e923787f6a33acb7e9f8805cf5da22c309562abbfa801798b0f0363624d58ffeea503e3665165f1521ff923d84867736a924337d644cfdd6f43b8dea1ca017c88473cecf575d8cf19b65438f22b59f47f9580967f25dcee6814e7d02bc06a7a6d69336309ac90fd105c65f6ac91e67d607efd0b2a2d58964cfa3c8618f1f5c9332f5b0c0ddfaed5502835b81385113c950215256d68c33b532db75a0a3f0de5c682c3b34cd5cc36104ebefbc654e8b72d4a1ed146f21e443f3366c5d5cc44ead73f810df52e388ab61ff95dcd813cacf1b91aeb1611381551bc6a2a8b13a7cc2b1cb2ce94e45dffc4a8ac65187edc4533c21c607aada727de26aa597821c2add9584b6f69efd019ffb9b32332a1ee9acfb22d180643aa64c63cf875dbc28c041db8202b128e8d7e1bea6d97526f023e8c8ca11f038e5281976c8431298e61dc130af6539f69f419055ff881b50dff9372a9845dc75d2c1678e84fc265a24f5cdc85c778ff45cadace00dbc383422f3baf233564bb61a1fd049e08548bd5a1823fca267159359bdb0c2962b885ba72ff11ac8bc8b469a2465dd92da09ae8da46992f90c890c03d38c218dbb61a174470f065a4583eaa9f3af0132b94a01cfb4f0c6c034e5a2d653d5c0fa213f4344cf1eb3cc0a3f67c1322774e1cf416ae114e779bdb414a9b0c3453c507b3166373496e92bd74364f54f6d0a9e92501fdfd10d6dd412d6e70b4cc52c5e3bf3cffb4c9f571f6e01d1acd7b5d6025b0fbc35267d677b4c65d0d80a2c8dd6ffcc785b6f9b4ed191791d9857e20d12d490847c2608388d78285de8621b3dce04a16346b32f74957439fa748979ab78d7d38ddc32d25a9317b010129abb501ed1e1f08ce80f23e31862100bf55ead2643d10dc411ee0b2079bb62152f41dfec1e19cf2480b148301fdb629130b1ec40803828636fa474d99803d8c39bcfdb11120cbf4dc5adb19c610ed6daea54ca9e806768491b1d923c9ae05cfa7b0975609d726869a5cce0a772d7cb3c4b2379996bb05eafe7f214649cd83a452644aad07307928eaa7508cc148aa0dd75f610a1f11f223483acc32450949028565458ea4b079e9b52a5af5ae87208db5f400b88bb88b80ea8b08777fec0f56a5839a56bef23237704420f162cbd89523d15e3208fa106f52e11666bbadfcefd94a27cc3745c7e48df523a0e9512f2d0664485d36596cd9e1458a42b8c1336fc148514edbc01f267792e052c237beab66f0e7ae77c9e0ab0dec38136a4315ae7fda405769b6ac131acdaa82d10b2909a3ea61a12fea6ffecf5b150bd6a066ab43186a1745bd118119a9a4cbaa60de6aa3b2a44d7377c31b51b9e0a392c655b8477da5286c6c49a6bf40d50f888510a6cdab4e9faa95adc709da26f57bd162188ed1db9a511b7577ea0f2cac0efd3725ebaf3d774da218546e83d7e1555109e74699783dc03a28379438a0718a83b4e93d7678702345cd7539c2965d4409b585ca1204a3cc7fedd872d5c8c81b756822781cd2b64bd5a04486e7dffc32ad66e4c9769765e51f5d84b8c073d3daf1fd50e6a9f310f13843c4f563d264cd57c2e4fa592a2b1d735921a2d7b68123d6db00eb1ea976ffd784728e4e0995191f453f4e2ecd56ab3f4e97a5c1d9522bfc1d9a2c9fac6da071fd6f739e56820456eab02a56c741ec451edb30c6a56c4f7648af43ddd0f8947e9bd4af3f53d547ab62081558b3926b937f919b44f81129b3c7140e314f0a667d488ac4a0f2ddab3ea6629beaaa0f804687f5d31e5d27f232fb7523ad95e39dd3a2ac71315cc52d4c8a70e1e9614e981997f5ae4a9d9ef242beb78c9343604437beb9e96e5c6a1f8f525c99d4cc814849cb67d107cc0e8ac0bc7a3802ab9a5ed16aeb58931c11969e1abb86c3cad9e6c4fd8aecd673a144dcbb3e432b81b677d843a6be85f2b8dd24f482b62b3898c16b22f9", 0xffe) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r9, 0x1, 0x0, 0x0, {{0x8}, {@void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001440)=@newlink={0xb8, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_VF_PORTS={0x7c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d8571b2a599f9cef6bd6da12d41a76dd"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, 'udp:syz1\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dca78daa3e90b34146e1bb446387e6e3"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c0d03418c2fd9fc07f83662b891d93d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3c22340b0211230cc7f9664b1da95477"}]}]}, @IFLA_MASTER={0x8}]}, 0xb8}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000000300008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r15}, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r12, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x0) 201.840901ms ago: executing program 1 (id=2788): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) bind$unix(r0, &(0x7f0000002c00)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r1, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 147.990963ms ago: executing program 2 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x82b}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}, {{&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-arm\x00'}, 0x80, 0x0}}], 0x2, 0x0) 0s ago: executing program 2 (id=2790): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4000000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xdbc3e182aee2797f}, {0x3, 0x9}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{}, {0x0, 0x2, [@TCA_FQ_ORPHAN_MASK={0x0, 0xa, 0x7fffffff}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x0, 0x7, 0x7}, @TCA_FQ_RATE_ENABLE={0x0, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x5702e8ea}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a000001000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000100000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') unshare(0x0) mkdirat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x400, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): mode [ 325.395157][ T8271] veth0_macvtap: left promiscuous mode [ 325.400827][ T8271] veth1_vlan: left promiscuous mode [ 325.413829][ T8271] veth0_vlan: left promiscuous mode [ 325.513061][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 325.749565][ T5153] Bluetooth: hci3: command tx timeout [ 325.753090][ T5846] Bluetooth: hci2: command tx timeout [ 325.988093][ T8271] team0 (unregistering): Port device team_slave_1 removed [ 326.037809][ T8271] team0 (unregistering): Port device team_slave_0 removed [ 326.836770][T14167] chnl_net:caif_netlink_parms(): no params data found [ 326.935882][T14168] chnl_net:caif_netlink_parms(): no params data found [ 327.202635][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.232294][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.239612][T14167] bridge_slave_0: entered allmulticast mode [ 327.247294][T14167] bridge_slave_0: entered promiscuous mode [ 327.303560][T14167] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.310849][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.365168][T14167] bridge_slave_1: entered allmulticast mode [ 327.456594][T14167] bridge_slave_1: entered promiscuous mode [ 327.910030][ T5846] Bluetooth: hci3: command tx timeout [ 327.920952][ T5846] Bluetooth: hci2: command tx timeout [ 330.061253][ T5153] Bluetooth: hci2: command tx timeout [ 330.076397][ T5153] Bluetooth: hci3: command tx timeout [ 332.148496][ T5846] Bluetooth: hci3: command tx timeout [ 332.159012][ T5846] Bluetooth: hci2: command tx timeout [ 334.580014][T14167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.770950][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.879405][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.924958][T14168] bridge_slave_0: entered allmulticast mode [ 334.932956][T14168] bridge_slave_0: entered promiscuous mode [ 334.940832][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.948972][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.956380][T14168] bridge_slave_1: entered allmulticast mode [ 334.963571][T14168] bridge_slave_1: entered promiscuous mode [ 334.977987][T14167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.065227][T14167] team0: Port device team_slave_0 added [ 335.081310][T14167] team0: Port device team_slave_1 added [ 335.090753][T14168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.103270][T14168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.185223][T14167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.202334][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.266503][T14167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.296198][T14168] team0: Port device team_slave_0 added [ 335.400826][T14167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.412841][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.443576][T14167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.486267][T14168] team0: Port device team_slave_1 added [ 335.682500][T14167] hsr_slave_0: entered promiscuous mode [ 335.691165][T14321] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 335.702817][T14167] hsr_slave_1: entered promiscuous mode [ 335.714462][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2249'. [ 335.724769][T14168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.731831][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.771058][T14168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.804402][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2250'. [ 335.814326][T14168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.821333][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.920829][T14168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.151628][T14334] tipc: Enabled bearer <ib:gre0>, priority 0 [ 336.173308][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'. [ 336.300633][T14168] hsr_slave_0: entered promiscuous mode [ 336.323289][T14168] hsr_slave_1: entered promiscuous mode [ 336.332164][T14168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.355579][T14168] Cannot create hsr debugfs directory [ 336.771741][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 336.991188][T14383] can: request_module (can-proto-4) failed. [ 337.083372][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 337.203596][T14168] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.216715][T14168] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.301638][T14168] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.313589][T14168] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.439834][T14168] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.453497][T14168] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.535297][T14168] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.566732][T14168] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.658552][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 337.770163][T14167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.797730][T14167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.816419][T14167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.871764][T14167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.914640][T14168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.932138][T14168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.961506][T14168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.991156][T14168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.087410][T14415] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2269'. [ 338.161533][T14167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.249193][T14167] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.293754][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.300937][T10819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.346434][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.353678][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.444170][T14168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.589931][T14446] netlink: 'syz.2.2275': attribute type 2 has an invalid length. [ 338.606829][T14168] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.646310][T14446] X�: entered promiscuous mode [ 338.693555][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.700726][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.710665][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.718038][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.114060][T14167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.201649][T14167] veth0_vlan: entered promiscuous mode [ 339.209889][T14168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.234271][T14167] veth1_vlan: entered promiscuous mode [ 339.295183][T14167] veth0_macvtap: entered promiscuous mode [ 339.317120][T14167] veth1_macvtap: entered promiscuous mode [ 339.326229][T14470] xt_hashlimit: Unknown mode mask 200000C0, kernel too old? [ 339.365166][T14167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.394931][T14167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.418846][T14167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.443869][T14167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.463442][T14167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.484781][T14167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.652820][T10819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.693258][T10819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.734225][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 339.756582][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2282'. [ 339.771033][T14482] tc_dump_action: action bad kind [ 339.785707][T10815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.799830][T10815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.885257][T14168] veth0_vlan: entered promiscuous mode [ 339.909918][T14168] veth1_vlan: entered promiscuous mode [ 339.979669][T14168] veth0_macvtap: entered promiscuous mode [ 340.041528][T14168] veth1_macvtap: entered promiscuous mode [ 340.112688][T14495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2285'. [ 340.142578][T14495] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 340.204680][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.225106][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.236859][T14168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.284065][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.307548][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.319040][T14168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.341169][T14168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.361092][T14168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.371732][T14168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.391539][T14168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.518073][T10819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.534473][T10819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.590774][ T8296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.605311][ T8296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.183429][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.610892][T14533] netlink: 'syz.1.2295': attribute type 18 has an invalid length. [ 341.630365][T14534] __nla_validate_parse: 2 callbacks suppressed [ 341.630387][T14534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2295'. [ 341.893981][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.907228][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.917388][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.926751][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.934642][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.943828][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.017882][T14542] lo speed is unknown, defaulting to 1000 [ 342.025599][T14542] lo speed is unknown, defaulting to 1000 [ 342.097765][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.164003][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.173757][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.192551][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.216366][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.226453][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.236930][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.321769][T14554] lo speed is unknown, defaulting to 1000 [ 342.365957][T14554] lo speed is unknown, defaulting to 1000 [ 342.498080][T14542] chnl_net:caif_netlink_parms(): no params data found [ 342.647469][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.774840][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.889020][T14542] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.910328][T14542] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.918071][T14542] bridge_slave_0: entered allmulticast mode [ 342.930860][T14542] bridge_slave_0: entered promiscuous mode [ 342.954414][T14542] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.961571][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.981506][T14542] bridge_slave_1: entered allmulticast mode [ 343.003950][T14542] bridge_slave_1: entered promiscuous mode [ 343.083671][T14554] chnl_net:caif_netlink_parms(): no params data found [ 343.132663][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 343.141012][T14542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.154458][T14589] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2309'. [ 343.180356][T14542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.282914][T14593] netlink: 'syz.0.2308': attribute type 2 has an invalid length. [ 343.450283][ T61] bridge_slave_1: left allmulticast mode [ 343.484465][ T61] bridge_slave_1: left promiscuous mode [ 343.490277][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.521743][ T61] bridge_slave_0: left allmulticast mode [ 343.541019][ T61] bridge_slave_0: left promiscuous mode [ 343.562926][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.939919][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 343.964741][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 343.986352][ T5153] Bluetooth: hci2: command tx timeout [ 344.186134][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.199205][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.210799][ T61] bond0 (unregistering): Released all slaves [ 344.231922][T14542] team0: Port device team_slave_0 added [ 344.279671][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.303664][ T5153] Bluetooth: hci3: command tx timeout [ 344.311019][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.327344][T14554] bridge_slave_0: entered allmulticast mode [ 344.354335][T14554] bridge_slave_0: entered promiscuous mode [ 344.423936][T14542] team0: Port device team_slave_1 added [ 344.488437][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.504342][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.521885][T14554] bridge_slave_1: entered allmulticast mode [ 344.543635][T14554] bridge_slave_1: entered promiscuous mode [ 344.785098][T14637] netlink: 'syz.0.2320': attribute type 30 has an invalid length. [ 344.823777][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.854777][T14542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.864432][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.947407][T14542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.974961][T14542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.992037][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.037582][T14542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.133682][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2325'. [ 345.247011][T14648] netlink: 'syz.0.2324': attribute type 16 has an invalid length. [ 345.291988][T14648] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2324'. [ 345.568164][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.736138][ T61] hsr_slave_0: left promiscuous mode [ 345.772264][ T61] hsr_slave_1: left promiscuous mode [ 345.796700][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.812227][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.839667][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.849005][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.904013][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2329'. [ 345.916353][ T61] veth1_macvtap: left promiscuous mode [ 345.931768][ T61] veth0_macvtap: left promiscuous mode [ 345.937703][ T61] veth1_vlan: left promiscuous mode [ 345.943899][ T61] veth0_vlan: left promiscuous mode [ 346.062995][ T5153] Bluetooth: hci2: command 0x041b tx timeout [ 346.382585][ T5846] Bluetooth: hci3: command tx timeout [ 346.620595][ T61] team0 (unregistering): Port device team_slave_1 removed [ 346.675387][ T61] team0 (unregistering): Port device team_slave_0 removed [ 347.189631][T14659] vlan0: entered promiscuous mode [ 347.195242][T14659] team0: Device vlan0 is of different type [ 347.245658][T14554] team0: Port device team_slave_0 added [ 347.266205][T14666] gretap0: entered promiscuous mode [ 347.283364][T14666] bridge0: port 3(macvlan4) entered blocking state [ 347.289972][T14666] bridge0: port 3(macvlan4) entered disabled state [ 347.303318][T14666] macvlan4: entered allmulticast mode [ 347.308868][T14666] gretap0: entered allmulticast mode [ 347.316525][T14666] macvlan4: entered promiscuous mode [ 347.407942][T14554] team0: Port device team_slave_1 added [ 347.534588][T14542] hsr_slave_0: entered promiscuous mode [ 347.541855][T14542] hsr_slave_1: entered promiscuous mode [ 347.549758][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 347.578556][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 347.590837][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.598362][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.650329][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.741199][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.750879][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.844630][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.857887][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 348.034548][T14554] hsr_slave_0: entered promiscuous mode [ 348.065073][T14554] hsr_slave_1: entered promiscuous mode [ 348.083738][T14554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.095042][T14554] Cannot create hsr debugfs directory [ 348.133314][T14709] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 348.144124][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 348.215109][T14717] netlink: 'syz.0.2340': attribute type 8 has an invalid length. [ 348.449837][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.462279][ T5846] Bluetooth: hci3: command tx timeout [ 348.491374][T14722] ip6gre2: entered allmulticast mode [ 348.707924][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.875951][T14741] netlink: 'syz.2.2347': attribute type 10 has an invalid length. [ 348.983610][T14727] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 348.995569][T14727] bond0 (unregistering): Released all slaves [ 349.066684][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.224182][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.313793][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'. [ 349.381921][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 349.394477][ T61] bridge_slave_1: left allmulticast mode [ 349.406912][ T61] bridge_slave_1: left promiscuous mode [ 349.418619][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.435420][ T61] bridge_slave_0: left allmulticast mode [ 349.441395][ T61] bridge_slave_0: left promiscuous mode [ 349.447789][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.959741][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.971446][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.991692][ T61] bond0 (unregistering): Released all slaves [ 350.154093][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2355'. [ 350.222182][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 350.453600][ T61] hsr_slave_0: left promiscuous mode [ 350.468959][ T61] hsr_slave_1: left promiscuous mode [ 350.476526][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.487109][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.495488][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.503923][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.534693][ T61] veth1_macvtap: left promiscuous mode [ 350.540333][ T61] veth0_macvtap: left promiscuous mode [ 350.546048][ T5846] Bluetooth: hci3: command tx timeout [ 350.551788][ T61] veth1_vlan: left promiscuous mode [ 350.557315][ T61] veth0_vlan: left promiscuous mode [ 351.114743][ T61] team0 (unregistering): Port device team_slave_1 removed [ 351.162042][ T61] team0 (unregistering): Port device team_slave_0 removed [ 351.861543][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 351.955335][T14554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.109177][T14554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.134998][T14554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.199170][T14554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.220672][T14809] ���]-�V!z���uY: renamed from lo (while UP) [ 352.302437][ T5846] Bluetooth: hci2: command 0x041b tx timeout [ 352.328805][T14542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 352.343917][T14542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.354907][T14542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.365916][T14542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.491470][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.535360][T14542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.553193][T14554] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.577465][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.584709][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.599689][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.606947][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.623881][ T5846] Bluetooth: hci3: command tx timeout [ 352.631824][T14542] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.655954][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.663213][T10818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.707077][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.714282][T10818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.807565][T14542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.155958][T14542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.236403][T14554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.304303][T14542] veth0_vlan: entered promiscuous mode [ 353.351056][T14542] veth1_vlan: entered promiscuous mode [ 353.407514][T14542] veth0_macvtap: entered promiscuous mode [ 353.427724][T14542] veth1_macvtap: entered promiscuous mode [ 353.472851][T14542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.511386][T14542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.535081][T14542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.552259][T14542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.601856][T14542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.621117][T14542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.645220][T14819] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 353.746596][T14554] veth0_vlan: entered promiscuous mode [ 353.803153][T14554] veth1_vlan: entered promiscuous mode [ 353.829963][T14857] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2376'. [ 353.885317][ T8296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.901859][T14862] xt_CT: No such helper "syz0" [ 353.918600][ T8296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.969082][T14554] veth0_macvtap: entered promiscuous mode [ 354.006635][ T8302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.042533][T14554] veth1_macvtap: entered promiscuous mode [ 354.048558][ T8302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.093974][T14554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.118248][T14554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.130630][T14554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.157292][T14554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.199072][T14554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.230898][T14554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.273840][T14554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.304323][T14554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.338002][T14554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.374315][T14554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.640976][ T8284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.654365][ T8284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.679348][ T8296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.688390][ T8296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.870146][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 354.965879][T14898] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 355.024747][T14898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.056842][T14901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.064650][T14901] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 355.076597][T14901] bond6: (slave vcan1): Error -95 calling set_mac_address [ 355.118618][T14898] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 355.133366][T14898] bond6: (slave batadv2): making interface the new active one [ 355.143639][T14898] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 355.166397][T14907] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 355.177045][T14907] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 355.304516][T14911] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 355.511604][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.300694][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.597162][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.765012][T14927] lo speed is unknown, defaulting to 1000 [ 356.771810][T14927] lo speed is unknown, defaulting to 1000 [ 356.783937][T14921] netlink: 'syz.0.2393': attribute type 29 has an invalid length. [ 356.840847][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.851591][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.860474][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.872096][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.881507][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.889143][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.908233][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.947192][T14936] A link change request failed with some changes committed already. Interface ���]-�V!z���uY may have been left with an inconsistent configuration, please check. [ 356.947202][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.980470][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.990088][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.999183][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.007214][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.016775][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.154941][T14943] lo speed is unknown, defaulting to 1000 [ 357.178340][T14938] lo speed is unknown, defaulting to 1000 [ 357.195439][T14943] lo speed is unknown, defaulting to 1000 [ 357.256828][T14938] lo speed is unknown, defaulting to 1000 [ 357.342735][ T61] bridge_slave_1: left allmulticast mode [ 357.348456][ T61] bridge_slave_1: left promiscuous mode [ 357.355447][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.365094][ T61] bridge_slave_0: left allmulticast mode [ 357.370793][ T61] bridge_slave_0: left promiscuous mode [ 357.377457][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.815038][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.828239][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.840041][ T61] bond0 (unregistering): Released all slaves [ 358.227597][T14969] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 358.252749][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 358.282310][T14970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2404'. [ 358.282810][T14969] netlink: 'syz.2.2403': attribute type 4 has an invalid length. [ 358.351806][T14965] netlink: 'syz.2.2403': attribute type 4 has an invalid length. [ 358.380753][T14938] chnl_net:caif_netlink_parms(): no params data found [ 358.582676][ T61] hsr_slave_0: left promiscuous mode [ 358.589481][ T61] hsr_slave_1: left promiscuous mode [ 358.607885][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.613968][T14981] netlink: 'syz.2.2407': attribute type 3 has an invalid length. [ 358.616711][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.655308][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.663579][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.721319][ T61] veth1_macvtap: left promiscuous mode [ 358.738938][ T61] veth0_macvtap: left promiscuous mode [ 358.750658][ T61] veth1_vlan: left promiscuous mode [ 358.763430][ T61] veth0_vlan: left promiscuous mode [ 358.946289][ T5153] Bluetooth: hci2: command tx timeout [ 359.107427][ T5153] Bluetooth: hci3: command tx timeout [ 359.416548][ T61] team0 (unregistering): Port device team_slave_1 removed [ 359.469741][ T61] team0 (unregistering): Port device team_slave_0 removed [ 360.071872][T14943] chnl_net:caif_netlink_parms(): no params data found [ 360.337592][T15008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 360.404967][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.419165][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.440131][T14938] bridge_slave_0: entered allmulticast mode [ 360.448633][T14938] bridge_slave_0: entered promiscuous mode [ 360.473294][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.486825][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.494869][T14938] bridge_slave_1: entered allmulticast mode [ 360.502586][T14938] bridge_slave_1: entered promiscuous mode [ 360.563460][T15019] xt_bpf: check failed: parse error [ 360.686657][T15022] netlink: 'syz.0.2417': attribute type 21 has an invalid length. [ 360.706017][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2417'. [ 360.723245][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.730766][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.748445][T14943] bridge_slave_0: entered allmulticast mode [ 360.756846][T14943] bridge_slave_0: entered promiscuous mode [ 360.768978][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 360.819624][T14938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.829517][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.837786][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.846471][T14943] bridge_slave_1: entered allmulticast mode [ 360.874382][T14943] bridge_slave_1: entered promiscuous mode [ 360.953743][T15033] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2421'. [ 360.964465][T14938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.998170][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.022306][ T5153] Bluetooth: hci2: command tx timeout [ 361.069015][T15040] xt_NFQUEUE: number of total queues is 0 [ 361.078616][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.145344][T14938] team0: Port device team_slave_0 added [ 361.170809][T14938] team0: Port device team_slave_1 added [ 361.182345][ T5153] Bluetooth: hci3: command tx timeout [ 361.205640][T14943] team0: Port device team_slave_0 added [ 361.223056][T15041] netlink: 'syz.1.2423': attribute type 30 has an invalid length. [ 361.301731][T14943] team0: Port device team_slave_1 added [ 361.377720][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.424471][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.431494][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.477020][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.513487][T14938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.537908][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.567290][T14938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.569318][T15056] SET target dimension over the limit! [ 361.582866][T14938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.592051][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.618291][T14938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.649406][T15058] Cannot find del_set index 1 as target [ 361.654076][T15056] netlink: 'syz.1.2428': attribute type 5 has an invalid length. [ 361.750701][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.763566][T15063] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 361.778528][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.786183][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.812477][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.878444][T15066] netlink: 'syz.2.2431': attribute type 21 has an invalid length. [ 361.892982][T15066] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2431'. [ 361.926408][T15066] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 361.972415][T15066] netlink: 'syz.2.2431': attribute type 5 has an invalid length. [ 361.980217][T15066] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2431'. [ 362.002739][T15067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 362.085091][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.164637][T14938] hsr_slave_0: entered promiscuous mode [ 362.179684][T14938] hsr_slave_1: entered promiscuous mode [ 362.216132][T14943] hsr_slave_0: entered promiscuous mode [ 362.243454][T14943] hsr_slave_1: entered promiscuous mode [ 362.249831][T14943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.272289][T14943] Cannot create hsr debugfs directory [ 362.324906][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.729426][ T61] bridge_slave_1: left allmulticast mode [ 362.736395][ T61] bridge_slave_1: left promiscuous mode [ 362.743412][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.769751][ T61] bridge_slave_0: left allmulticast mode [ 362.776297][ T61] bridge_slave_0: left promiscuous mode [ 362.782166][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.112141][ T5846] Bluetooth: hci2: command tx timeout [ 363.262224][ T5846] Bluetooth: hci3: command tx timeout [ 363.441404][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.469530][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.481361][ T61] bond0 (unregistering): Released all slaves [ 363.554772][T15115] geneve3: entered promiscuous mode [ 363.931715][ T8296] tipc: Subscription rejected, illegal request [ 364.148693][ T61] hsr_slave_0: left promiscuous mode [ 364.169028][ T61] hsr_slave_1: left promiscuous mode [ 364.187531][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.195432][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.226367][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.248565][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.324781][ T61] veth1_macvtap: left promiscuous mode [ 364.330413][ T61] veth0_macvtap: left promiscuous mode [ 364.341017][T15151] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 364.352342][ T61] veth1_vlan: left promiscuous mode [ 364.362186][ T61] veth0_vlan: left promiscuous mode [ 365.085251][ T61] team0 (unregistering): Port device team_slave_1 removed [ 365.140811][ T61] team0 (unregistering): Port device team_slave_0 removed [ 365.186689][ T5846] Bluetooth: hci2: command tx timeout [ 365.344066][ T5846] Bluetooth: hci3: command 0x0419 tx timeout [ 366.040235][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'. [ 366.363155][T15194] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2461'. [ 366.393177][ T5846] Bluetooth: hci0: command tx timeout [ 366.455740][T14938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.475334][T14938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.507259][T14938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.530032][T14938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.554929][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 366.592407][T15208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.599671][T15208] IPv6: NLM_F_CREATE should be set when creating new route [ 366.657363][T14943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.713501][T14943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.746309][T14943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.785295][T14943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.946816][T14938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.008007][T14938] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.022868][T15226] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2470'. [ 367.062481][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.069659][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.111650][T15226] 0�: renamed from hsr0 (while UP) [ 367.135215][T15226] 0�: entered allmulticast mode [ 367.140584][T15226] hsr_slave_1: entered allmulticast mode [ 367.170167][T15226] A link change request failed with some changes committed already. Interface 70� may have been left with an inconsistent configuration, please check. [ 367.223109][T15230] ���]-�: renamed from lo (while UP) [ 367.277922][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.285136][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.356046][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.386823][T15241] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2472'. [ 367.422886][ T5846] Bluetooth: hci3: command 0x0419 tx timeout [ 367.430383][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.503436][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.511495][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.522008][T15246] atomic_op ffff8880290c5998 conn xmit_atomic 0000000000000000 [ 367.575715][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.582957][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.736373][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 367.747953][T14938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.772682][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 367.774110][T14938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.150856][T14938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.174693][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.244425][T15263] dummy0: entered promiscuous mode [ 368.266579][T15263] macvtap3: entered promiscuous mode [ 368.291625][T15263] batman_adv: batadv0: Adding interface: macvtap3 [ 368.299674][T15263] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.341648][T15263] batman_adv: batadv0: Interface activated: macvtap3 [ 368.450328][T14938] veth0_vlan: entered promiscuous mode [ 368.496522][T14938] veth1_vlan: entered promiscuous mode [ 368.543366][T14938] veth0_macvtap: entered promiscuous mode [ 368.619417][T14938] veth1_macvtap: entered promiscuous mode [ 368.629058][T15275] netlink: 'syz.2.2477': attribute type 4 has an invalid length. [ 368.683397][T15286] netlink: 'syz.2.2477': attribute type 4 has an invalid length. [ 368.754279][T14938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.791672][T14938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.832839][T14938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.851270][T14938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.899724][T14938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.909697][T14938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.039709][T14943] veth0_vlan: entered promiscuous mode [ 369.109576][T14943] veth1_vlan: entered promiscuous mode [ 369.183729][T10815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.191704][T10815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.231305][T14943] veth0_macvtap: entered promiscuous mode [ 369.249350][T14943] veth1_macvtap: entered promiscuous mode [ 369.270673][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'. [ 369.272468][ T8302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.285582][T15310] Cannot find del_set index 286 as target [ 369.306655][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2484'. [ 369.307566][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'. [ 369.325915][ T8302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.371742][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.388486][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.414046][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.462536][T14943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.480088][T14943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.494944][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.519578][T14943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.549131][T14943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.567907][T14943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.582150][T14943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.871781][T10819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.894160][T10819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.964580][T10815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.996926][T10815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.280305][T10815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.395432][T10815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.476401][T10815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.716844][T10815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.928740][T10815] bridge_slave_1: left allmulticast mode [ 370.935087][T10815] bridge_slave_1: left promiscuous mode [ 370.940977][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.957748][T10815] bridge_slave_0: left allmulticast mode [ 370.967010][T10815] bridge_slave_0: left promiscuous mode [ 370.980963][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.095618][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.117915][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.128917][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.143542][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.153051][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 371.160491][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.428902][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.447737][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.457197][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.467035][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.481066][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.489284][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.065464][T10815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.085783][T10815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.097701][T10815] bond0 (unregistering): Released all slaves [ 372.208767][T15356] lo speed is unknown, defaulting to 1000 [ 372.220149][T15356] lo speed is unknown, defaulting to 1000 [ 372.301328][T15396] __nla_validate_parse: 1 callbacks suppressed [ 372.301352][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 372.322315][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 372.377414][T15369] lo speed is unknown, defaulting to 1000 [ 372.433930][T15369] lo speed is unknown, defaulting to 1000 [ 372.567556][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 372.585541][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 372.733787][T10815] hsr_slave_0: left promiscuous mode [ 372.754951][T10815] hsr_slave_1: left promiscuous mode [ 372.763661][T10815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.771531][T10815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.790090][T10815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.799985][T10815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.854987][T10815] veth1_macvtap: left promiscuous mode [ 372.860727][T10815] veth0_macvtap: left promiscuous mode [ 372.868211][T10815] veth1_vlan: left promiscuous mode [ 372.875809][T10815] veth0_vlan: left promiscuous mode [ 373.268247][ T5846] Bluetooth: hci2: command tx timeout [ 373.467254][T10815] team0 (unregistering): Port device team_slave_1 removed [ 373.529201][T10815] team0 (unregistering): Port device team_slave_0 removed [ 373.588948][ T5846] Bluetooth: hci3: command tx timeout [ 374.318361][T15356] chnl_net:caif_netlink_parms(): no params data found [ 374.662968][T15369] chnl_net:caif_netlink_parms(): no params data found [ 374.664966][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2522'. [ 374.719383][T15450] sctp: [Deprecated]: syz.2.2520 (pid 15450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.719383][T15450] Use struct sctp_sack_info instead [ 374.742710][T15454] syz_tun: entered promiscuous mode [ 374.757762][T15454] syz_tun: left promiscuous mode [ 374.995825][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.003301][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.010564][T15369] bridge_slave_0: entered allmulticast mode [ 375.018074][T15369] bridge_slave_0: entered promiscuous mode [ 375.026712][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.071714][T15356] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.104059][T15356] bridge_slave_0: entered allmulticast mode [ 375.111421][T15356] bridge_slave_0: entered promiscuous mode [ 375.131016][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.138825][T15356] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.147251][T15356] bridge_slave_1: entered allmulticast mode [ 375.155623][T15356] bridge_slave_1: entered promiscuous mode [ 375.180119][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.212941][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.220213][T15369] bridge_slave_1: entered allmulticast mode [ 375.238059][T15369] bridge_slave_1: entered promiscuous mode [ 375.298386][T15356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.342281][ T5846] Bluetooth: hci2: command tx timeout [ 375.380197][T15356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.480550][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.490576][T15481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.508992][T15478] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2528'. [ 375.617040][T10815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.662607][ T5846] Bluetooth: hci3: command tx timeout [ 375.735231][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.795655][T10815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.883230][T15356] team0: Port device team_slave_0 added [ 375.958485][T10815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.980611][T15356] team0: Port device team_slave_1 added [ 376.000069][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'. [ 376.017593][T15369] team0: Port device team_slave_0 added [ 376.141869][T10815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.164663][T15494] netlink: 'syz.1.2533': attribute type 2 has an invalid length. [ 376.191306][T15369] team0: Port device team_slave_1 added [ 376.223939][T15494] : entered promiscuous mode [ 376.283403][T15356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.290719][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.319174][T15356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.350027][T15356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.362094][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.401695][T15356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.414461][T15499] nr0: entered promiscuous mode [ 376.429091][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.436606][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.464055][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.477122][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.484281][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.522157][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.552991][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 376.640139][T15503] erspan0: entered promiscuous mode [ 376.667970][T15503] erspan0: left promiscuous mode [ 376.867532][T10815] bridge_slave_1: left allmulticast mode [ 376.877737][T10815] bridge_slave_1: left promiscuous mode [ 376.891409][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.914835][T10815] bridge_slave_0: left allmulticast mode [ 376.932362][T10815] bridge_slave_0: left promiscuous mode [ 376.938315][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.422255][ T5846] Bluetooth: hci2: command tx timeout [ 377.430654][T10815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.446508][T10815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.459536][T10815] bond0 (unregistering): Released all slaves [ 377.505969][T15356] hsr_slave_0: entered promiscuous mode [ 377.532526][T15356] hsr_slave_1: entered promiscuous mode [ 377.613923][T15369] hsr_slave_0: entered promiscuous mode [ 377.627270][T15369] hsr_slave_1: entered promiscuous mode [ 377.644683][T15369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.646847][ T30] audit: type=1107 audit(1731887385.888:2): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='����[n^��d[� 8h��v�����A�����la�۲A�s}j���ť�z����G��' [ 377.682277][T15369] Cannot create hsr debugfs directory [ 377.742561][ T5846] Bluetooth: hci3: command tx timeout [ 378.194387][T10815] hsr_slave_0: left promiscuous mode [ 378.203787][T10815] hsr_slave_1: left promiscuous mode [ 378.217673][T10815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.251011][T10815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.259228][T10815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.267575][T10815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.323492][T10815] veth1_macvtap: left promiscuous mode [ 378.341064][T10815] veth0_macvtap: left promiscuous mode [ 378.349227][T10815] veth1_vlan: left promiscuous mode [ 378.355066][T10815] veth0_vlan: left promiscuous mode [ 379.054278][T15556] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 379.111908][T15562] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 379.205439][T10815] team0 (unregistering): Port device team_slave_1 removed [ 379.260424][T10815] team0 (unregistering): Port device team_slave_0 removed [ 379.502665][ T5846] Bluetooth: hci2: command tx timeout [ 379.822343][ T5846] Bluetooth: hci3: command tx timeout [ 379.880645][T15561] IPv6: sit1: Disabled Multicast RS [ 379.887043][T15561] sit1: entered allmulticast mode [ 379.961384][T15555] lo speed is unknown, defaulting to 1000 [ 380.019519][T15555] lo speed is unknown, defaulting to 1000 [ 380.553342][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 380.767921][T15593] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2561'. [ 380.773757][T15595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2562'. [ 381.242893][T15356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.281118][T15356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.335395][T15356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.374465][T15356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.493049][T15369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.515482][T15369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.542331][T15369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.573968][T15369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.874030][T15356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.901771][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.964530][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.975748][T15356] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.009714][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.016915][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.053707][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'. [ 382.074669][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.081887][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.100457][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2573'. [ 382.110715][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.117903][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.213266][T15637] vlan0: entered allmulticast mode [ 382.239051][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.246279][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.423251][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2576'. [ 382.446786][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 382.743227][T15667] x_tables: duplicate underflow at hook 1 [ 382.791131][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.917277][T15661] vlan3: entered promiscuous mode [ 382.965628][T15661] syz_tun: entered promiscuous mode [ 383.058918][T15688] ipt_ECN: cannot use operation on non-tcp rule [ 383.070570][T15356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.183848][ T5846] Bluetooth: hci2: command tx timeout [ 383.231874][T15356] veth0_vlan: entered promiscuous mode [ 383.260515][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 383.290327][T15356] veth1_vlan: entered promiscuous mode [ 383.318205][T15699] netlink: 'syz.1.2583': attribute type 2 has an invalid length. [ 383.442923][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 383.458304][T15356] veth0_macvtap: entered promiscuous mode [ 383.535472][T15705] netlink: 'syz.2.2585': attribute type 16 has an invalid length. [ 383.553548][T15705] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2585'. [ 383.764376][T15356] veth1_macvtap: entered promiscuous mode [ 383.794782][T15710] delete_channel: no stack [ 383.811836][T15710] delete_channel: no stack [ 383.861319][T15369] veth0_vlan: entered promiscuous mode [ 383.879546][T15356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.941036][T15369] veth1_vlan: entered promiscuous mode [ 383.968691][T15356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.978660][T15716] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 384.037284][T15356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.053277][T15356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.082158][T15356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.112620][T15356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.305057][T15369] veth0_macvtap: entered promiscuous mode [ 384.420090][T15369] veth1_macvtap: entered promiscuous mode [ 384.501550][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.515327][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.533338][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.535572][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.565721][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.590349][T15743] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 384.655385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.665890][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.677706][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.686925][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.698864][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.728957][T15369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.759513][T15369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.785895][T15369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.798201][T15369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.119458][ T8296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.153474][ T8296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.347639][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.414262][ T8284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.426836][ T8284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.463343][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.662842][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.774701][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.130015][ T12] bridge_slave_1: left allmulticast mode [ 386.131475][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.142708][ T12] bridge_slave_1: left promiscuous mode [ 386.150769][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.152459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.167846][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.185118][ T12] bridge_slave_0: left allmulticast mode [ 386.190874][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.192490][ T12] bridge_slave_0: left promiscuous mode [ 386.203861][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.208531][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.223768][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.990938][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.014462][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.034113][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.051164][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.059457][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.069388][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.116303][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.145747][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.174543][ T12] bond0 (unregistering): Released all slaves [ 387.240722][T15792] lo speed is unknown, defaulting to 1000 [ 387.250811][T15792] lo speed is unknown, defaulting to 1000 [ 387.298726][T15796] lo speed is unknown, defaulting to 1000 [ 387.463479][T15796] lo speed is unknown, defaulting to 1000 [ 387.498046][T15779] lo speed is unknown, defaulting to 1000 [ 387.670679][T15779] lo speed is unknown, defaulting to 1000 [ 387.862433][T15816] __nla_validate_parse: 2 callbacks suppressed [ 387.862454][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 387.912227][ T12] hsr_slave_0: left promiscuous mode [ 387.923007][ T12] hsr_slave_1: left promiscuous mode [ 387.952386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.981278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.012934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.020432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.083344][ T12] veth1_macvtap: left promiscuous mode [ 388.088944][ T12] veth0_macvtap: left promiscuous mode [ 388.102205][ T12] veth1_vlan: left promiscuous mode [ 388.108602][ T12] veth0_vlan: left promiscuous mode [ 388.302450][ T5846] Bluetooth: hci2: command tx timeout [ 389.021707][ T12] team0 (unregistering): Port device team_slave_1 removed [ 389.071418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 389.107695][ T5846] Bluetooth: hci3: command tx timeout [ 389.871958][T15796] chnl_net:caif_netlink_parms(): no params data found [ 390.139703][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.151382][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.168599][T15796] bridge_slave_0: entered allmulticast mode [ 390.187820][T15796] bridge_slave_0: entered promiscuous mode [ 390.259529][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.272075][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.292255][T15796] bridge_slave_1: entered allmulticast mode [ 390.299408][T15796] bridge_slave_1: entered promiscuous mode [ 390.384676][ T5846] Bluetooth: hci2: command tx timeout [ 390.424225][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.495118][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.614286][T15849] sctp: [Deprecated]: syz.0.2620 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.614286][T15849] Use struct sctp_sack_info instead [ 390.685583][T15849] sctp: [Deprecated]: syz.0.2620 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.685583][T15849] Use struct sctp_sack_info instead [ 390.704505][T15796] team0: Port device team_slave_0 added [ 390.713257][T15796] team0: Port device team_slave_1 added [ 390.735984][T15849] sctp: [Deprecated]: syz.0.2620 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.735984][T15849] Use struct sctp_sack_info instead [ 390.785346][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.800541][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.872094][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.899915][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.922063][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.022225][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.063595][T15855] netlink: 'syz.1.2621': attribute type 15 has an invalid length. [ 391.088972][T15779] chnl_net:caif_netlink_parms(): no params data found [ 391.135795][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 391.191734][ T5846] Bluetooth: hci3: command tx timeout [ 391.479211][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2624'. [ 391.488356][T15863] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2624'. [ 391.516996][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.559878][T15796] hsr_slave_0: entered promiscuous mode [ 391.571759][T15796] hsr_slave_1: entered promiscuous mode [ 391.605793][T15869] dvmrp0: left allmulticast mode [ 391.691087][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.868549][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.911844][T15779] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.922875][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.934967][T15779] bridge_slave_0: entered allmulticast mode [ 391.948663][T15779] bridge_slave_0: entered promiscuous mode [ 391.974844][T15779] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.992038][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.001656][T15779] bridge_slave_1: entered allmulticast mode [ 392.010584][T15779] bridge_slave_1: entered promiscuous mode [ 392.084326][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.218427][T15779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.327293][T15779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.401429][T15892] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 392.433837][T15892] batman_adv: batadv0: Adding interface: ip6gretap1 [ 392.440526][T15892] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.468146][ T5846] Bluetooth: hci2: command tx timeout [ 392.491741][T15892] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 392.588004][T15900] netlink: 'syz.2.2632': attribute type 3 has an invalid length. [ 392.596750][T15900] netlink: 'syz.2.2632': attribute type 3 has an invalid length. [ 392.623350][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2632'. [ 392.705112][T15779] team0: Port device team_slave_0 added [ 392.771543][T15779] team0: Port device team_slave_1 added [ 392.880354][ T12] bridge_slave_1: left allmulticast mode [ 392.902374][ T12] bridge_slave_1: left promiscuous mode [ 392.909913][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.934417][T15911] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 392.949309][ T12] bridge_slave_0: left allmulticast mode [ 392.962941][ T12] bridge_slave_0: left promiscuous mode [ 392.968770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.010721][T15913] netlink: 'syz.1.2636': attribute type 1 has an invalid length. [ 393.271724][ T5846] Bluetooth: hci3: command tx timeout [ 393.869070][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.885762][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.898102][ T12] bond0 (unregistering): Released all slaves [ 393.917982][T15779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.925334][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.961102][T15779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.975526][T15779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.983248][T15779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.019810][T15779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.058479][T15911] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 394.138342][T15913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 394.254616][T15921] bond7: (slave ip6gretap2): making interface the new active one [ 394.280691][T15921] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 394.310082][T15924] vlan0: entered promiscuous mode [ 394.323791][T15924] bond7: entered promiscuous mode [ 394.332826][T15924] ip6gretap2: entered promiscuous mode [ 394.342524][T15924] vlan0: entered allmulticast mode [ 394.347703][T15924] bond7: entered allmulticast mode [ 394.361172][T15924] ip6gretap2: entered allmulticast mode [ 394.542433][ T5846] Bluetooth: hci2: command tx timeout [ 394.550112][T15779] hsr_slave_0: entered promiscuous mode [ 394.569852][T15779] hsr_slave_1: entered promiscuous mode [ 394.577193][T15779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.585263][T15779] Cannot create hsr debugfs directory [ 394.827967][T15941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.900179][T15944] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 394.928097][ T12] hsr_slave_0: left promiscuous mode [ 394.980272][ T12] hsr_slave_1: left promiscuous mode [ 395.002541][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.010157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.024786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.033049][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.075778][ T12] veth1_macvtap: left promiscuous mode [ 395.081767][ T12] veth0_macvtap: left promiscuous mode [ 395.087811][ T12] veth1_vlan: left promiscuous mode [ 395.093241][ T12] veth0_vlan: left promiscuous mode [ 395.345820][ T5846] Bluetooth: hci3: command tx timeout [ 395.804183][ T12] team0 (unregistering): Port device team_slave_1 removed [ 395.858476][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.433594][T15941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.627212][T15941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.744740][T15941] netdevsim netdevsim1 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.826246][T15796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.866073][T15796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.904129][T15796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.927612][T15796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.027246][T15941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.081708][T15941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.129001][T15941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.151771][T15941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.328391][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.401607][T15779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.427157][T15779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.450730][T15796] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.513463][T15779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.543075][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.550245][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.597201][T15779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.616180][T15985] pimreg3: entered allmulticast mode [ 397.625385][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.632619][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.641670][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2649'. [ 397.776283][T15796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.855468][T15996] xt_hashlimit: max too large, truncated to 1048576 [ 397.940269][T15779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.958636][T15779] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.994112][T15779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.005240][T15779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.027799][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.035065][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.083820][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.090999][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.298705][T16008] ������: renamed from vlan0 (while UP) [ 398.343590][T15779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.448538][T15779] veth0_vlan: entered promiscuous mode [ 398.553199][T15796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.573751][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2655'. [ 398.585370][T15779] veth1_vlan: entered promiscuous mode [ 398.685070][T15779] veth0_macvtap: entered promiscuous mode [ 398.705236][T16024] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 398.709203][T15779] veth1_macvtap: entered promiscuous mode [ 398.729567][T16024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2658'. [ 398.801029][T15779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.844928][T15779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.883550][T15779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.915020][T15779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.934909][T15779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.957311][T15779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.020032][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 399.066651][T16041] x_tables: duplicate underflow at hook 2 [ 399.080549][T16041] sctp: [Deprecated]: syz.0.2662 (pid 16041) Use of int in max_burst socket option. [ 399.080549][T16041] Use struct sctp_assoc_value instead [ 399.175337][T16044] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2663'. [ 399.184778][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.184807][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.250463][T15796] veth0_vlan: entered promiscuous mode [ 399.289126][T15796] veth1_vlan: entered promiscuous mode [ 399.346403][ T8284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.355324][ T8284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.420005][T15796] veth0_macvtap: entered promiscuous mode [ 399.466234][T15796] veth1_macvtap: entered promiscuous mode [ 399.605498][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.641959][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.693974][T15796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.806781][T16069] netlink: 'syz.0.2668': attribute type 20 has an invalid length. [ 399.847885][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.891686][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.924305][T15796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.960643][T15796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.973963][T15796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.987943][T15796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.998149][T15796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.133052][T16081] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2672'. [ 400.136228][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.174449][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.205424][ T8284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.215635][ T8284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.558029][ T8269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.634461][T16101] x_tables: duplicate underflow at hook 2 [ 401.119977][T16114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.210868][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.223161][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.231649][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.249413][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.260053][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 401.275354][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.321354][T16115] lo speed is unknown, defaulting to 1000 [ 401.329058][T16115] lo speed is unknown, defaulting to 1000 [ 401.424523][ T8269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.596823][T16115] chnl_net:caif_netlink_parms(): no params data found [ 401.751405][ T8269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.894484][ T8269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.038164][T16135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 402.176649][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.200941][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.217512][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.221652][T16115] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.228152][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.240684][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.242099][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.248316][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.259556][T16115] bridge_slave_0: entered allmulticast mode [ 402.271632][T16146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.283530][T16115] bridge_slave_0: entered promiscuous mode [ 402.293328][T16115] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.300436][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.323380][T16115] bridge_slave_1: entered allmulticast mode [ 402.331060][T16115] bridge_slave_1: entered promiscuous mode [ 402.443536][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2690'. [ 402.464087][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 402.474060][T16157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2690'. [ 402.501840][T16115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.533430][T16144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.554130][T16147] lo speed is unknown, defaulting to 1000 [ 402.556555][T16115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.587657][ T8269] bridge_slave_1: left allmulticast mode [ 402.601275][ T8269] bridge_slave_1: left promiscuous mode [ 402.607491][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.643421][ T8269] bridge_slave_0: left allmulticast mode [ 402.649148][ T8269] bridge_slave_0: left promiscuous mode [ 402.667137][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.352956][ T5846] Bluetooth: hci2: command tx timeout [ 403.404467][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.416557][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.432798][ T8269] bond0 (unregistering): Released all slaves [ 403.444864][T16147] lo speed is unknown, defaulting to 1000 [ 403.643938][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 403.690848][T16115] team0: Port device team_slave_0 added [ 403.709827][T16115] team0: Port device team_slave_1 added [ 404.056151][T16115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.065157][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.123171][T16115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.211481][T16115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.225647][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.258014][T16115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.463166][ T5846] Bluetooth: hci3: command tx timeout [ 404.482586][ T8269] hsr_slave_0: left promiscuous mode [ 404.511661][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2702'. [ 404.533613][ T8269] hsr_slave_1: left promiscuous mode [ 404.588393][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.617089][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.654997][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.682479][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.713555][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 404.787749][ T8269] veth1_macvtap: left promiscuous mode [ 404.802255][ T8269] veth0_macvtap: left promiscuous mode [ 404.808034][ T8269] veth1_vlan: left promiscuous mode [ 404.823030][ T8269] veth0_vlan: left promiscuous mode [ 405.428606][ T5846] Bluetooth: hci2: command tx timeout [ 405.491459][ T8269] team0 (unregistering): Port device team_slave_1 removed [ 405.547766][ T8269] team0 (unregistering): Port device team_slave_0 removed [ 406.171611][T16115] hsr_slave_0: entered promiscuous mode [ 406.193538][T16115] hsr_slave_1: entered promiscuous mode [ 406.232810][T16115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.240442][T16115] Cannot create hsr debugfs directory [ 406.370991][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2713'. [ 406.552817][T16147] chnl_net:caif_netlink_parms(): no params data found [ 406.562726][ T5846] Bluetooth: hci3: command tx timeout [ 406.804975][T16258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 407.125103][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 407.143516][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 407.208103][T16147] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.217141][T16147] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.235736][T16147] bridge_slave_0: entered allmulticast mode [ 407.250966][T16147] bridge_slave_0: entered promiscuous mode [ 407.283934][T16273] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2722'. [ 407.421666][T16147] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.447608][T16147] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.458619][T16147] bridge_slave_1: entered allmulticast mode [ 407.473557][T16147] bridge_slave_1: entered promiscuous mode [ 407.476808][T16281] netlink: 'syz.1.2725': attribute type 2 has an invalid length. [ 407.503110][ T5846] Bluetooth: hci2: command tx timeout [ 407.592384][T16147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.629916][T16147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.780404][ T8271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.985830][ T8271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.049589][T16147] team0: Port device team_slave_0 added [ 408.118111][ T8271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.140701][T16147] team0: Port device team_slave_1 added [ 408.159166][T16115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 408.190244][T16115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 408.222550][ T8271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.251060][T16115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.265781][T16115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.284320][T16147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.291354][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.318790][T16147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.353285][T16147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.360289][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.387967][T16147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.546329][T16147] hsr_slave_0: entered promiscuous mode [ 408.559680][T16147] hsr_slave_1: entered promiscuous mode [ 408.567802][T16147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.576968][T16147] Cannot create hsr debugfs directory [ 408.588771][ T8271] bridge_slave_1: left allmulticast mode [ 408.595010][ T8271] bridge_slave_1: left promiscuous mode [ 408.600701][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.609987][ T8271] bridge_slave_0: left allmulticast mode [ 408.616760][ T8271] bridge_slave_0: left promiscuous mode [ 408.623215][ T5846] Bluetooth: hci3: command tx timeout [ 408.628801][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.051700][ T8271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.064931][ T8271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.076639][ T8271] bond0 (unregistering): Released all slaves [ 409.387157][ T8271] hsr_slave_0: left promiscuous mode [ 409.399445][ T8271] hsr_slave_1: left promiscuous mode [ 409.412915][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.420408][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.430290][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.438016][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.466117][ T8271] veth1_macvtap: left promiscuous mode [ 409.471662][ T8271] veth0_macvtap: left promiscuous mode [ 409.478361][ T8271] veth1_vlan: left promiscuous mode [ 409.484410][ T8271] veth0_vlan: left promiscuous mode [ 409.583450][ T5153] Bluetooth: hci2: command tx timeout [ 410.052954][ T8271] team0 (unregistering): Port device team_slave_1 removed [ 410.109024][ T8271] team0 (unregistering): Port device team_slave_0 removed [ 410.619631][T16115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.661878][T16115] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.688155][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.695419][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.703926][ T5153] Bluetooth: hci3: command tx timeout [ 410.736337][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.743554][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.826776][T16115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.014978][T16147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.027709][T16147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.046021][T16147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.056769][T16147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.100668][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.194582][T16115] veth0_vlan: entered promiscuous mode [ 411.219231][T16115] veth1_vlan: entered promiscuous mode [ 411.230822][T16147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.267850][T16147] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.291681][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.298939][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.309613][T16115] veth0_macvtap: entered promiscuous mode [ 411.321709][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.328896][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.339654][T16115] veth1_macvtap: entered promiscuous mode [ 411.371486][T16115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.397657][T16115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.424135][T16115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.434374][T16115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.444638][T16115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.454224][T16115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.591117][T10815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.608769][T10815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.634998][T10819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.644451][T10819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.698178][T16147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.950553][T16147] veth0_vlan: entered promiscuous mode [ 411.968214][T16147] veth1_vlan: entered promiscuous mode [ 411.995151][T16147] veth0_macvtap: entered promiscuous mode [ 412.011454][T16147] veth1_macvtap: entered promiscuous mode [ 412.028853][T16147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.048570][T16147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.060749][T16147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.080367][T16147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.091205][T16147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.103685][T16147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.128165][T16147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.152651][T16147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.161430][T16147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.182672][T16147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.267124][ T8271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.364842][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.381261][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.407677][ T8271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.439969][T10815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.448829][T10815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.543946][ T8271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.728198][ T8271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.671164][ T8271] bridge_slave_1: left allmulticast mode [ 413.677279][ T8271] bridge_slave_1: left promiscuous mode [ 413.683786][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.695321][ T8271] bridge_slave_0: left allmulticast mode [ 413.701082][ T8271] bridge_slave_0: left promiscuous mode [ 413.706956][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.137306][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.182924][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.193295][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.204129][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.213262][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.221574][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.381813][ T8271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.395681][ T8271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.408440][ T8271] bond0 (unregistering): Released all slaves [ 414.447629][T16331] lo speed is unknown, defaulting to 1000 [ 414.454211][T16331] lo speed is unknown, defaulting to 1000 [ 414.633073][T16331] chnl_net:caif_netlink_parms(): no params data found [ 414.747447][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.757705][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.766585][T16331] bridge_slave_0: entered allmulticast mode [ 414.775343][T16331] bridge_slave_0: entered promiscuous mode [ 414.787417][ T8271] hsr_slave_0: left promiscuous mode [ 414.794416][ T8271] hsr_slave_1: left promiscuous mode [ 414.800366][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.808536][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.817359][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.827195][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.857093][ T8271] veth1_macvtap: left promiscuous mode [ 414.863567][ T8271] veth0_macvtap: left promiscuous mode [ 414.869140][ T8271] veth1_vlan: left promiscuous mode [ 414.874568][ T8271] veth0_vlan: left promiscuous mode [ 415.212937][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.233142][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.241195][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.249980][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.273309][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.280741][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.562762][ T8271] team0 (unregistering): Port device team_slave_1 removed [ 415.614615][ T8271] team0 (unregistering): Port device team_slave_0 removed [ 416.118059][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.125500][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.133088][T16331] bridge_slave_1: entered allmulticast mode [ 416.140210][T16331] bridge_slave_1: entered promiscuous mode [ 416.185033][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.207120][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.242762][T16340] lo speed is unknown, defaulting to 1000 [ 416.276349][T16331] team0: Port device team_slave_0 added [ 416.291803][T16340] lo speed is unknown, defaulting to 1000 [ 416.296147][T16331] team0: Port device team_slave_1 added [ 416.310576][ T5846] Bluetooth: hci2: command tx timeout [ 416.376694][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.394590][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.421188][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.440638][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.448077][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.475092][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.540927][T16331] hsr_slave_0: entered promiscuous mode [ 416.548394][T16331] hsr_slave_1: entered promiscuous mode [ 416.720675][T16340] chnl_net:caif_netlink_parms(): no params data found [ 416.769498][ T8271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.879529][ T8271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.934812][ T8271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.988988][T16340] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.001488][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.009600][T16340] bridge_slave_0: entered allmulticast mode [ 417.021495][T16340] bridge_slave_0: entered promiscuous mode [ 417.030426][T16340] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.037810][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.045316][T16340] bridge_slave_1: entered allmulticast mode [ 417.052329][T16340] bridge_slave_1: entered promiscuous mode [ 417.079687][ T8271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.124607][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.137881][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.181012][T16340] team0: Port device team_slave_0 added [ 417.191326][T16340] team0: Port device team_slave_1 added [ 417.239470][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.247669][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.284624][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.298454][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.306223][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.334422][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.355208][ T5846] Bluetooth: hci3: command tx timeout [ 417.460494][T16340] hsr_slave_0: entered promiscuous mode [ 417.468159][T16340] hsr_slave_1: entered promiscuous mode [ 417.476259][T16340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.485475][T16340] Cannot create hsr debugfs directory [ 417.491091][T16331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.503934][T16331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.520331][T16331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.530113][ T8271] bridge_slave_1: left allmulticast mode [ 417.536864][ T8271] bridge_slave_1: left promiscuous mode [ 417.550288][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.563436][ T8271] bridge_slave_0: left allmulticast mode [ 417.569245][ T8271] bridge_slave_0: left promiscuous mode [ 417.575761][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.020969][ T8271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.041017][ T8271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.051749][ T8271] bond0 (unregistering): Released all slaves [ 418.074661][T16331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 418.377449][ T8271] hsr_slave_0: left promiscuous mode [ 418.382472][ T5846] Bluetooth: hci2: command tx timeout [ 418.388615][ T8271] hsr_slave_1: left promiscuous mode [ 418.397967][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.407380][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.416185][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.424344][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.453346][ T8271] veth1_macvtap: left promiscuous mode [ 418.458932][ T8271] veth0_macvtap: left promiscuous mode [ 418.465506][ T8271] veth1_vlan: left promiscuous mode [ 418.470848][ T8271] veth0_vlan: left promiscuous mode [ 419.001026][ T8271] team0 (unregistering): Port device team_slave_1 removed [ 419.049486][ T8271] team0 (unregistering): Port device team_slave_0 removed [ 419.422146][ T5846] Bluetooth: hci3: command tx timeout [ 419.616385][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.642315][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.660196][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.667361][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.697553][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.704749][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.977901][T16340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.991177][T16340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.017986][T16340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.043489][T16340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.080783][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.173861][T16331] veth0_vlan: entered promiscuous mode [ 420.188127][T16340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.200094][T16331] veth1_vlan: entered promiscuous mode [ 420.216534][T16340] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.230539][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.237742][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.262812][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.269954][T10817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.319873][T16331] veth0_macvtap: entered promiscuous mode [ 420.338800][T16331] veth1_macvtap: entered promiscuous mode [ 420.367268][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.420169][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.441316][T16331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.452412][T16331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.461163][T16331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.482650][T16331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.482957][ T5846] Bluetooth: hci2: command tx timeout [ 420.557311][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.641767][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.650624][ T8284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.663404][ T8284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.682993][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.884930][T16340] veth0_vlan: entered promiscuous mode [ 420.896252][T16340] veth1_vlan: entered promiscuous mode [ 420.930191][T16340] veth0_macvtap: entered promiscuous mode [ 420.940765][T16340] veth1_macvtap: entered promiscuous mode [ 420.959444][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.970396][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.983632][T16340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.996288][T16340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.007585][T16340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.018824][T16340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.031735][T16340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.041814][T16340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.050752][T16340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.059781][T16340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.157578][T10815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.178248][T10815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.209921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.218479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.651060][ T8269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.707453][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.717661][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.726751][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.736211][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.744089][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.753229][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.797680][T16363] lo speed is unknown, defaulting to 1000 [ 422.805321][T16363] lo speed is unknown, defaulting to 1000 [ 422.873686][ T8269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.964640][T16363] chnl_net:caif_netlink_parms(): no params data found [ 423.054120][T16363] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.061322][T16363] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.069411][T16363] bridge_slave_0: entered allmulticast mode [ 423.077877][T16363] bridge_slave_0: entered promiscuous mode [ 423.088495][T16363] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.096500][T16363] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.108463][T16363] bridge_slave_1: entered allmulticast mode [ 423.116719][T16363] bridge_slave_1: entered promiscuous mode [ 423.149017][T16363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.160760][T16363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.205778][T16363] team0: Port device team_slave_0 added [ 423.215820][T16363] team0: Port device team_slave_1 added [ 423.243238][T16363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.250243][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.277586][T16363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.291499][T16363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.299182][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.332264][T16363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.420901][ T8269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.600074][T16387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2732'. [ 423.624560][ T8269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.819265][T16363] hsr_slave_0: entered promiscuous mode [ 423.830226][T16394] netlink: 'syz.0.2737': attribute type 10 has an invalid length. [ 423.840834][T16363] hsr_slave_1: entered promiscuous mode [ 423.850227][T16363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.860976][T16363] Cannot create hsr debugfs directory [ 423.888779][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.912561][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.922507][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.937241][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.966919][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 423.974532][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.040478][T16399] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media [ 424.110032][T16402] netlink: 'syz.0.2739': attribute type 3 has an invalid length. [ 424.174204][ T8269] bridge_slave_1: left allmulticast mode [ 424.179997][ T8269] bridge_slave_1: left promiscuous mode [ 424.190552][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.213926][ T8269] bridge_slave_0: left allmulticast mode [ 424.219873][ T8269] bridge_slave_0: left promiscuous mode [ 424.230163][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.728409][T16418] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 424.742875][T16418] netlink: 'syz.2.2742': attribute type 4 has an invalid length. [ 424.794006][ T5153] Bluetooth: hci2: command tx timeout [ 424.875705][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.894939][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.906502][ T8269] bond0 (unregistering): Released all slaves [ 424.921866][T16395] lo speed is unknown, defaulting to 1000 [ 425.275558][T16432] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2747'. [ 425.400341][T16440] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2748'. [ 425.425006][T16395] lo speed is unknown, defaulting to 1000 [ 426.073383][ T5153] Bluetooth: hci3: command tx timeout [ 426.106400][ T8269] hsr_slave_0: left promiscuous mode [ 426.117561][ T8269] hsr_slave_1: left promiscuous mode [ 426.128525][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.137090][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.146890][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.158466][ T8269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.209784][ T8269] veth1_macvtap: left promiscuous mode [ 426.225366][ T8269] veth0_macvtap: left promiscuous mode [ 426.242875][ T8269] veth1_vlan: left promiscuous mode [ 426.248269][ T8269] veth0_vlan: left promiscuous mode [ 426.783869][ T5153] Bluetooth: hci0: command tx timeout [ 426.863041][ T5153] Bluetooth: hci2: command tx timeout [ 426.994358][ T8269] team0 (unregistering): Port device team_slave_1 removed [ 427.063931][ T8269] team0 (unregistering): Port device team_slave_0 removed [ 427.764672][T16395] chnl_net:caif_netlink_parms(): no params data found [ 428.169007][ T5846] Bluetooth: hci3: command tx timeout [ 428.235335][T16395] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.243851][T16395] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.251170][T16395] bridge_slave_0: entered allmulticast mode [ 428.259552][T16395] bridge_slave_0: entered promiscuous mode [ 428.268274][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 428.841612][T16495] tipc: Resetting bearer <eth:team0> [ 428.942149][ T5846] Bluetooth: hci2: command tx timeout [ 428.973989][T16495] veth1: left promiscuous mode [ 428.999954][T16495] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 429.038520][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 429.059424][T16395] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.068481][T16395] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.077035][T16395] bridge_slave_1: entered allmulticast mode [ 429.084827][T16395] bridge_slave_1: entered promiscuous mode [ 429.200509][T16395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.244295][T16395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.324249][T16363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.374257][T16363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.406983][T16363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.475133][T16395] team0: Port device team_slave_0 added [ 429.492875][T16363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.534682][T16395] team0: Port device team_slave_1 added [ 429.686031][T16395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.712344][T16395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.757673][T16395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.780480][T16531] lo speed is unknown, defaulting to 1000 [ 429.878135][ T8269] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.926658][T16395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.934090][T16395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.960360][T16395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.994120][T16531] lo speed is unknown, defaulting to 1000 [ 430.104426][ T8269] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.187556][T16534] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2768'. [ 430.218304][ T8269] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.229522][ T5846] Bluetooth: hci3: command tx timeout [ 430.262935][T16395] hsr_slave_0: entered promiscuous mode [ 430.270676][T16395] hsr_slave_1: entered promiscuous mode [ 430.324832][ T8269] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.701804][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 430.747675][ T8269] bridge_slave_1: left allmulticast mode [ 430.758508][ T8269] bridge_slave_1: left promiscuous mode [ 430.765007][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.797331][ T8269] bridge_slave_0: left allmulticast mode [ 430.803222][ T8269] bridge_slave_0: left promiscuous mode [ 430.809006][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.028146][ T5846] Bluetooth: hci2: command tx timeout [ 431.498711][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.512236][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.524822][ T8269] bond0 (unregistering): Released all slaves [ 431.630468][T16363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.654320][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.698400][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.738660][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.753546][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.767604][T16599] netlink: 'syz.1.2784': attribute type 10 has an invalid length. [ 431.819269][T16602] netlink: 'syz.1.2784': attribute type 10 has an invalid length. [ 431.832728][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.843004][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.854460][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 431.876829][T16599] : (slave team0): refused to change device type [ 432.007408][T16593] netlink: 'syz.2.2783': attribute type 29 has an invalid length. [ 432.029141][T16597] tipc: MTU too low for tipc bearer [ 432.053827][T16363] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.062457][T16597] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2784'. [ 432.194019][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.201169][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.241614][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.248912][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.303739][ T5846] Bluetooth: hci3: command tx timeout [ 432.544335][ C1] ------------[ cut here ]------------ [ 432.550560][ C1] WARNING: CPU: 1 PID: 16615 at net/ipv4/route.c:1254 ip_rt_bug+0x2c/0x110 [ 432.559300][ C1] Modules linked in: [ 432.563317][ C1] CPU: 1 UID: 0 PID: 16615 Comm: syz.1.2788 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 432.574171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 432.574330][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 432.584296][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 432.598347][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 6b 61 72 f7 66 90 e8 64 61 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 b5 44 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 432.618050][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 432.624271][ C1] RAX: ef84e56fe97c9c00 RBX: ffff8880615e4780 RCX: ffffffff8170cfaa [ 432.632337][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610de0 [ 432.640383][ C1] RBP: 0000000000000001 R08: ffffffff942e289f R09: ffffffff8a2288bb [ 432.648451][ C1] R10: dffffc0000000000 R11: fffffbfff285c514 R12: dffffc0000000000 [ 432.656521][ C1] R13: ffffc90000a188f8 R14: ffff8880658c3c80 R15: ffff8880232d21c0 [ 432.657865][T16363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.664559][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 432.664593][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.664613][ C1] CR2: 000000110c361273 CR3: 00000000564a4000 CR4: 00000000003526f0 [ 432.664634][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.664649][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.664672][ C1] Call Trace: [ 432.664683][ C1] <IRQ> [ 432.664694][ C1] ? __warn+0x168/0x4e0 [ 432.664724][ C1] ? ip_rt_bug+0x2c/0x110 [ 432.664763][ C1] ? report_bug+0x2b3/0x500 [ 432.664788][ C1] ? ip_rt_bug+0x2c/0x110 [ 432.664827][ C1] ? handle_bug+0x60/0x90 [ 432.664858][ C1] ? exc_invalid_op+0x1a/0x50 [ 432.664890][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 432.682747][T16363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.684215][ C1] ? ip_rt_bug+0x2b/0x110 [ 432.767460][ C1] ? mark_lock+0x9a/0x360 [ 432.771839][ C1] ? ip_rt_bug+0x2c/0x110 [ 432.776279][ C1] ip_push_pending_frames+0xbf/0x150 [ 432.781633][ C1] __icmp_send+0x1013/0x15c0 [ 432.786348][ C1] ? __icmp_send+0x5cb/0x15c0 [ 432.791084][ C1] ? __pfx___icmp_send+0x10/0x10 [ 432.796140][ C1] ? mark_lock+0x9a/0x360 [ 432.800527][ C1] ? look_up_lock_class+0x77/0x170 [ 432.805783][ C1] ipv4_link_failure+0x62f/0xa10 [ 432.810814][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 432.816382][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 432.821565][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 432.827129][ C1] arp_error_report+0x114/0x160 [ 432.832126][ C1] neigh_invalidate+0x247/0x470 [ 432.837056][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 432.842277][ C1] call_timer_fn+0x18e/0x650 [ 432.846932][ C1] ? call_timer_fn+0xc0/0x650 [ 432.851663][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 432.857387][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 432.862612][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 432.868307][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 432.874048][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 432.879733][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.885021][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 432.890348][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 432.896071][ C1] __run_timer_base+0x66a/0x8e0 [ 432.901010][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 432.906478][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.912928][ C1] run_timer_softirq+0xb7/0x170 [ 432.917839][ C1] handle_softirqs+0x2c5/0x980 [ 432.922720][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 432.927550][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 432.932950][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 432.938236][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 432.942927][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 432.948197][ C1] irq_exit_rcu+0x9/0x30 [ 432.952566][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 432.958265][ C1] </IRQ> [ 432.961243][ C1] <TASK> [ 432.964264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.970319][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x35/0x90 [ 432.977313][ C1] Code: 0c 25 c0 d5 03 00 65 8b 05 c0 e6 6e 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 81 f8 15 00 00 <83> f8 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 432.997008][ C1] RSP: 0018:ffffc900001f7508 EFLAGS: 00000246 [ 433.003174][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88805aa49e00 [ 433.011288][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.019356][ C1] RBP: 00000000000001c0 R08: ffffffff820b9f5a R09: 1ffffffff285c500 [ 433.027435][ C1] R10: dffffc0000000000 R11: fffffbfff285c501 R12: 0000000000070249 [ 433.035500][ C1] R13: 1ffff1100b08b97f R14: ffffffff820b9dc0 R15: ffff88801c500000 [ 433.043566][ C1] ? page_ext_get+0x20/0x2a0 [ 433.048223][ C1] ? page_ext_get+0x1ba/0x2a0 [ 433.052986][ C1] page_ext_get+0x1ba/0x2a0 [ 433.057550][ C1] page_table_check_clear+0x4b/0x550 [ 433.063004][ C1] unmap_page_range+0x2a13/0x40e0 [ 433.068204][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 433.073691][ C1] ? mas_next_slot+0xdc6/0xea0 [ 433.078520][ C1] ? uprobe_munmap+0x183/0x460 [ 433.083394][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 433.088495][ C1] unmap_vmas+0x3cc/0x5f0 [ 433.092941][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 433.097868][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 433.103422][ C1] exit_mmap+0x275/0xc40 [ 433.107721][ C1] ? __mutex_lock+0x2ef/0xd70 [ 433.112488][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 433.117316][ C1] ? __pfx_exit_aio+0x10/0x10 [ 433.122121][ C1] ? uprobe_clear_state+0x271/0x290 [ 433.127372][ C1] ? mm_update_next_owner+0xa4/0x810 [ 433.132917][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 433.138181][ C1] __mmput+0x115/0x390 [ 433.142357][ C1] exit_mm+0x220/0x310 [ 433.146565][ C1] ? __pfx_exit_mm+0x10/0x10 [ 433.151215][ C1] ? taskstats_exit+0x326/0xa60 [ 433.156189][ C1] do_exit+0x9b2/0x28e0 [ 433.160411][ C1] ? preempt_schedule_common+0x84/0xd0 [ 433.165983][ C1] ? __pfx_do_exit+0x10/0x10 [ 433.170624][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.176709][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.183146][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 433.188575][ C1] do_group_exit+0x207/0x2c0 [ 433.193266][ C1] __x64_sys_exit_group+0x3f/0x40 [ 433.198345][ C1] x64_sys_call+0x2634/0x2640 [ 433.203121][ C1] do_syscall_64+0xf3/0x230 [ 433.207672][ C1] ? clear_bhb_loop+0x35/0x90 [ 433.212441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.218471][ C1] RIP: 0033:0x7f095977e719 [ 433.222968][ C1] Code: Unable to access opcode bytes at 0x7f095977e6ef. [ 433.230030][ C1] RSP: 002b:00007ffcd4097a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 433.238541][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f095977e719 [ 433.246603][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.254671][ C1] RBP: 00007ffcd4097aec R08: 00007ffcd4097b7f R09: 00000000000697d9 [ 433.263026][ C1] R10: 00007f0959922000 R11: 0000000000000246 R12: 0000000000000032 [ 433.271050][ C1] R13: 00000000000697d9 R14: 000000000006962d R15: 00007ffcd4097b40 [ 433.279151][ C1] </TASK> [ 433.282271][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.289591][ C1] CPU: 1 UID: 0 PID: 16615 Comm: syz.1.2788 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 433.300392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 433.310488][ C1] Call Trace: [ 433.313804][ C1] <IRQ> [ 433.316681][ C1] dump_stack_lvl+0x241/0x360 [ 433.321411][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.326664][ C1] ? __pfx__printk+0x10/0x10 [ 433.331328][ C1] ? vscnprintf+0x5d/0x90 [ 433.335717][ C1] panic+0x349/0x880 [ 433.339673][ C1] ? __warn+0x177/0x4e0 [ 433.343883][ C1] ? __pfx_panic+0x10/0x10 [ 433.348384][ C1] __warn+0x34b/0x4e0 [ 433.352404][ C1] ? ip_rt_bug+0x2c/0x110 [ 433.356785][ C1] report_bug+0x2b3/0x500 [ 433.361159][ C1] ? ip_rt_bug+0x2c/0x110 [ 433.365552][ C1] handle_bug+0x60/0x90 [ 433.369756][ C1] exc_invalid_op+0x1a/0x50 [ 433.374306][ C1] asm_exc_invalid_op+0x1a/0x20 [ 433.379199][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 433.384188][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 6b 61 72 f7 66 90 e8 64 61 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 b5 44 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 433.403841][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 433.409968][ C1] RAX: ef84e56fe97c9c00 RBX: ffff8880615e4780 RCX: ffffffff8170cfaa [ 433.417999][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610de0 [ 433.426018][ C1] RBP: 0000000000000001 R08: ffffffff942e289f R09: ffffffff8a2288bb [ 433.434126][ C1] R10: dffffc0000000000 R11: fffffbfff285c514 R12: dffffc0000000000 [ 433.442141][ C1] R13: ffffc90000a188f8 R14: ffff8880658c3c80 R15: ffff8880232d21c0 [ 433.450164][ C1] ? ip_rt_bug+0x2b/0x110 [ 433.454559][ C1] ? mark_lock+0x9a/0x360 [ 433.458946][ C1] ip_push_pending_frames+0xbf/0x150 [ 433.464292][ C1] __icmp_send+0x1013/0x15c0 [ 433.468950][ C1] ? __icmp_send+0x5cb/0x15c0 [ 433.473765][ C1] ? __pfx___icmp_send+0x10/0x10 [ 433.478760][ C1] ? mark_lock+0x9a/0x360 [ 433.483134][ C1] ? look_up_lock_class+0x77/0x170 [ 433.488328][ C1] ipv4_link_failure+0x62f/0xa10 [ 433.493340][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 433.498889][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 433.504048][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 433.509567][ C1] arp_error_report+0x114/0x160 [ 433.514470][ C1] neigh_invalidate+0x247/0x470 [ 433.519389][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 433.524554][ C1] call_timer_fn+0x18e/0x650 [ 433.529185][ C1] ? call_timer_fn+0xc0/0x650 [ 433.533895][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.539569][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 433.544720][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.550374][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.556035][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.561694][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.566902][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 433.572132][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.577806][ C1] __run_timer_base+0x66a/0x8e0 [ 433.582713][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 433.588137][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.594498][ C1] run_timer_softirq+0xb7/0x170 [ 433.599383][ C1] handle_softirqs+0x2c5/0x980 [ 433.604163][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 433.608943][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 433.614259][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 433.619493][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 433.624098][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 433.629312][ C1] irq_exit_rcu+0x9/0x30 [ 433.633575][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 433.639237][ C1] </IRQ> [ 433.642185][ C1] <TASK> [ 433.645149][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.651178][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x35/0x90 [ 433.658081][ C1] Code: 0c 25 c0 d5 03 00 65 8b 05 c0 e6 6e 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 81 f8 15 00 00 <83> f8 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 433.677716][ C1] RSP: 0018:ffffc900001f7508 EFLAGS: 00000246 [ 433.683820][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88805aa49e00 [ 433.691798][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.699778][ C1] RBP: 00000000000001c0 R08: ffffffff820b9f5a R09: 1ffffffff285c500 [ 433.707784][ C1] R10: dffffc0000000000 R11: fffffbfff285c501 R12: 0000000000070249 [ 433.715775][ C1] R13: 1ffff1100b08b97f R14: ffffffff820b9dc0 R15: ffff88801c500000 [ 433.723800][ C1] ? page_ext_get+0x20/0x2a0 [ 433.728407][ C1] ? page_ext_get+0x1ba/0x2a0 [ 433.733111][ C1] page_ext_get+0x1ba/0x2a0 [ 433.737655][ C1] page_table_check_clear+0x4b/0x550 [ 433.742990][ C1] unmap_page_range+0x2a13/0x40e0 [ 433.748072][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 433.753481][ C1] ? mas_next_slot+0xdc6/0xea0 [ 433.758289][ C1] ? uprobe_munmap+0x183/0x460 [ 433.763080][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 433.768151][ C1] unmap_vmas+0x3cc/0x5f0 [ 433.772518][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 433.777421][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 433.782921][ C1] exit_mmap+0x275/0xc40 [ 433.787193][ C1] ? __mutex_lock+0x2ef/0xd70 [ 433.791882][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 433.796691][ C1] ? __pfx_exit_aio+0x10/0x10 [ 433.801407][ C1] ? uprobe_clear_state+0x271/0x290 [ 433.806610][ C1] ? mm_update_next_owner+0xa4/0x810 [ 433.811902][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 433.817149][ C1] __mmput+0x115/0x390 [ 433.821346][ C1] exit_mm+0x220/0x310 [ 433.825441][ C1] ? __pfx_exit_mm+0x10/0x10 [ 433.830060][ C1] ? taskstats_exit+0x326/0xa60 [ 433.834942][ C1] do_exit+0x9b2/0x28e0 [ 433.839127][ C1] ? preempt_schedule_common+0x84/0xd0 [ 433.844595][ C1] ? __pfx_do_exit+0x10/0x10 [ 433.849193][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.855212][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.861581][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 433.866966][ C1] do_group_exit+0x207/0x2c0 [ 433.871566][ C1] __x64_sys_exit_group+0x3f/0x40 [ 433.876617][ C1] x64_sys_call+0x2634/0x2640 [ 433.881328][ C1] do_syscall_64+0xf3/0x230 [ 433.885844][ C1] ? clear_bhb_loop+0x35/0x90 [ 433.890533][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.896446][ C1] RIP: 0033:0x7f095977e719 [ 433.900885][ C1] Code: Unable to access opcode bytes at 0x7f095977e6ef. [ 433.907907][ C1] RSP: 002b:00007ffcd4097a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 433.916346][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f095977e719 [ 433.924345][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.932337][ C1] RBP: 00007ffcd4097aec R08: 00007ffcd4097b7f R09: 00000000000697d9 [ 433.940350][ C1] R10: 00007f0959922000 R11: 0000000000000246 R12: 0000000000000032 [ 433.948356][ C1] R13: 00000000000697d9 R14: 000000000006962d R15: 00007ffcd4097b40 [ 433.956394][ C1] </TASK> [ 433.959789][ C1] Kernel Offset: disabled [ 433.964252][ C1] Rebooting in 86400 seconds..