last executing test programs: 2m13.102387892s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 1m55.222029045s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m53.996348112s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 1m53.006624231s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 1m43.34646592s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) 1m34.300164732s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m33.111324714s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 1m31.946839495s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 1m26.858235335s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) 1m12.742957333s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m11.407816138s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 1m10.321047214s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 1m8.969137181s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) 50.367178865s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 48.990354042s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 45.197925549s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 43.804373823s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) 29.346562883s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 28.212621469s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 18.753640433s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) 17.762847225s ago: executing program 1 (id=883): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="ff020400000000010000000000000000000000000000020500dc19fdc74d0b7d3a779f385174770593e062639fb195552a3105cad5d51eb3298aa530bcb6dd6b5d72e820f1a0596a9a264807a5023399747a315e9b71050340842b6ac5c81210387e5b923f13dbb638a0773aad30c0242128b859a100a16064824acf041e373768447d1155b5f6eeca857a68baa24dd73a30d31af8e582a3042dd3c8c7c785a6a592ed4063de0b", 0xa7) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) 5.299212203s ago: executing program 2 (id=816): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000083}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.771608311s ago: executing program 0 (id=1437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x10, 0x3}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xdffffffe, 0xb55, 0x80000001, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) 3.029577387s ago: executing program 4 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) close(r0) 2.796984952s ago: executing program 4 (id=1798): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000feffffff00000000000063012100000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.554804316s ago: executing program 4 (id=1799): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8cd83, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x2, 0xed27c9fa5277b9b7}}}, 0x24}}, 0x24048000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x640100fc, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e23, 0x8}}}}, 0x2a) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x34, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x34}}, 0x20008000) 1.903400425s ago: executing program 4 (id=1800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x4000000e, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 1.81881281s ago: executing program 4 (id=1801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c8, 0x200000f3) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000140)=0x51) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}]}, 0x80}}, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r7, 0xff, 0x30}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000180)="8021418f5474a03c9684effb12708fd98c6efa18edbcde776a17915972981f2e40a542961c31d72c67ecb6b98854d245c6f17fc270fe74a68573fe00dc1504006890de7b06ce1268d1ebbf9b310fba288da901a9b4e4baae21190565103dc94516f66bd8e9", 0x65}, {&(0x7f0000000200)="162cc4f4455d9870476b985499f460b0752aecb34c08a85610df03fb11d3dcc90ddb47e9abfef3a61fb9fffd78b3b3a165ea3461664dad746f48", 0x3a}], 0x2) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}}, 0x0) 336.948072ms ago: executing program 4 (id=1802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa865d60f4adf700202c00fe800000000000000000000000000000ff0200000000000000000000000000013c00000000000000050200060000000062000000000000008100907800000000"], 0x0) sendmmsg$alg(r3, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001180)="01", 0x1}], 0x1}], 0x1, 0x40044) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) r7 = socket(0x15, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000008b773e18f9b420518a09ab0e21256f66394b4675a61f11346b967ddafa1f79c9e7ff89e0ca2155578eb9bdd6fc67da515b238a68ae5cf4acef9da8bce9d42c2b486fe9df8181772b9107fa327d7ffc6f1266c0c616fd142226b2bbb1191d19f75b23d82176e1a2447bd2580a66377cd9c097f774521418a36775a0418df5b5421dd400"/144, @ANYRES16=r9, @ANYBLOB="010000000000000000000700000005000400e00000011400060076657468315f746f5f7465616d00000005000500e0000001"], 0x38}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r9, 0x4, 0x70b52a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2080}, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x3, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4040) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r7, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}}, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105f00000000009900000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=1557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000a00000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000001400040000000000000000000000000000000001"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): : left allmulticast mode [ 311.753666][ T13] bridge_slave_1: left promiscuous mode [ 311.761445][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.779693][ T13] bridge_slave_0: left allmulticast mode [ 311.785510][ T13] bridge_slave_0: left promiscuous mode [ 311.791284][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.157309][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.169760][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.180140][ T13] bond0 (unregistering): Released all slaves [ 312.306085][T11449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.329609][T11455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.465902][T11455] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.614519][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.621712][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.638580][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.645908][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.687841][T11449] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.710742][T11512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.791357][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.798597][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.811726][T11512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.823774][T11512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.858809][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.866030][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.922776][T11512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.099736][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.141523][T11608] xt_CT: No such helper "netbios-ns" [ 313.264477][T11449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.353671][ T13] hsr_slave_0: left promiscuous mode [ 313.360675][ T13] hsr_slave_1: left promiscuous mode [ 313.373361][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.380870][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.397399][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.413319][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.458190][ T13] veth1_macvtap: left promiscuous mode [ 313.471167][ T13] veth0_macvtap: left promiscuous mode [ 313.483251][ T13] veth1_vlan: left promiscuous mode [ 313.488667][ T13] veth0_vlan: left promiscuous mode [ 314.069904][ T13] team0 (unregistering): Port device team_slave_1 removed [ 314.113495][ T13] team0 (unregistering): Port device team_slave_0 removed [ 314.696862][T11435] veth0_vlan: entered promiscuous mode [ 314.785712][T11435] veth1_vlan: entered promiscuous mode [ 314.831158][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.900448][T11435] veth0_macvtap: entered promiscuous mode [ 314.964061][T11435] veth1_macvtap: entered promiscuous mode [ 314.993971][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.050946][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.058215][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.107618][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.114798][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.139960][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.153239][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.169451][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.228735][T11435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.238942][T11435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.248748][T11435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.257795][T11435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.314748][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.565464][T11639] bond6: entered promiscuous mode [ 315.570640][T11639] bond6: entered allmulticast mode [ 315.577932][T11639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.656505][T11455] veth0_vlan: entered promiscuous mode [ 315.681123][T11455] veth1_vlan: entered promiscuous mode [ 315.705959][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.714941][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.859520][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.879238][T11449] veth0_vlan: entered promiscuous mode [ 315.896092][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.949863][T11449] veth1_vlan: entered promiscuous mode [ 315.977157][T11455] veth0_macvtap: entered promiscuous mode [ 316.037868][T11455] veth1_macvtap: entered promiscuous mode [ 316.124112][T11449] veth0_macvtap: entered promiscuous mode [ 316.168702][T11449] veth1_macvtap: entered promiscuous mode [ 316.257091][T11512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.278184][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.311817][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.331169][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.341877][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 316.348195][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.395824][T11455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.422201][T11455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.430968][T11455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.440054][T11455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.463106][T11449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.490407][T11449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.508204][T11449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.528164][T11449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.606109][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.706935][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.820561][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.845556][T11512] veth0_vlan: entered promiscuous mode [ 316.911936][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.942654][T11512] veth1_vlan: entered promiscuous mode [ 316.978808][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.994918][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.061730][ T9227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.077312][ T9227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.115952][T11512] veth0_macvtap: entered promiscuous mode [ 317.133343][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.141195][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.197653][T11512] veth1_macvtap: entered promiscuous mode [ 317.354280][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.363191][T11512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.379815][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.399602][T11512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.408318][ T36] bridge_slave_1: left allmulticast mode [ 317.415003][ T36] bridge_slave_1: left promiscuous mode [ 317.420736][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.431141][ T36] bridge_slave_0: left allmulticast mode [ 317.440355][ T36] bridge_slave_0: left promiscuous mode [ 317.449667][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467703][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.135868][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.158615][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.160066][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.179133][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.179535][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.193557][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.204961][ T36] bond0 (unregistering): Released all slaves [ 318.213688][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.260686][T11512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.277968][T11512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.305018][T11512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.337060][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 318.342167][T11512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.825275][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.842697][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.854048][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.864093][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.872928][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.191942][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.243383][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.369720][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.390143][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.740884][ T36] hsr_slave_0: left promiscuous mode [ 319.754070][ T36] hsr_slave_1: left promiscuous mode [ 319.759943][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.779601][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.788587][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.806193][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.851750][ T36] veth1_macvtap: left promiscuous mode [ 319.868090][ T36] veth0_macvtap: left promiscuous mode [ 319.876930][ T36] veth1_vlan: left promiscuous mode [ 319.883348][ T36] veth0_vlan: left promiscuous mode [ 320.243000][ T5829] Bluetooth: hci0: command tx timeout [ 320.594398][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 320.829095][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.840834][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.848772][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.857161][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.867934][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.966327][ T5829] Bluetooth: hci2: command tx timeout [ 321.030907][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.039211][ T36] team0 (unregistering): Port device team_slave_1 removed [ 321.040160][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.056430][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.068564][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.078707][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.126300][ T36] team0 (unregistering): Port device team_slave_0 removed [ 322.100702][T11657] chnl_net:caif_netlink_parms(): no params data found [ 322.228596][T11697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'. [ 322.253391][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1652'. [ 322.269382][T11697] netlink: 'syz.4.1652': attribute type 7 has an invalid length. [ 322.278869][T11697] netlink: 'syz.4.1652': attribute type 8 has an invalid length. [ 322.287515][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 322.322483][ T5837] Bluetooth: hci0: command tx timeout [ 322.354592][T11697] erspan0: entered promiscuous mode [ 322.361228][T11697] gretap0: entered promiscuous mode [ 322.401106][T11697] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 322.427823][T11697] Cannot create hsr debugfs directory [ 322.441432][T11697] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 322.462481][T11697] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 322.596093][T11666] chnl_net:caif_netlink_parms(): no params data found [ 322.767334][T11702] syzkaller0: entered promiscuous mode [ 322.773064][T11702] syzkaller0: entered allmulticast mode [ 322.965083][ T5837] Bluetooth: hci3: command tx timeout [ 323.043289][ T5837] Bluetooth: hci2: command tx timeout [ 323.125913][ T5837] Bluetooth: hci4: command tx timeout [ 324.312267][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.321229][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.328967][T11657] bridge_slave_0: entered allmulticast mode [ 324.337665][T11657] bridge_slave_0: entered promiscuous mode [ 324.409799][ T5837] Bluetooth: hci0: command tx timeout [ 324.499955][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.531000][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.540630][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.549916][T11657] bridge_slave_1: entered allmulticast mode [ 324.576848][T11657] bridge_slave_1: entered promiscuous mode [ 324.641947][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.805092][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.832617][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 324.853587][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.911573][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.923499][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.930862][T11666] bridge_slave_0: entered allmulticast mode [ 324.939576][T11666] bridge_slave_0: entered promiscuous mode [ 324.958057][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.989869][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.015392][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.023686][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.030978][T11666] bridge_slave_1: entered allmulticast mode [ 325.042156][ T5837] Bluetooth: hci3: command tx timeout [ 325.049792][T11666] bridge_slave_1: entered promiscuous mode [ 325.106924][T11657] team0: Port device team_slave_0 added [ 325.124114][ T5837] Bluetooth: hci2: command tx timeout [ 325.180286][T11657] team0: Port device team_slave_1 added [ 325.195099][T11679] chnl_net:caif_netlink_parms(): no params data found [ 325.202439][ T5837] Bluetooth: hci4: command tx timeout [ 325.227408][T11666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.232827][T11726] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1659'. [ 325.314939][T11666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.347522][T11726] dummy0: entered promiscuous mode [ 325.353378][T11726] vlan5: entered promiscuous mode [ 325.378375][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.386636][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.413011][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.591194][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.599475][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.626261][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.716741][T11666] team0: Port device team_slave_0 added [ 325.733595][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 325.832716][T11657] hsr_slave_0: entered promiscuous mode [ 325.839080][T11657] hsr_slave_1: entered promiscuous mode [ 325.847864][T11657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.855807][T11657] Cannot create hsr debugfs directory [ 325.873434][T11666] team0: Port device team_slave_1 added [ 325.949370][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 326.077407][T11666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.087267][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.114902][T11666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.170423][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.177990][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.185639][T11679] bridge_slave_0: entered allmulticast mode [ 326.196281][T11679] bridge_slave_0: entered promiscuous mode [ 326.205371][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.212728][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.220409][T11679] bridge_slave_1: entered allmulticast mode [ 326.230335][T11679] bridge_slave_1: entered promiscuous mode [ 326.244882][T11666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.251901][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.278239][T11666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.307846][T11681] chnl_net:caif_netlink_parms(): no params data found [ 326.368527][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.431052][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.476517][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.486417][ T5837] Bluetooth: hci0: command tx timeout [ 326.614794][T11666] hsr_slave_0: entered promiscuous mode [ 326.621286][T11666] hsr_slave_1: entered promiscuous mode [ 326.628257][T11666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.636305][T11666] Cannot create hsr debugfs directory [ 326.748573][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.819195][T11679] team0: Port device team_slave_0 added [ 326.955059][T11679] team0: Port device team_slave_1 added [ 327.021707][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'. [ 327.095005][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.132186][ T5837] Bluetooth: hci3: command tx timeout [ 327.160886][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.168265][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.180896][T11681] bridge_slave_0: entered allmulticast mode [ 327.188288][T11681] bridge_slave_0: entered promiscuous mode [ 327.202693][ T5837] Bluetooth: hci2: command tx timeout [ 327.251908][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.279754][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.287043][ T5837] Bluetooth: hci4: command tx timeout [ 327.293074][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.300263][T11681] bridge_slave_1: entered allmulticast mode [ 327.308342][T11681] bridge_slave_1: entered promiscuous mode [ 327.343829][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.350882][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.377609][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.390903][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.398227][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.425784][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.520178][T11681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.648037][T11681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.679664][T11679] hsr_slave_0: entered promiscuous mode [ 327.699564][T11679] hsr_slave_1: entered promiscuous mode [ 327.707233][T11679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.715365][T11679] Cannot create hsr debugfs directory [ 327.774317][T11681] team0: Port device team_slave_0 added [ 327.808144][T11681] team0: Port device team_slave_1 added [ 328.050880][T11681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.076984][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.104732][T11681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.134863][T11681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.143584][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.170221][T11681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.276356][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.426827][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.504058][T11681] hsr_slave_0: entered promiscuous mode [ 328.510964][T11681] hsr_slave_1: entered promiscuous mode [ 328.523269][T11681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.530869][T11681] Cannot create hsr debugfs directory [ 328.598205][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.824993][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 328.840575][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.958666][T11657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.978636][T11657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.990989][T11657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.013644][T11657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.205976][ T5837] Bluetooth: hci3: command tx timeout [ 329.316185][ T36] bridge_slave_1: left allmulticast mode [ 329.323654][ T36] bridge_slave_1: left promiscuous mode [ 329.329611][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.341529][ T36] bridge_slave_0: left allmulticast mode [ 329.353108][ T36] bridge_slave_0: left promiscuous mode [ 329.358961][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.367205][ T5837] Bluetooth: hci4: command tx timeout [ 329.380401][ T36] bridge_slave_1: left allmulticast mode [ 329.391443][ T36] bridge_slave_1: left promiscuous mode [ 329.402683][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.430503][ T36] bridge_slave_0: left allmulticast mode [ 329.453587][ T36] bridge_slave_0: left promiscuous mode [ 329.459429][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.487707][ T36] bridge_slave_1: left allmulticast mode [ 329.506892][ T36] bridge_slave_1: left promiscuous mode [ 329.513310][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.525086][ T36] bridge_slave_0: left allmulticast mode [ 329.530780][ T36] bridge_slave_0: left promiscuous mode [ 329.536806][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.016135][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.027669][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.037920][ T36] bond0 (unregistering): Released all slaves [ 330.389325][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.401581][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.411953][ T36] bond0 (unregistering): Released all slaves [ 330.733417][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.745954][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.757040][ T36] bond0 (unregistering): Released all slaves [ 331.192745][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.268203][T11657] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.311710][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.318946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.375313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.382560][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.537796][T11666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.561210][T11666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.613900][T11666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.674776][T11666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.748174][T11657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.159485][T11666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.287479][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1686'. [ 332.330048][T11666] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.525567][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.532832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.601310][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.608570][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.730330][T11657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.861988][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1689'. [ 333.191712][ T36] hsr_slave_0: left promiscuous mode [ 333.223909][ T36] hsr_slave_1: left promiscuous mode [ 333.233552][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.241021][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.281089][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.302535][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.321288][ T36] hsr_slave_0: left promiscuous mode [ 333.354209][ T36] hsr_slave_1: left promiscuous mode [ 333.372227][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.379815][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.393669][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.403681][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.417209][ T36] hsr_slave_0: left promiscuous mode [ 333.427630][ T36] hsr_slave_1: left promiscuous mode [ 333.434026][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.441623][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.457335][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.471765][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.596012][ T36] veth1_macvtap: left promiscuous mode [ 333.601651][ T36] veth0_macvtap: left promiscuous mode [ 333.607658][ T36] veth1_vlan: left promiscuous mode [ 333.616620][ T36] veth0_vlan: left promiscuous mode [ 333.624188][ T36] veth1_macvtap: left promiscuous mode [ 333.629733][ T36] veth0_macvtap: left promiscuous mode [ 333.640078][ T36] veth1_vlan: left promiscuous mode [ 333.646150][ T36] veth0_vlan: left promiscuous mode [ 333.652839][ T36] veth1_macvtap: left promiscuous mode [ 333.658502][ T36] veth0_macvtap: left promiscuous mode [ 333.664588][ T36] veth1_vlan: left promiscuous mode [ 333.670051][ T36] veth0_vlan: left promiscuous mode [ 334.404189][ T36] team0 (unregistering): Port device team_slave_1 removed [ 334.455024][ T36] team0 (unregistering): Port device team_slave_0 removed [ 335.268297][ T36] team0 (unregistering): Port device team_slave_1 removed [ 335.318930][ T36] team0 (unregistering): Port device team_slave_0 removed [ 336.181200][ T36] team0 (unregistering): Port device team_slave_1 removed [ 336.226755][ T36] team0 (unregistering): Port device team_slave_0 removed [ 336.655337][T11657] veth0_vlan: entered promiscuous mode [ 336.771754][T11681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.827424][T11657] veth1_vlan: entered promiscuous mode [ 336.854713][T11681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 336.877048][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 336.902627][T11681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 336.963996][T11681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.137456][T11679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.151461][T11679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.183339][T11679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.198408][T11679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.244333][T11657] veth0_macvtap: entered promiscuous mode [ 337.307058][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.335287][T11657] veth1_macvtap: entered promiscuous mode [ 337.505537][T11657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.577849][T11666] veth0_vlan: entered promiscuous mode [ 337.609489][T11657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.672945][T11657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.681710][T11657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.701221][T11657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.710133][T11657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.725076][T11666] veth1_vlan: entered promiscuous mode [ 337.934307][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.970823][T11681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.076360][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.121286][T11681] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.136812][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.144042][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.179837][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.187080][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.222394][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.230279][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.248360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.255701][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.275547][T11666] veth0_macvtap: entered promiscuous mode [ 338.317202][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.336069][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.354147][T11666] veth1_macvtap: entered promiscuous mode [ 338.372722][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.379936][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.456576][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.519575][T11666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.569101][T11666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.590935][T11666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.605431][T11666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.614301][T11666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.970051][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.167028][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.259177][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.301799][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.361259][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.419524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.437091][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.458085][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.486815][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.557740][T11681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.659937][T11679] veth0_vlan: entered promiscuous mode [ 339.758896][T11679] veth1_vlan: entered promiscuous mode [ 339.790513][ T36] bridge_slave_1: left allmulticast mode [ 339.798292][ T36] bridge_slave_1: left promiscuous mode [ 339.804648][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.816108][ T36] bridge_slave_0: left allmulticast mode [ 339.821770][ T36] bridge_slave_0: left promiscuous mode [ 339.828065][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.477932][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.479349][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.498873][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.507826][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.507991][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.526198][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.535450][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.536006][ T36] bond0 (unregistering): Released all slaves [ 340.613297][T11679] veth0_macvtap: entered promiscuous mode [ 340.624591][T11679] veth1_macvtap: entered promiscuous mode [ 340.655521][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.793366][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 340.869338][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.899609][T11681] veth0_vlan: entered promiscuous mode [ 340.996624][T11679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.034960][T11679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.068078][T11679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.091710][T11679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.115724][T11681] veth1_vlan: entered promiscuous mode [ 341.237627][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.261733][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.271263][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.280553][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.322505][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.481338][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 341.489047][T11681] veth0_macvtap: entered promiscuous mode [ 341.585089][T11681] veth1_macvtap: entered promiscuous mode [ 341.841565][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.849878][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.124466][ T36] hsr_slave_0: left promiscuous mode [ 342.130734][ T36] hsr_slave_1: left promiscuous mode [ 342.137538][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.152833][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.161120][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.174640][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.201078][ T36] veth1_macvtap: left promiscuous mode [ 342.207229][ T36] veth0_macvtap: left promiscuous mode [ 342.213075][ T36] veth1_vlan: left promiscuous mode [ 342.218551][ T36] veth0_vlan: left promiscuous mode [ 342.567749][ T5829] Bluetooth: hci0: command tx timeout [ 342.706227][ T36] team0 (unregistering): Port device team_slave_1 removed [ 342.751417][ T36] team0 (unregistering): Port device team_slave_0 removed [ 343.390475][T11681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.402339][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.408548][T11878] chnl_net:caif_netlink_parms(): no params data found [ 343.426216][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.442596][ T5829] Bluetooth: hci2: command tx timeout [ 343.491686][T11681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.504956][T11681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.514247][T11681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.523585][T11681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.533087][T11681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.986749][T11878] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.009486][T11878] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.035037][T11878] bridge_slave_0: entered allmulticast mode [ 344.044706][T11878] bridge_slave_0: entered promiscuous mode [ 344.077722][T11887] chnl_net:caif_netlink_parms(): no params data found [ 344.105591][T11878] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.123803][T11878] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.131124][T11878] bridge_slave_1: entered allmulticast mode [ 344.147532][T11878] bridge_slave_1: entered promiscuous mode [ 344.285797][T11878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.359086][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.391351][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.394711][T11878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.408282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.492680][T11878] team0: Port device team_slave_0 added [ 344.517183][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.596590][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.614203][T11878] team0: Port device team_slave_1 added [ 344.621659][T11887] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.630513][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.643038][ T5829] Bluetooth: hci0: command tx timeout [ 344.649966][T11887] bridge_slave_0: entered allmulticast mode [ 344.662410][T11887] bridge_slave_0: entered promiscuous mode [ 344.700957][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.716701][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.724688][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.733809][T11887] bridge_slave_1: entered allmulticast mode [ 344.747605][T11887] bridge_slave_1: entered promiscuous mode [ 344.789692][T11878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.797778][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.825983][T11878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.844476][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.857990][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.869642][T11878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.877257][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.904792][T11878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.936965][T11887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.950884][T11887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.091955][T11887] team0: Port device team_slave_0 added [ 345.129681][T11878] hsr_slave_0: entered promiscuous mode [ 345.136878][T11878] hsr_slave_1: entered promiscuous mode [ 345.145218][T11878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.153492][T11878] Cannot create hsr debugfs directory [ 345.164826][T11887] team0: Port device team_slave_1 added [ 345.269781][T11887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.292064][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.352314][T11887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.497038][T11887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.522860][ T5829] Bluetooth: hci2: command tx timeout [ 345.528402][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.559716][T11887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.844774][T11887] hsr_slave_0: entered promiscuous mode [ 345.851207][T11887] hsr_slave_1: entered promiscuous mode [ 345.873547][T11887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.881156][T11887] Cannot create hsr debugfs directory [ 345.959091][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.011463][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.025964][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.041528][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.053538][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.063130][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.121911][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.220650][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.519153][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.733684][ T5829] Bluetooth: hci0: command tx timeout [ 347.005044][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.015353][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.023824][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.050359][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.059834][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.215288][ T36] bridge_slave_1: left allmulticast mode [ 347.221039][ T36] bridge_slave_1: left promiscuous mode [ 347.246436][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.264524][ T36] bridge_slave_0: left allmulticast mode [ 347.270191][ T36] bridge_slave_0: left promiscuous mode [ 347.290340][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.317512][ T36] bridge_slave_1: left allmulticast mode [ 347.332043][ T36] bridge_slave_1: left promiscuous mode [ 347.337813][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.351068][ T36] bridge_slave_0: left allmulticast mode [ 347.358714][ T36] bridge_slave_0: left promiscuous mode [ 347.366265][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.612274][ T5837] Bluetooth: hci2: command tx timeout [ 347.807263][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.822398][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.833389][ T36] bond0 (unregistering): Released all slaves [ 348.158124][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.162971][ T5837] Bluetooth: hci3: command tx timeout [ 348.176488][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.190064][ T36] bond0 (unregistering): Released all slaves [ 348.523625][T11941] bridge0: entered allmulticast mode [ 348.803327][ T5837] Bluetooth: hci0: command tx timeout [ 349.048791][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 349.122721][ T5829] Bluetooth: hci4: command tx timeout [ 349.193317][T11878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.253342][T11878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.269508][T11878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.336065][T11878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.393416][T11955] team_slave_0: entered promiscuous mode [ 349.400191][T11955] team_slave_1: entered promiscuous mode [ 349.551765][T11923] chnl_net:caif_netlink_parms(): no params data found [ 349.682917][ T5829] Bluetooth: hci2: command tx timeout [ 350.050960][ T36] hsr_slave_0: left promiscuous mode [ 350.058777][ T36] hsr_slave_1: left promiscuous mode [ 350.069261][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.076967][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.103233][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.111147][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.125833][ T36] hsr_slave_0: left promiscuous mode [ 350.133155][ T36] hsr_slave_1: left promiscuous mode [ 350.139401][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.147423][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.156456][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.164619][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.203160][T11969] netlink: 'syz.4.1716': attribute type 13 has an invalid length. [ 350.203589][ T36] veth1_macvtap: left promiscuous mode [ 350.217502][T11969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1716'. [ 350.218322][ T36] veth0_macvtap: left promiscuous mode [ 350.237025][ T36] veth1_vlan: left promiscuous mode [ 350.243016][ T5829] Bluetooth: hci3: command tx timeout [ 350.243684][ T36] veth0_vlan: left promiscuous mode [ 350.256021][ T36] veth1_macvtap: left promiscuous mode [ 350.262442][ T36] veth0_macvtap: left promiscuous mode [ 350.268056][ T36] veth1_vlan: left promiscuous mode [ 350.273382][ T36] veth0_vlan: left promiscuous mode [ 350.923415][ T36] team0 (unregistering): Port device team_slave_1 removed [ 350.970994][ T36] team0 (unregistering): Port device team_slave_0 removed [ 351.212413][ T5829] Bluetooth: hci4: command tx timeout [ 351.806762][ T36] team0 (unregistering): Port device team_slave_1 removed [ 351.849792][ T36] team0 (unregistering): Port device team_slave_0 removed [ 352.324055][ T5829] Bluetooth: hci3: command tx timeout [ 352.388098][T11887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.445378][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.461832][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.470280][T11923] bridge_slave_0: entered allmulticast mode [ 352.480573][T11923] bridge_slave_0: entered promiscuous mode [ 352.496939][T11887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.518307][T11937] chnl_net:caif_netlink_parms(): no params data found [ 352.537306][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.546316][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.555075][T11923] bridge_slave_1: entered allmulticast mode [ 352.564261][T11923] bridge_slave_1: entered promiscuous mode [ 352.577378][T11887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.599214][T11887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.735037][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.745857][T11975] netlink: 'syz.4.1718': attribute type 12 has an invalid length. [ 352.799047][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.954589][T11923] team0: Port device team_slave_0 added [ 352.995264][T11983] netlink: 'syz.4.1719': attribute type 11 has an invalid length. [ 353.074446][T11923] team0: Port device team_slave_1 added [ 353.179011][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.187045][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.194611][T11937] bridge_slave_0: entered allmulticast mode [ 353.204461][T11937] bridge_slave_0: entered promiscuous mode [ 353.214249][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.221460][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.229842][T11937] bridge_slave_1: entered allmulticast mode [ 353.238684][T11937] bridge_slave_1: entered promiscuous mode [ 353.249027][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.256196][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.286712][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.294947][ T5829] Bluetooth: hci4: command tx timeout [ 353.300596][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.310082][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.336992][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.469136][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.483597][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.576663][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 353.596121][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.609406][T11937] team0: Port device team_slave_0 added [ 353.643661][T11923] hsr_slave_0: entered promiscuous mode [ 353.650136][T11923] hsr_slave_1: entered promiscuous mode [ 353.656774][T11923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.665798][T11923] Cannot create hsr debugfs directory [ 353.685234][T11937] team0: Port device team_slave_1 added [ 353.805290][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.821139][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.849256][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.874094][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.918589][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.929008][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.958044][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.082097][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.089305][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.129394][T11937] hsr_slave_0: entered promiscuous mode [ 354.144620][T11937] hsr_slave_1: entered promiscuous mode [ 354.151708][T11937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.175983][T11937] Cannot create hsr debugfs directory [ 354.208887][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.216059][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.289192][T11887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.405176][ T5829] Bluetooth: hci3: command tx timeout [ 354.428479][ T5909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.596935][ T5909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.694580][T12014] netlink: 'syz.4.1730': attribute type 10 has an invalid length. [ 354.702439][T11887] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.713586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.720763][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.758008][ T5909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.818007][T12014] dummy0: entered allmulticast mode [ 354.824323][T12014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 354.837380][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.844605][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.945181][ T5909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.018968][T12017] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1731'. [ 355.362220][ T5829] Bluetooth: hci4: command tx timeout [ 355.457450][ T5909] bridge_slave_1: left allmulticast mode [ 355.465584][ T5909] bridge_slave_1: left promiscuous mode [ 355.471469][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.481915][ T5909] bridge_slave_0: left allmulticast mode [ 355.495856][ T5909] bridge_slave_0: left promiscuous mode [ 355.501614][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.014795][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.029303][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.039803][ T5909] bond0 (unregistering): Released all slaves [ 356.164833][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.296236][T12037] bond0: Device is already in use. [ 356.460788][T12039] tipc: Enabling of bearer rejected, failed to enable media [ 356.476049][T11887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.528108][T11878] veth0_vlan: entered promiscuous mode [ 356.609163][T11878] veth1_vlan: entered promiscuous mode [ 356.782631][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 356.805430][T11887] veth0_vlan: entered promiscuous mode [ 356.829580][T12043] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1736'. [ 356.881343][ T5909] hsr_slave_0: left promiscuous mode [ 356.902822][ T5909] hsr_slave_1: left promiscuous mode [ 356.908744][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.918807][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.933153][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.940632][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.980427][ T5909] veth1_macvtap: left promiscuous mode [ 356.986222][ T5909] veth0_macvtap: left promiscuous mode [ 356.991889][ T5909] veth1_vlan: left promiscuous mode [ 356.997330][ T5909] veth0_vlan: left promiscuous mode [ 357.506134][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 357.554696][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 358.005377][T11887] veth1_vlan: entered promiscuous mode [ 358.028558][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 358.106122][T11878] veth0_macvtap: entered promiscuous mode [ 358.144169][T11937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.169408][T11878] veth1_macvtap: entered promiscuous mode [ 358.201576][T11937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.289294][T11878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.298418][T11937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.388191][T11887] veth0_macvtap: entered promiscuous mode [ 358.419508][T11937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.438485][T11878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.450423][T11887] veth1_macvtap: entered promiscuous mode [ 358.460483][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 358.486515][T11878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.506422][T11878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.518737][T11878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.536699][T11878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.613057][T11923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.651681][T11887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.660472][T11923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.687181][T11923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.725122][T11923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.768551][T11887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.842865][T11887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.851898][T11887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.898054][T11887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.907440][T11887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.038694][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 359.096326][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.110417][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.237769][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.251574][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.307886][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.370837][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.380871][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.454345][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.577276][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.600492][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.605617][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.621488][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.625053][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.628704][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.693701][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.700998][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.715955][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.723241][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.817061][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.877784][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.885073][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.044721][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.385436][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.524669][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.585583][T11937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.994453][ T12] bridge_slave_1: left allmulticast mode [ 361.000446][ T12] bridge_slave_1: left promiscuous mode [ 361.031938][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.073171][ T12] bridge_slave_0: left allmulticast mode [ 361.078897][ T12] bridge_slave_0: left promiscuous mode [ 361.103033][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.445244][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.465900][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.475582][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.483879][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.493385][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.578258][T12081] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 361.612109][T12081] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1745'. [ 362.017322][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.041727][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.053939][ T12] bond0 (unregistering): Released all slaves [ 362.201911][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.223671][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.242360][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.264364][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.282799][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.302801][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.535620][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.578375][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 362.774639][T11937] veth0_vlan: entered promiscuous mode [ 362.863945][T11937] veth1_vlan: entered promiscuous mode [ 362.989194][T11923] veth0_vlan: entered promiscuous mode [ 363.155619][T11923] veth1_vlan: entered promiscuous mode [ 363.424202][T11937] veth0_macvtap: entered promiscuous mode [ 363.529615][T11937] veth1_macvtap: entered promiscuous mode [ 363.612242][ T5837] Bluetooth: hci0: command tx timeout [ 363.644519][ T12] hsr_slave_0: left promiscuous mode [ 363.662543][ T12] hsr_slave_1: left promiscuous mode [ 363.673508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.681024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.693969][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.701425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.744020][ T12] veth1_macvtap: left promiscuous mode [ 363.749617][ T12] veth0_macvtap: left promiscuous mode [ 363.755328][ T12] veth1_vlan: left promiscuous mode [ 363.760644][ T12] veth0_vlan: left promiscuous mode [ 364.404128][ T5837] Bluetooth: hci2: command tx timeout [ 364.524238][ T12] team0 (unregistering): Port device team_slave_1 removed [ 364.587257][ T12] team0 (unregistering): Port device team_slave_0 removed [ 365.119542][T12129] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1755'. [ 365.430729][T12077] chnl_net:caif_netlink_parms(): no params data found [ 365.448929][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'. [ 365.538362][T11923] veth0_macvtap: entered promiscuous mode [ 365.682279][ T5837] Bluetooth: hci0: command tx timeout [ 365.705180][T11923] veth1_macvtap: entered promiscuous mode [ 365.740071][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.891877][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.919655][T12146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 365.971744][T11923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.991286][T11937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.008042][T11937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.017811][T11937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.028704][T11937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.072469][T12077] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.079930][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.087932][T12077] bridge_slave_0: entered allmulticast mode [ 366.096818][T12077] bridge_slave_0: entered promiscuous mode [ 366.106070][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.113335][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.120649][T12077] bridge_slave_1: entered allmulticast mode [ 366.129256][T12077] bridge_slave_1: entered promiscuous mode [ 366.163747][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 366.193821][T11923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.268656][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.280116][T12093] chnl_net:caif_netlink_parms(): no params data found [ 366.300372][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.354790][T12077] team0: Port device team_slave_0 added [ 366.399391][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.429815][T11923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.439423][T11923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.448505][T11923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.457408][T11923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.488859][T12077] team0: Port device team_slave_1 added [ 366.493237][ T5837] Bluetooth: hci2: command tx timeout [ 366.558683][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.634585][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.641850][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.670459][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.686179][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.693639][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.719856][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.778769][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.844877][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.852941][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.860502][T12093] bridge_slave_0: entered allmulticast mode [ 366.869814][T12093] bridge_slave_0: entered promiscuous mode [ 366.915619][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.948363][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.958498][T12093] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.968640][T12093] bridge_slave_1: entered allmulticast mode [ 366.976465][T12093] bridge_slave_1: entered promiscuous mode [ 367.050231][T12077] hsr_slave_0: entered promiscuous mode [ 367.059155][T12077] hsr_slave_1: entered promiscuous mode [ 367.066804][T12077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.074892][T12077] Cannot create hsr debugfs directory [ 367.145915][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.162706][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.185109][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.194327][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.433231][T12093] team0: Port device team_slave_0 added [ 367.475384][T12093] team0: Port device team_slave_1 added [ 367.609348][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.627516][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.766740][ T5837] Bluetooth: hci0: command tx timeout [ 368.572652][ T5837] Bluetooth: hci2: command tx timeout [ 369.319994][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.330183][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.370878][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.432727][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.440599][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.471070][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.478148][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.504903][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.616744][ T12] bridge_slave_1: left allmulticast mode [ 369.627891][ T12] bridge_slave_1: left promiscuous mode [ 369.658118][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.669233][ T12] bridge_slave_0: left allmulticast mode [ 369.680341][ T12] bridge_slave_0: left promiscuous mode [ 369.688421][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.765003][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1763'. [ 369.781795][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 369.806114][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1763'. [ 369.821053][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1763'. [ 369.853653][ T5837] Bluetooth: hci0: command tx timeout [ 370.145110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.156559][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.167491][ T12] bond0 (unregistering): Released all slaves [ 370.229584][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.243179][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.408645][T12093] hsr_slave_0: entered promiscuous mode [ 370.435825][T12093] hsr_slave_1: entered promiscuous mode [ 370.452222][T12093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.470081][T12093] Cannot create hsr debugfs directory [ 370.644273][ T5837] Bluetooth: hci2: command tx timeout [ 371.255893][ T12] hsr_slave_0: left promiscuous mode [ 371.272427][ T12] hsr_slave_1: left promiscuous mode [ 371.278511][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.293595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.313326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.320808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.373606][ T12] veth1_macvtap: left promiscuous mode [ 371.379238][ T12] veth0_macvtap: left promiscuous mode [ 371.394532][ T12] veth1_vlan: left promiscuous mode [ 371.399969][ T12] veth0_vlan: left promiscuous mode [ 371.801943][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.831576][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.848400][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.866852][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.876079][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.151192][ T12] team0 (unregistering): Port device team_slave_1 removed [ 372.205803][ T12] team0 (unregistering): Port device team_slave_0 removed [ 372.896737][T12077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.997660][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.007350][T12077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.007511][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.023889][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.035578][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.047233][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.057333][T12077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.091144][T12077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.145462][T12186] netlink: 'syz.4.1765': attribute type 29 has an invalid length. [ 373.158971][T12187] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 373.172126][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 373.703957][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.829584][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.933082][ T5837] Bluetooth: hci3: command tx timeout [ 373.982215][T12093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.026678][T12093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.086664][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.176746][T12093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.235337][T12093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.261699][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.305494][T12175] chnl_net:caif_netlink_parms(): no params data found [ 374.337565][T12201] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 374.348747][T12201] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 374.357554][T12201] gretap1: entered promiscuous mode [ 374.363231][T12201] gretap1: entered allmulticast mode [ 374.375969][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.561709][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.728183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.735613][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.800315][T12175] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.808844][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.819754][T12175] bridge_slave_0: entered allmulticast mode [ 374.828034][T12175] bridge_slave_0: entered promiscuous mode [ 374.860263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.867516][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.959895][T12214] bridge0: port 4(syz_tun) entered blocking state [ 374.966549][T12214] bridge0: port 4(syz_tun) entered forwarding state [ 374.973634][T12214] bridge0: port 3(vlan4) entered blocking state [ 374.980007][T12214] bridge0: port 3(vlan4) entered forwarding state [ 374.986851][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.994140][T12214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.001656][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.008817][T12214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.021959][T12214] bridge0: left allmulticast mode [ 375.031680][T12214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.051063][T12175] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.068126][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.078997][T12175] bridge_slave_1: entered allmulticast mode [ 375.096853][T12175] bridge_slave_1: entered promiscuous mode [ 375.123025][ T5837] Bluetooth: hci4: command tx timeout [ 375.361130][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.417768][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.431137][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.563158][T12175] team0: Port device team_slave_0 added [ 375.575265][T12175] team0: Port device team_slave_1 added [ 375.641656][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.738502][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.747131][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.779754][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.800502][T12183] chnl_net:caif_netlink_parms(): no params data found [ 375.830130][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.860526][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.868004][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.895417][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.995919][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.013202][ T5837] Bluetooth: hci3: command tx timeout [ 376.125862][T12175] hsr_slave_0: entered promiscuous mode [ 376.132899][T12175] hsr_slave_1: entered promiscuous mode [ 376.139087][T12175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.147553][T12175] Cannot create hsr debugfs directory [ 376.167763][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.230679][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.241032][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.260003][T12183] bridge_slave_0: entered allmulticast mode [ 376.271466][T12183] bridge_slave_0: entered promiscuous mode [ 376.342484][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.350023][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.364644][T12183] bridge_slave_1: entered allmulticast mode [ 376.375811][T12183] bridge_slave_1: entered promiscuous mode [ 376.566851][T12093] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.663232][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.690449][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.746882][T12183] team0: Port device team_slave_0 added [ 376.798317][T12183] team0: Port device team_slave_1 added [ 376.949454][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.956640][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.979460][ T12] bridge_slave_1: left allmulticast mode [ 376.987433][ T12] bridge_slave_1: left promiscuous mode [ 376.995896][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.005650][ T12] bridge_slave_0: left allmulticast mode [ 377.011306][ T12] bridge_slave_0: left promiscuous mode [ 377.017545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.028961][ T12] bridge_slave_1: left allmulticast mode [ 377.037032][ T12] bridge_slave_1: left promiscuous mode [ 377.043347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.056496][ T12] bridge_slave_0: left allmulticast mode [ 377.062369][ T12] bridge_slave_0: left promiscuous mode [ 377.068122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.214897][ T5837] Bluetooth: hci4: command tx timeout [ 377.516511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.528614][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.539198][ T12] bond0 (unregistering): Released all slaves [ 377.877604][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.889631][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.900750][ T12] bond0 (unregistering): Released all slaves [ 377.940921][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.948591][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.985769][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.093600][ T5837] Bluetooth: hci3: command tx timeout [ 378.129099][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.142480][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.180902][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.259798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.267538][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.298800][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.461481][T12183] hsr_slave_0: entered promiscuous mode [ 378.468927][T12183] hsr_slave_1: entered promiscuous mode [ 378.475637][T12183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.483539][T12183] Cannot create hsr debugfs directory [ 378.498263][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 378.900973][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.951171][T12077] veth0_vlan: entered promiscuous mode [ 379.209532][T12268] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1785'. [ 379.283018][ T5837] Bluetooth: hci4: command tx timeout [ 379.511879][T12077] veth1_vlan: entered promiscuous mode [ 379.651285][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1787'. [ 379.796522][T12175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.836624][T12175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.863793][T12077] veth0_macvtap: entered promiscuous mode [ 379.911233][T12175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.950303][ T12] hsr_slave_0: left promiscuous mode [ 379.966876][ T12] hsr_slave_1: left promiscuous mode [ 379.978938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.991206][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.008088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.028844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.040864][ T12] hsr_slave_0: left promiscuous mode [ 380.050948][ T12] hsr_slave_1: left promiscuous mode [ 380.057774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.065411][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.074259][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.081743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.126997][ T12] veth1_macvtap: left promiscuous mode [ 380.133171][ T12] veth0_macvtap: left promiscuous mode [ 380.138989][ T12] veth1_vlan: left promiscuous mode [ 380.144796][ T12] veth0_vlan: left promiscuous mode [ 380.151245][ T12] veth1_macvtap: left promiscuous mode [ 380.157079][ T12] veth0_macvtap: left promiscuous mode [ 380.166122][ T5837] Bluetooth: hci3: command tx timeout [ 380.172488][ T12] veth1_vlan: left promiscuous mode [ 380.177982][ T12] veth0_vlan: left promiscuous mode [ 380.849064][ T12] team0 (unregistering): Port device team_slave_1 removed [ 380.898317][ T12] team0 (unregistering): Port device team_slave_0 removed [ 381.362782][ T5837] Bluetooth: hci4: command tx timeout [ 381.780549][ T12] team0 (unregistering): Port device team_slave_1 removed [ 381.828396][ T12] team0 (unregistering): Port device team_slave_0 removed [ 382.308893][T12175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.318972][T12077] veth1_macvtap: entered promiscuous mode [ 382.385644][T12093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.460994][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.563252][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.660200][T12077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.670284][T12077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.692820][T12077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.716581][T12077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.926179][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 382.974982][T12093] veth0_vlan: entered promiscuous mode [ 383.136794][T12093] veth1_vlan: entered promiscuous mode [ 383.187011][T12183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.206746][T12183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.221117][T12183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.237716][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.247866][T12175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.254628][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.285259][T12183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.395299][T12175] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.420331][T12093] veth0_macvtap: entered promiscuous mode [ 383.426526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.435359][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.496225][T12093] veth1_macvtap: entered promiscuous mode [ 383.531567][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.538794][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.577861][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.585246][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.668535][T12093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.705043][T12093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.747593][T12093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.757451][T12093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.767279][T12093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.776384][T12093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.892427][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.019132][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.123428][T12183] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.220524][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.313161][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.320410][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.359455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.366911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.417336][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.447511][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.470568][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.479088][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.509026][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.585730][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.597630][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.670181][T12183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.731485][T12175] veth0_vlan: entered promiscuous mode [ 384.800013][T12175] veth1_vlan: entered promiscuous mode [ 384.959442][T12175] veth0_macvtap: entered promiscuous mode [ 385.029622][T12175] veth1_macvtap: entered promiscuous mode [ 385.062609][ T12] bridge_slave_1: left allmulticast mode [ 385.068334][ T12] bridge_slave_1: left promiscuous mode [ 385.102617][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.128887][ T12] bridge_slave_0: left allmulticast mode [ 385.144832][ T12] bridge_slave_0: left promiscuous mode [ 385.150697][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.766327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.787102][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.796950][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.803712][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.816482][ T12] bond0 (unregistering): Released all slaves [ 385.818884][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.833110][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.841917][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.909000][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.955335][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.010650][T12175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.022514][T12175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.031393][T12175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.041591][T12175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.441381][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.610249][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.642593][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.819014][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.842188][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.860213][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.875348][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.885291][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.937863][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.989968][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.011151][T12183] veth0_vlan: entered promiscuous mode [ 387.116061][T12183] veth1_vlan: entered promiscuous mode [ 387.227029][ T12] hsr_slave_0: left promiscuous mode [ 387.240893][ T12] hsr_slave_1: left promiscuous mode [ 387.247669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.255929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.268748][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.290754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.348520][ T12] veth1_macvtap: left promiscuous mode [ 387.358028][ T12] veth0_macvtap: left promiscuous mode [ 387.365580][ T12] veth1_vlan: left promiscuous mode [ 387.370968][ T12] veth0_vlan: left promiscuous mode [ 387.898591][ T12] team0 (unregistering): Port device team_slave_1 removed [ 387.934444][ T5829] Bluetooth: hci0: command tx timeout [ 387.955003][ T12] team0 (unregistering): Port device team_slave_0 removed [ 388.478268][T12337] bridge0: port 5(veth0_to_bridge) entered blocking state [ 388.499503][T12337] bridge0: port 5(veth0_to_bridge) entered disabled state [ 388.508489][T12337] veth0_to_bridge: entered allmulticast mode [ 388.521732][T12337] veth0_to_bridge: entered promiscuous mode [ 388.530406][T12337] bridge0: port 5(veth0_to_bridge) entered blocking state [ 388.537895][T12337] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 388.552956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.567361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.582032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.594966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.608140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.621580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.634403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.647263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.660727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.674139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.724890][T12183] veth0_macvtap: entered promiscuous mode [ 388.755103][T12183] veth1_macvtap: entered promiscuous mode [ 389.037680][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 389.090633][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 389.100314][ T5829] Bluetooth: hci2: command tx timeout [ 390.266493][ T5829] Bluetooth: hci0: command tx timeout [ 392.421089][ T5886] sched: DL replenish lagged too much [ 393.562101][ C0] net_ratelimit: 20058 callbacks suppressed [ 393.562125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.562139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.568576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.581073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.592660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.605289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.616893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.629992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.640799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.654147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.718247][ T5829] Bluetooth: hci2: command tx timeout [ 393.738335][ T5829] Bluetooth: hci0: command tx timeout [ 398.572164][ C0] net_ratelimit: 21494 callbacks suppressed [ 398.572196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.572814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.578450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.591121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.602515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.615046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.626454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.639759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.651180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 398.663971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.951404][ T5829] Bluetooth: hci0: command tx timeout [ 400.607352][ T5833] Bluetooth: hci2: command tx timeout [ 403.582087][ C0] net_ratelimit: 21102 callbacks suppressed [ 403.582110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.582474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.588416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.601426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.612538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.625490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.637029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.649611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.661156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.673668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.592203][ C0] net_ratelimit: 22018 callbacks suppressed [ 408.592208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.592225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.592411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.599335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.610763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.623764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.634648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.647420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.658841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.671549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.861576][ T5833] Bluetooth: hci2: command tx timeout [ 413.602197][ C0] net_ratelimit: 22467 callbacks suppressed [ 413.602221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.602250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.608340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.621332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.632644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.632958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.646144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.657495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.669867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.681410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.612235][ C0] net_ratelimit: 22524 callbacks suppressed [ 418.612249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.612259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.612521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.619329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.630381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.643317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.654309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.666935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.681032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.693566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.622049][ C0] net_ratelimit: 22572 callbacks suppressed [ 423.622073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.622692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.628201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.640864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.652630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.665062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.676407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.693561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.700455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.713207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.632130][ C0] net_ratelimit: 22350 callbacks suppressed [ 428.632155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.632208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.638281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.651020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.662649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.674892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.686372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.700289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.710471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 428.723435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.642045][ C0] net_ratelimit: 22690 callbacks suppressed [ 433.642067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.642652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.648274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.661005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.672239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.684884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.696571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.708984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.720160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 433.733497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.652162][ C0] net_ratelimit: 21430 callbacks suppressed [ 438.652187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.652926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.658448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.671067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.682545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.695092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.706730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.719120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.730528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 438.743733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.692905][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.662016][ C1] net_ratelimit: 22479 callbacks suppressed [ 443.662041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.662045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.662376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.669128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.680125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.693020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.705099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.717603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.729786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.741735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.675050][ C1] net_ratelimit: 9576 callbacks suppressed [ 448.675075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.694211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.707168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.720226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.733814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.747011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.759923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.772746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.786382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.799837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.682687][ C1] net_ratelimit: 4641 callbacks suppressed [ 453.682711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.702606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.716111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.728953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.741795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.755078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.768273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.781301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.794553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.807862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.692557][ C1] net_ratelimit: 4694 callbacks suppressed [ 458.692583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.712713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.726145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.739179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.752195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.765665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.779095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.792076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.805145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.818671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.703256][ C1] net_ratelimit: 4507 callbacks suppressed [ 463.703280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.722807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.735828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.748878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.762347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.775526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.788976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.801892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.815576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.828953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.712287][ C1] net_ratelimit: 3959 callbacks suppressed [ 468.712311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.731398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.744431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.757961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.771215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.784253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.797298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.810840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.824001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.836934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.726263][ C1] net_ratelimit: 3959 callbacks suppressed [ 473.726287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.745134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.758871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.772300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.785329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.798363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.811910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.825453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.838547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.851708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.732744][ C1] net_ratelimit: 4158 callbacks suppressed [ 478.732767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.751629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.765015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.778242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.791223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.804277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.817846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.831000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.844156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.856928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.742407][ C1] net_ratelimit: 4647 callbacks suppressed [ 483.742430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.762031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.775183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.788223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.801281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.814631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.827747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.840562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.853342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.866689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.752736][ C1] net_ratelimit: 4526 callbacks suppressed [ 488.752760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.772051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.786457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.799400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.812417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.825796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.838932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.851784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.864504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.877934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.762407][ C1] net_ratelimit: 4694 callbacks suppressed [ 493.762430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.781548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.794851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.807807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.820801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.834252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.847504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.860438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.873397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.886769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.051681][ C0] ================================================================== [ 497.059823][ C0] BUG: KASAN: use-after-free in __skb_clone+0x483/0x7a0 [ 497.066811][ C0] Write of size 4 at addr ffff888064c800e0 by task kworker/R-bat_e/3399 [ 497.075181][ C0] [ 497.077540][ C0] CPU: 0 UID: 0 PID: 3399 Comm: kworker/R-bat_e Not tainted 6.15.0-syzkaller-07818-g12c331b29c73 #0 PREEMPT(full) [ 497.077569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.077583][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 497.077614][ C0] Call Trace: [ 497.077623][ C0] [ 497.077633][ C0] dump_stack_lvl+0x189/0x250 [ 497.077662][ C0] ? rcu_is_watching+0x15/0xb0 [ 497.077688][ C0] ? __kasan_check_byte+0x12/0x40 [ 497.077715][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.077741][ C0] ? rcu_is_watching+0x15/0xb0 [ 497.077767][ C0] ? lock_release+0x4b/0x3e0 [ 497.077791][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 497.077814][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 497.077835][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 497.077856][ C0] print_report+0xd2/0x2b0 [ 497.077889][ C0] ? __skb_clone+0x483/0x7a0 [ 497.077908][ C0] kasan_report+0x118/0x150 [ 497.077936][ C0] ? __skb_clone+0x483/0x7a0 [ 497.077960][ C0] kasan_check_range+0x2b0/0x2c0 [ 497.077990][ C0] __skb_clone+0x483/0x7a0 [ 497.078013][ C0] skb_clone+0x246/0x3a0 [ 497.078035][ C0] maybe_deliver+0x98/0x160 [ 497.078061][ C0] br_flood+0x31a/0x6a0 [ 497.078090][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 497.078120][ C0] ? net_generic+0x1e/0x240 [ 497.078147][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 497.078176][ C0] ? net_generic+0x1e/0x240 [ 497.078200][ C0] ? net_generic+0x1e/0x240 [ 497.078224][ C0] ? net_generic+0x1e/0x240 [ 497.078249][ C0] ? br_cfm_config_fill_info+0x850/0x12f0 [ 497.078277][ C0] ? br_nf_pre_routing+0xc30/0x1470 [ 497.078308][ C0] br_handle_frame+0xb89/0x14c0 [ 497.078339][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 497.078364][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 497.078386][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 497.078411][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 497.078443][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 497.078471][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 497.078509][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 497.078545][ C0] ? process_backlog+0x2d5/0x14f0 [ 497.078571][ C0] ? process_backlog+0x2d5/0x14f0 [ 497.078598][ C0] __netif_receive_skb+0x72/0x380 [ 497.078624][ C0] ? process_backlog+0x2d5/0x14f0 [ 497.078650][ C0] process_backlog+0x60e/0x14f0 [ 497.078675][ C0] ? __lock_acquire+0xab9/0xd20 [ 497.078705][ C0] ? __pfx_process_backlog+0x10/0x10 [ 497.078737][ C0] __napi_poll+0xc7/0x480 [ 497.078759][ C0] ? net_rx_action+0x46d/0xe30 [ 497.078786][ C0] net_rx_action+0x707/0xe30 [ 497.078811][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.078840][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 497.078892][ C0] handle_softirqs+0x286/0x870 [ 497.078920][ C0] ? do_softirq+0xec/0x180 [ 497.078948][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 497.078978][ C0] ? batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 497.079005][ C0] do_softirq+0xec/0x180 [ 497.079029][ C0] [ 497.079036][ C0] [ 497.079044][ C0] ? __pfx_do_softirq+0x10/0x10 [ 497.079073][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 497.079098][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 497.079123][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 497.079151][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 497.079173][ C0] ? batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 497.079198][ C0] batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 497.079230][ C0] batadv_iv_ogm_schedule+0x263/0xea0 [ 497.079259][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 497.079282][ C0] ? batadv_send_skb_packet+0x45d/0x6d0 [ 497.079315][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 497.079344][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 497.079372][ C0] process_scheduled_works+0xae1/0x17b0 [ 497.079414][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.079445][ C0] ? assign_work+0x381/0x410 [ 497.079473][ C0] rescuer_thread+0x53c/0xdd0 [ 497.079494][ C0] ? rescuer_thread+0xbb/0xdd0 [ 497.079521][ C0] kthread+0x70e/0x8a0 [ 497.079541][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 497.079557][ C0] ? __pfx_kthread+0x10/0x10 [ 497.079577][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.079598][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.079619][ C0] ? __pfx_kthread+0x10/0x10 [ 497.079640][ C0] ret_from_fork+0x3fc/0x770 [ 497.079666][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.079694][ C0] ? __switch_to_asm+0x39/0x70 [ 497.079714][ C0] ? __switch_to_asm+0x33/0x70 [ 497.079732][ C0] ? __pfx_kthread+0x10/0x10 [ 497.079753][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.079781][ C0] [ 497.079788][ C0] [ 497.537916][ C0] The buggy address belongs to the physical page: [ 497.544356][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888064c86000 pfn:0x64c80 [ 497.554901][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 497.562059][ C0] page_type: f0(buddy) [ 497.566250][ C0] raw: 00fff00000000000 ffffea0001477408 ffffea00026d8608 0000000000000000 [ 497.574873][ C0] raw: ffff888064c86000 0000000000000003 00000000f0000000 0000000000000000 [ 497.583482][ C0] page dumped because: kasan: bad access detected [ 497.589923][ C0] page_owner tracks the page as freed [ 497.595327][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 12344, tgid 12339 (syz.4.1802), ts 389275743054, free_ts 497051632971 [ 497.615351][ C0] post_alloc_hook+0x240/0x2a0 [ 497.620177][ C0] get_page_from_freelist+0x21e0/0x22c0 [ 497.625775][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 497.631629][ C0] alloc_pages_mpol+0x232/0x4a0 [ 497.636523][ C0] alloc_pages_noprof+0xa9/0x190 [ 497.641517][ C0] skb_page_frag_refill+0x179/0x320 [ 497.646843][ C0] tun_get_user+0x1b5d/0x3ce0 [ 497.651561][ C0] tun_chr_write_iter+0x113/0x200 [ 497.656633][ C0] vfs_write+0x54b/0xa90 [ 497.660916][ C0] ksys_write+0x145/0x250 [ 497.665296][ C0] do_syscall_64+0xfa/0x3b0 [ 497.669844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.675771][ C0] page last free pid 12344 tgid 12339 stack trace: [ 497.682312][ C0] __free_frozen_pages+0xc6e/0xe50 [ 497.687552][ C0] __folio_put+0x21b/0x2c0 [ 497.692103][ C0] do_exit+0x1a3a/0x2550 [ 497.696378][ C0] do_group_exit+0x21c/0x2d0 [ 497.701004][ C0] get_signal+0x1286/0x1340 [ 497.705544][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 497.711221][ C0] exit_to_user_mode_loop+0x75/0x110 [ 497.716558][ C0] do_syscall_64+0x2bd/0x3b0 [ 497.721195][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.727146][ C0] [ 497.729509][ C0] Memory state around the buggy address: [ 497.735169][ C0] ffff888064c7ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 497.743269][ C0] ffff888064c80000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 497.751393][ C0] >ffff888064c80080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 497.759485][ C0] ^ [ 497.767076][ C0] ffff888064c80100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 497.775446][ C0] ffff888064c80180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 497.783538][ C0] ================================================================== [ 497.791710][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 497.798953][ C0] CPU: 0 UID: 0 PID: 3399 Comm: kworker/R-bat_e Not tainted 6.15.0-syzkaller-07818-g12c331b29c73 #0 PREEMPT(full) [ 497.811053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.821247][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 497.829203][ C0] Call Trace: [ 497.832520][ C0] [ 497.835405][ C0] dump_stack_lvl+0x99/0x250 [ 497.840040][ C0] ? __asan_memcpy+0x40/0x70 [ 497.844695][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.849936][ C0] ? __pfx__printk+0x10/0x10 [ 497.854574][ C0] panic+0x2db/0x790 [ 497.858595][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.863921][ C0] ? __pfx_panic+0x10/0x10 [ 497.868386][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 497.874316][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 497.880246][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 497.886609][ C0] ? __skb_clone+0x483/0x7a0 [ 497.891236][ C0] check_panic_on_warn+0x89/0xb0 [ 497.896215][ C0] ? __skb_clone+0x483/0x7a0 [ 497.900838][ C0] end_report+0x78/0x160 [ 497.905203][ C0] kasan_report+0x129/0x150 [ 497.909750][ C0] ? __skb_clone+0x483/0x7a0 [ 497.914463][ C0] kasan_check_range+0x2b0/0x2c0 [ 497.919443][ C0] __skb_clone+0x483/0x7a0 [ 497.923993][ C0] skb_clone+0x246/0x3a0 [ 497.928265][ C0] maybe_deliver+0x98/0x160 [ 497.932807][ C0] br_flood+0x31a/0x6a0 [ 497.937005][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 497.942605][ C0] ? net_generic+0x1e/0x240 [ 497.947158][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 497.953120][ C0] ? net_generic+0x1e/0x240 [ 497.957659][ C0] ? net_generic+0x1e/0x240 [ 497.962302][ C0] ? net_generic+0x1e/0x240 [ 497.966980][ C0] ? br_cfm_config_fill_info+0x850/0x12f0 [ 497.972841][ C0] ? br_nf_pre_routing+0xc30/0x1470 [ 497.978082][ C0] br_handle_frame+0xb89/0x14c0 [ 497.982985][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 497.988306][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 497.994757][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 498.000690][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 498.006543][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 498.011878][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 498.017649][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 498.023766][ C0] ? process_backlog+0x2d5/0x14f0 [ 498.028852][ C0] ? process_backlog+0x2d5/0x14f0 [ 498.034000][ C0] __netif_receive_skb+0x72/0x380 [ 498.039076][ C0] ? process_backlog+0x2d5/0x14f0 [ 498.044159][ C0] process_backlog+0x60e/0x14f0 [ 498.049056][ C0] ? __lock_acquire+0xab9/0xd20 [ 498.053964][ C0] ? __pfx_process_backlog+0x10/0x10 [ 498.059297][ C0] __napi_poll+0xc7/0x480 [ 498.063658][ C0] ? net_rx_action+0x46d/0xe30 [ 498.068653][ C0] net_rx_action+0x707/0xe30 [ 498.073289][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.078622][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 498.083784][ C0] handle_softirqs+0x286/0x870 [ 498.088588][ C0] ? do_softirq+0xec/0x180 [ 498.093043][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 498.098472][ C0] ? batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 498.105275][ C0] do_softirq+0xec/0x180 [ 498.109678][ C0] [ 498.112646][ C0] [ 498.115617][ C0] ? __pfx_do_softirq+0x10/0x10 [ 498.120521][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 498.125842][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 498.131108][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.136874][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 498.142120][ C0] ? batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 498.148580][ C0] batadv_tvlv_container_ogm_append+0x469/0x4f0 [ 498.154882][ C0] batadv_iv_ogm_schedule+0x263/0xea0 [ 498.160315][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 498.166341][ C0] ? batadv_send_skb_packet+0x45d/0x6d0 [ 498.172029][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 498.179107][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 498.184871][ C0] process_scheduled_works+0xae1/0x17b0 [ 498.190473][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.196502][ C0] ? assign_work+0x381/0x410 [ 498.201140][ C0] rescuer_thread+0x53c/0xdd0 [ 498.205854][ C0] ? rescuer_thread+0xbb/0xdd0 [ 498.210657][ C0] kthread+0x70e/0x8a0 [ 498.214768][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 498.220017][ C0] ? __pfx_kthread+0x10/0x10 [ 498.224665][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.229912][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.235233][ C0] ? __pfx_kthread+0x10/0x10 [ 498.239857][ C0] ret_from_fork+0x3fc/0x770 [ 498.244502][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.249656][ C0] ? __switch_to_asm+0x39/0x70 [ 498.254453][ C0] ? __switch_to_asm+0x33/0x70 [ 498.259245][ C0] ? __pfx_kthread+0x10/0x10 [ 498.263929][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.268754][ C0] [ 498.272119][ C0] Kernel Offset: disabled [ 498.276449][ C0] Rebooting in 86400 seconds..