last executing test programs: 57.558614907s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 56.143229697s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 46.34300301s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 45.660918432s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 35.986517212s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 34.77130085s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 25.541988438s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 24.140185649s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 14.129157606s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 13.225863667s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 5.185962817s ago: executing program 2 (id=1071): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00eafe000000000000000000008000000000000096d659d08e3acdc2906edcab9061611e4114b94c2c0cd54a484f4691170ad7d306e26d3280466bcad28be36957e48c74f62264471eff85b1145b776d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="32003300209c0600080211000000080211000000ffffffffffffd9c40400800110000900080211000000000602020202020200000800cd"], 0x58}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r7, &(0x7f0000000dc0)=[{{0x0, 0xfffffffffffffd1c, 0x0}, 0xde8}], 0x1, 0x160, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x9, 0x7d, 0x2}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_vlan\x00', 'veth0_to_bridge\x00', {0xff}}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x4}, {0xffffffffffffffff, 0x2, 0x4}, {0xffffffffffffffff, 0x3, 0x7}, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r11, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) writev(r11, &(0x7f0000000500)=[{&(0x7f0000000080)="328009ed25cc622be93816a9761c08df927b2d5af4a9abd9097bade2e7912c29e041cd6b7504bd067bdd5a55dbc5e5a4f0c342063837de9f13bef4ebe93a97d1afbd9f2e882730cf53a054041e484d6153b9eb304bdbf3bccc9532fd263d84e49ae1c6f48aa2d53f52e022911e7be8df33c5005243d85120497fbf852ca68dd051edd0a38b707af1ee88d356613172aed3da4cb90efe0dfe7956b61f78381cda6d8344d23ae877a053b8fde632f7ad01a6b728039140987df1a7e57583f9788c", 0xc0}, {&(0x7f0000000180)="1314001d58532bbb4fa139d25c824d68d58b2562d084a527822c6e66a8864e3adafa42bb386c818a98a351dfdc7c140791faf31dd5e3bfecc9c7ffff6ffe68bafc", 0x41}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x8d8, 0x4c, 0x1a, 0x0, 0x75, 0xa10, 0x258, 0x258, 0xa10, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'syz_tun\x00', 'macvlan0\x00'}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {[], [], 0x0, 0x64}], 0x9}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000f8ff07003bf5565200000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32, @ANYRES64=r8, @ANYRESHEX=r0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRES8=r0], 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) r13 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r13, 0x29, 0x37, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x9, 0xfd5, 0x2f, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0xfffff0b1, 0x6}}) clock_gettime(0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000004c0)={'wg1\x00'}) 4.272021775s ago: executing program 1 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(r2, &(0x7f00000002c0)="13e5d924c45c97c196cfa49f0a829427ff2adf495f11e5de8ac2b6575a395d637040b7b1ce76cfe4758f0dbbe15b8fb6f3f84955d2765f2e86cc0d16e86cf02e95f149c8e31a0a6c73cd42b51a8bb4de8a32868b3ef11ad36e791e4d8c01657c77eb063b0c19721265eee5e4ea35ed0f0aaaf76f8d42dc777a23c43c75454743e8a07e894654b277b4a9a9f0776c9e", 0x8f) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'vlan0\x00', 0x81}) (async, rerun: 32) mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, 0x0, &(0x7f0000000b40)=""/31}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000)="65f644aa822a3e60a475adf41865335b75307a422e024f9d1f733658d6155bd3cd72b500a136881a32c51ad660569c8f6b124becba9d4c21f06b2ccb222a73b65acb0d09b7652ad4d512880b775d592984761caf202cc3c9dae5b04678242b8569d3a022dec97d959f770a4e985eeaf04725db25898f68ca4cf8398396868a19ec7e547e0711e49d7f6744c72c285975c279cc7bed8da911e5cf1990d4bfb1018b4ed165b159bdfca33b6bd18a9a94206d5e36c7db4aae9b", &(0x7f00000000c0)=""/39}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) 2.666869792s ago: executing program 2 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'pim6reg0\x00', {0x2, 0x0, @multicast2}}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'pim6reg0\x00', {0x2, 0x0, @multicast2}}) (async) 2.666163379s ago: executing program 4 (id=64): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000044) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000fa0d000000"], 0x14}}, 0x8054) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0xd, 0x205, 0x2, 0x4, r12}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRESOCT=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100023bad62313f79702dc1fff26bd70", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800020002000000080002000300000014003500626f6e645f736c6176655f310000000008001f000b000080"], 0x60}}, 0x20004880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 1.384621433s ago: executing program 0 (id=1083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.384279458s ago: executing program 2 (id=1084): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'rose0\x00', 'geneve1\x00'}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc6, &(0x7f0000001040), &(0x7f00000000c0)=0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={r6, 0xa11c}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x3}, 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x4000010, r2, 0x33cd9000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x140a, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x20040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@deltaction={0x14, 0x31, 0x20, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0) 1.383984844s ago: executing program 3 (id=1085): r0 = socket(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x1f4, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c8, 0x2, [@TCA_U32_ACT={0x1ac, 0x7, [@m_mirred={0x1a8, 0x2, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1c0000, 0xfffffffe, 0x8, 0x401, 0x77}, 0xd1b7172c37cd4fd6, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xffff2579, 0x4, 0xffff, 0x9}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x1, 0x10000000, 0x1, 0xffffffdc}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1400, 0x94e, 0x0, 0x4, 0x8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x3, 0x2, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x3ff, 0xffffffffffffffff, 0x2, 0x3}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xe24, 0x20000000, 0x6}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x33, 0x4, 0x3, 0x80, 0x4}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x20000000, 0x80, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x10000009, 0x2, 0x1}, 0x1, r6}}]}, {0x3a, 0x6, "2ed516339bc2caa0a2f1b434664426ccee3b6f64ef072d9fe6bb146980c86e2faf12bd758f78364199cb3369ac25f2fb0a14df622d87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff6, 0xfff2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xed}, @TCA_U32_LINK={0x8, 0x3, 0xffff8001}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1.227543135s ago: executing program 2 (id=1086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.087461853s ago: executing program 2 (id=1087): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00%'], 0x24}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x4000010, r1, 0xb5ea6000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/196, 0xc4}], 0x1}}], 0x1, 0x400000b5, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.063334344s ago: executing program 0 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0x325, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2f, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private0]}, @fragment]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x8000}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0xe17, 0x70bd2d, 0x0, {0x1, 0x0, 0x6000}}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="00e3ea123628b22bea9e51ea7f0561ae66d38862f948cb93adc3cdd18f9c7d087358e88eef0e7e5a1ccd186eafe936a9", 0x30}, {&(0x7f00000004c0)="036333527b4fa369da0cbdfdc572e3cfcbd48567202353cbf904030000008f98f2c843e15ed79cdf8d3c76514c6f5072aec6dfe70ef200000000000004929b6389c8769480a7a72368253ca366899bca8d8c22fecaae1b074c098e20cbc0be319790bf1a19db96c2d68fca197c", 0x6d}, {&(0x7f00000002c0)="e0f4504d95fa6abede39854f51f04dbbbc690c75ffaac8749e24ec2e170d887f4a8c9c384951ada8fd963b8289fe23496634350b5ab3287c8762bf2272153b2a0f373aff8fef08d166c59eb3925ba9236bfa947db201f016c5a22e1b1760c2323e7cfc9281047c2eb918c6f32c0ab0ac4664d96514", 0x75}, {&(0x7f0000001280)="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", 0x107}], 0x4}}], 0x1, 0x85) recvmmsg(r6, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20000002, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x28, '\x00', r7, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.026539024s ago: executing program 3 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0a3348d7c3d9256f4cb2d1ff6c8e5eebcc760000000000000000000000000001", "fc3e940ed29664f8c749030230a1248f7f7d31a91d00b61650711a81401437be41d7d1a8a73d1fe7d1584b1b4714b9f8", "53d5899551da4c6775e33812a7e8aa54dcba4187484cebb15aa2f55e", {"9f543d3d871ef5104f6998f8533db9e4", "ce72da3ede141d8865630aee21a3a404"}}}}}}}, 0x0) 744.647377ms ago: executing program 3 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32], 0x144}}, 0x0) 581.633931ms ago: executing program 0 (id=1091): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="9f8c8f6019", 0x5}, {0x0, 0x300}], 0x2}}], 0x1, 0x800) 580.873637ms ago: executing program 3 (id=1092): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000940), &(0x7f0000000240)=@udp6=r3}, 0x20) (async) close(r3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005ff970001007061796c6f6164001400028008000340000000e108000240000000050900013200000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x1f, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x240040d5}, 0x20000811) 424.520269ms ago: executing program 3 (id=1093): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff71ef288543"], 0xffdd) accept$ax25(r0, 0x0, 0x0) 335.494254ms ago: executing program 0 (id=1094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, '\b\x00', "0c141d143b58d66dd248490a78f66256", "4f4fdce8", "be7ea799120c6d28"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001740)={0x126c, r2, 0x5, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x31, 0xfc, "77a47fb70f77eb8053fe16d99202260721eb7f3b2ff8fb1f53256ee46e5735df43bd7ef9e02097b8ab86c87917"}, @NL80211_ATTR_FILS_ERP_RRK={0x43, 0xfc, "2ffb808ef03061295a8563982576e34940201573260844744d87e6b1717698aa8f51e6bfbc653f3a8b5b866462ca6f5269dbf36c91a33799c7b5a835d0bb5f"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "19"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xe1, 0xfc, "5ccf873131666bbc7119dd05a64b9fd9f915a24e4a9fadf5dec0542ed4b362f585a4e2106fdb990affb17e1ee325fce9cbed7412e85c40019bf956c6e449a0ed2e98b07f8a56bd0fc96eb7a2e545408ba0051c444866d29dbc846d938a21ac65dd457ac079f400deeab2e03e0866cca5f212cd60ca457cdf5b2db9f4accbd0b0385fa6c58c58aa58a450f16eb7f47baa20885e9a24658abd9a93a8c54917fb8e4f8c1a6102dd76d0b9b17237f14250eeaea1a4ffa7a9505770af4e2d6fdcf5d7c88c2f80863a15a6a2f69ab77dba123f2adab932aa3fefa2f96f301aa0"}, @NL80211_ATTR_FILS_ERP_RRK={0x70, 0xfc, "c134ce7be31503f7aa2c02c3bad191fb7142b25cde6451dffbe2fd3abeca03623fb07e5293d77ac3d653604f53de225def00dfbb9547bc83b4b09fef1e2b19b17a673a54a9a8f14c3e196dab683e8d3031877809d46803b45f0a7ba85c393ed3c3fe48384958b5875e45f85a"}, @NL80211_ATTR_FILS_ERP_REALM={0x72, 0xfa, "faa79e6dfa4847367826a83a84860f17da46f992f01746f946e8a945a48d960b75381389399381769dfe6bd3f87c8fdff35da6e7b365bb79726c95b3b9c670e64f95168c3a761989b7615e2a8ab37bd4145c939bc5c3a292f3f86322c709522b52263a5b5cd2ac4ffccccc1705a8"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x126c}, 0x1, 0x0, 0x0, 0x800}, 0x488c1) 246.308072ms ago: executing program 0 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x160, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa9}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_VF_PORTS={0x11c, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0xe, 0x2, '-)^\xe2!^&^%\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5d9998a4740ca2a6b8d1dd371a86160a"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x6, 0x2, '.\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f8194047c4b4af5f32362ebfa7cde0e9"}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "14bde82e8836147a26002708636857cc"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ca8a25a2df468c4bb27b61181eaa0bba"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3d93dac85d462844c6d00b582b50ae39"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2391ecb347be4d296f5e7cbc604290ed"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d9802646000068c6da6375049e4fa4de"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c8039163f31c92ba8690768d9d66cae"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ipvlan1\x00'}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x840}, 0x80000) getsockname(r0, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80) 87.344013ms ago: executing program 3 (id=1096): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x40, 0x0, &(0x7f0000000180)=0x54) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x800, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x7, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@ethernet={0x1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)="629865954c59f00e55a15e7d1b449b9c83dbe47b118e181f7dc5c9a19be53ef9ff70c6b7bfec83c38456a016852d9972ef8063fabad4194f360a32d3ab29550c2efb97d514df32f32956a20d49c4cffcae983e1ed9b2c9b6fa7989f8991ddd055f01ba7286b217e67675b35f57f53581ce06c4dc26142ace3a7a33228d7171a5640788405b71f3c8e29219118d651490c7fdfd52a8bbb99b051d95f3ee68a928642c9084c834888c19d172c1d65e1cfdb8", 0xb1}, {&(0x7f0000000340)="5c8b4e396904b45c166211247cf695e05580cd34aac7f59bfb11696d74ab1dc5596c503307f5fcef23d3776cd09facfb684f0087d08e771b570188ef49aa9a0ba5994484744983ec01c4b2e6f4cb0d03473ec5464cf1c899fa758c64ea970f2824dfb3992c6e4d61becdb8f482ef7fb3466cb6c98bc83b81cc1ec49e7b2ad2bd28bc165a493b0ecb73d336751dcbc1a896c374d0a87005b3123c078e61f8b777520dac54f2e8f1f8", 0xa8}, {&(0x7f0000000400)="d0e520080e20198fd34791750b877a71056b4c780fc0ca05001c4ccca7bb61aba7f0a8e28b160b307bf21e5c6aa2e6304852599fc0645ee8baf15fcfaa4392b43f62dc080b9d4fcc3a1b3f9928f0de3687ea", 0x52}, {&(0x7f0000000000)="4775a627bbadca3f1451da017557a22504b819e7ae431ac402f89b4b054031b62330b365b85462baea84e8166a823174e7f5acddf47981a311f832f6", 0x3c}, {&(0x7f0000000180)="cc606132eb6605", 0x7}, {&(0x7f0000000480)="367231b76533d5f49b29e014e2cb7a14d707d07ae801faf198a148661054e74589101790d878b5ae5633d4f652e9e81189b460072845fd8c2daa", 0x3a}, {&(0x7f00000004c0)="b66006b8a6fb22035f2ea5a637372de3fa32a6923ee4aae7a87f097efeb2e0cfb254ce3fed6a26c78e04d1421b01f651650d3d86b5d5acca9c1a9c39390c98103310f0c5747076320437fb448d8a57bd6352d455d39a2754a39c5f2f5a678625f10894f7f35f44e92eb3a097521111946d196f138e62d7a0fbe2be6705c6b4a5373246cde49589a458baee5f5c1c9d6e0c21344ad3a8083934c83a2f865361e266a735739dff538e808d2817f996f8d165", 0xb1}, {&(0x7f0000000580)="14b01468d4da2fa190b2fb8a6d700cbb219723a1f1cf00e8ed4bbcd8c6856957342b94360d8f6142d493e4c83ee2dd26fb84c710c9577bbfcc4c105cab50f8aff684c2ad9dd222ff893acaf3410cbb89f684ffb424ad4d8db57b0e57cc0e618ea7f0a6bd0e04c7e92bab80b0cffcf6597932b0b7eaefbdcfc44aa3a969acca5aa4d80135efb2e484db486f43b323daf67a37c42b7ee2875302c4d5d492ff2fb564f09b49ef2cf3119fd7c56688d6250bcaf066e8fc3960d40002d88bd803449c865457fc6180c04ceb44fa028c5732c1e47483e0af1cfb4d3a4d5829b0bfadb7d34fe101b41884f36079696a15c883e0f1c351eac54ad36aaa7971be4d088e", 0xff}], 0x8, &(0x7f0000001400)=[{0x1010, 0x102, 0x10000, "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"}, {0x108, 0x114, 0x0, "c70afd6c6011c6ac241a18b19888fa45132e53a5a6352a36a23c99096427a2bdb0608308fac2f69f9cf7e808942a150f6553194c3ec388ce46785a33981a01200541f3d30063a542a152204894cac0bc4a3beb50baa4a855959ce48a79ed5249e45349d9ed735cfaed0082ed04cfaa645320d1c196845de04bf150c9cbc937b5371c6008e59abca59d52b9c7ae398d6ffa524c894e8256ad7921b16954afacf5f8e2484cf48af6de470201d43c7ee69fe12c5a3e5ccb7780205f6a7153856cb5909cf23579a62546abe7e957bddd2904da1212378ff76110b7dfcd3a8498d92f21a3ed6a272c1783a3480ea31659368c1646"}, {0x60, 0x116, 0x8, "7c5bd6ff33421b0c9709a2409a452d6129b9a25625b1d945662d59d9de34cd5bbbcdd129becd3506ac60591c599d3622afafc75b668db9a2708a01109169d41077739744cf02de3c26ca5e6a5e9b"}, {0xf0, 0x116, 0x6, "1b3aa9e89a591155b2e036238a0a6975d56e075851ed9c8462f703921690a3e960c23146fc95034f376c3ea0ce74a8758ed4f3d0fc799079908573e7b9b21b0f6b48c7d199d14fb8ac62a7bd8a4d8b625640508734ba71b5687b9ab077f26440c606a56da1ec84da7fd58f223b8e783c1ca9541d2b6ebf3f414b5560ea98ea0e5c07d3b8522e0b99e4e3d644513f32e68c8bb73a193fa87cd33985805ff2c00e51884f12cf41d5385806cbcd4ddcb8cf70f5514126b6c8b0930f7106d65b0616c6f6dbc7690e01772d8d4f905db2602e0218fce86acfb41675eac4c9d6"}, {0xb8, 0x109, 0x2, "7188b6fac55674ce62b5a96582ad9a71f1d0a10f4ee3cb8c45c146547c27d6407c0cd593db059455da8a4055c29932e20b9ac60f89c8313f93ab78aba061b5143e411357879a11539988fcba1a4f90bf185f9cbf57ed0d373044d44c4e049493919996c766baba15c1510d9ae81a2d9b1075f79e920d44f134b8ebdc3412aea7c3fe4dcfe38a6466c03bb407275aa5bc2e3ed3f561e4d212d61d689aa4e6f738f6"}, {0xc8, 0x927e7278be4af5d4, 0x5, "fa5a8d7f01679809df3623cd9fc1899406ad68a36eee5571cc1ccecc537cb6ed988b50e60bbfbcd83932260baaa82f4f9055bcb3793b356623ab633b50012b5d72dec51f27eb2a7c08a062c7eca9c23fbaf8ca23ee688e45978eb233fd389d4d47e7cb238668d7fd9efc402da4e7d8194be9bfd029f647f004e42a5a7ad42f855c8c82de5090e3d331866c206cc2afb36875221d5400b33459944490759199b00415e1c31065dc99a8a0102a0a9c54a91a658e2a"}, {0xe8, 0x102, 0x3, "969aa2703c8503afa11b772ffbabcf9830fbfbf534422b834ef0ab1b299d77b9c7a2bf432d22ae320abb02dfe6742d4dc6836dfa03bc5df5f39a7d73c4d68c47a0aa1038971e7770c97c685f226884e09fee7bccf35fceb914fab09dc070590117cae48de223152357d10b7d93c1309443bc92052c3d6ae63f91685c6eb484e7c5d8a3ae812a72b87d81bc8396fc255e5e33312a30f32ac0d00e524cf1a2fad2364ef6f41209cc6b3cc8cb17eda4f30c89259d59b60cf9bfc0dec96b4a1de67358cd6a8d107599da8957620aba8560919b256124f690df"}, {0xc0, 0x3a, 0x10001, "51dff1d26b759df9236a51163f36386d8485f06581ed92946df785f86d51fe0e9d12299bb7d4f86c7d8269205a99dcef1f9713c67fbb76ae53358f01a9227151be8f6724371e150035e45adc0b653f4d5fa5e337ec741e128979f8c7c6d5c23d8749947c76558f5ad561d10ebd8c75f75e3c2cb2080a5f43cf1adc7e4532ad8964e721fbde2e0c9943ab05628db903a6199f90cbd921a4a0ef07f827f1d0f7c3ba5fd1f999251286c94140c75a042d73"}], 0x1590}, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) 87.007749ms ago: executing program 2 (id=1097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x88c2) 0s ago: executing program 0 (id=1098): syz_emit_ethernet(0x46, &(0x7f0000000000)={@remote, @multicast, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "922d553c1d2134e9"}}}}, 0x0) kernel console output (not intermixed with test programs): 50:50 [ 157.250885][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.465176][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.618156][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.810997][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.106360][ T11] bridge_slave_1: left allmulticast mode [ 158.112083][ T11] bridge_slave_1: left promiscuous mode [ 158.126558][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.147254][ T11] bridge_slave_0: left allmulticast mode [ 158.156289][ T11] bridge_slave_0: left promiscuous mode [ 158.163637][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.288093][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.310802][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.322021][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.359869][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.373469][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.383128][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.943782][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.965115][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.982926][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.006247][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.016088][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.023813][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.081822][ T8632] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 159.116838][ T8634] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 159.264627][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.276329][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.290216][ T11] bond0 (unregistering): Released all slaves [ 160.002516][ T11] hsr_slave_0: left promiscuous mode [ 160.050887][ T11] hsr_slave_1: left promiscuous mode [ 160.063537][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.071004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.100699][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.118298][ T8656] netlink: 92 bytes leftover after parsing attributes in process `syz.3.570'. [ 160.120253][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.182424][ T11] veth1_macvtap: left promiscuous mode [ 160.192496][ T11] veth0_macvtap: left promiscuous mode [ 160.200838][ T11] veth1_vlan: left promiscuous mode [ 160.210912][ T11] veth0_vlan: left promiscuous mode [ 160.493132][ T5146] Bluetooth: hci0: command tx timeout [ 160.749819][ T11] team0 (unregistering): Port device team_slave_1 removed [ 160.788915][ T11] team0 (unregistering): Port device team_slave_0 removed [ 161.057348][ T5146] Bluetooth: hci4: command tx timeout [ 161.310678][ T8628] chnl_net:caif_netlink_parms(): no params data found [ 161.433580][ T8595] chnl_net:caif_netlink_parms(): no params data found [ 161.761241][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.801045][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.828978][ T8628] bridge_slave_0: entered allmulticast mode [ 161.859510][ T8628] bridge_slave_0: entered promiscuous mode [ 161.983638][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.018240][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.030052][ T8628] bridge_slave_1: entered allmulticast mode [ 162.037632][ T8628] bridge_slave_1: entered promiscuous mode [ 162.151347][ T8729] netlink: 64 bytes leftover after parsing attributes in process `syz.0.585'. [ 162.152292][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.586'. [ 162.171545][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.184342][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.191573][ T8595] bridge_slave_0: entered allmulticast mode [ 162.201718][ T8595] bridge_slave_0: entered promiscuous mode [ 162.211848][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.223025][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.230394][ T8595] bridge_slave_1: entered allmulticast mode [ 162.240660][ T8595] bridge_slave_1: entered promiscuous mode [ 162.266112][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.282667][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.410806][ T8628] team0: Port device team_slave_0 added [ 162.419971][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.434817][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.444778][ T8738] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 162.455437][ T8628] team0: Port device team_slave_1 added [ 162.556282][ T8738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.569028][ T8734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.573040][ T5146] Bluetooth: hci0: command tx timeout [ 162.590938][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.598295][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.624668][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.640467][ T8595] team0: Port device team_slave_0 added [ 162.649784][ T8595] team0: Port device team_slave_1 added [ 162.726107][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.745030][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.752028][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.779940][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.840527][ T8749] syzkaller1: entered promiscuous mode [ 162.849666][ T8749] syzkaller1: entered allmulticast mode [ 162.872330][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.899798][ T8628] hsr_slave_0: entered promiscuous mode [ 162.906099][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 162.908547][ T8628] hsr_slave_1: entered promiscuous mode [ 162.920729][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 162.936982][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.944613][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.970953][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.984178][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.991168][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.017849][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.029375][ T8748] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 163.105355][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.133040][ T5146] Bluetooth: hci4: command tx timeout [ 163.299051][ T8595] hsr_slave_0: entered promiscuous mode [ 163.322355][ T8595] hsr_slave_1: entered promiscuous mode [ 163.334492][ T8595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.342196][ T8595] Cannot create hsr debugfs directory [ 163.378424][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.852625][ T11] bridge_slave_1: left allmulticast mode [ 163.863616][ T11] bridge_slave_1: left promiscuous mode [ 163.869491][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.881658][ T11] bridge_slave_0: left allmulticast mode [ 163.887865][ T11] bridge_slave_0: left promiscuous mode [ 163.895136][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.423552][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.434701][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.445067][ T11] bond0 (unregistering): Released all slaves [ 164.519707][ T5845] udevd (5845) used greatest stack depth: 17720 bytes left [ 164.549515][ T8807] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 164.597557][ T8807] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 164.653105][ T5146] Bluetooth: hci0: command tx timeout [ 164.845570][ T11] hsr_slave_0: left promiscuous mode [ 164.851758][ T11] hsr_slave_1: left promiscuous mode [ 164.859567][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.896619][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.919870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.932250][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.965274][ T11] veth1_macvtap: left promiscuous mode [ 164.970828][ T11] veth0_macvtap: left promiscuous mode [ 164.976979][ T11] veth1_vlan: left promiscuous mode [ 164.982746][ T11] veth0_vlan: left promiscuous mode [ 165.218416][ T5146] Bluetooth: hci4: command tx timeout [ 165.301953][ T8826] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 165.311151][ T8826] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 165.444458][ T11] team0 (unregistering): Port device team_slave_1 removed [ 165.517841][ T11] team0 (unregistering): Port device team_slave_0 removed [ 166.000162][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 166.051253][ T8839] netlink: 'syz.3.613': attribute type 32 has an invalid length. [ 166.290127][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.409052][ T8856] netlink: 'syz.3.619': attribute type 9 has an invalid length. [ 166.422133][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 166.506174][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 166.545084][ T8628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.553025][ T8864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.621'. [ 166.599291][ T8628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.617525][ T8628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.643224][ T8628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.725509][ T8595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.736269][ T5146] Bluetooth: hci0: command tx timeout [ 166.749687][ T8595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.761843][ T8876] netlink: 180 bytes leftover after parsing attributes in process `syz.3.625'. [ 166.773427][ T8876] openvswitch: netlink: Flow key attr not present in new flow. [ 166.799844][ T8595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.815719][ T8595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.089925][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.147741][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.169326][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.211125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.217046][ T8895] netlink: 'syz.2.630': attribute type 3 has an invalid length. [ 167.218300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.226250][ T8895] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 167.254346][ T8895] IPv6: sit2: Disabled Multicast RS [ 167.260159][ T8895] sit2: entered allmulticast mode [ 167.291499][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.298261][ T5146] Bluetooth: hci4: command tx timeout [ 167.308468][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.315668][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.346737][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.353955][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.395882][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.403081][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.679344][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 167.703785][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.781386][ T8595] veth0_vlan: entered promiscuous mode [ 167.800468][ T8595] veth1_vlan: entered promiscuous mode [ 167.808665][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.912297][ T8916] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 167.930975][ T8595] veth0_macvtap: entered promiscuous mode [ 167.955697][ T8595] veth1_macvtap: entered promiscuous mode [ 168.021513][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.041230][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.056077][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.101626][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.187909][ T8595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.200648][ T8595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.218803][ T8595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.237996][ T8595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.299349][ T8929] syzkaller1: entered promiscuous mode [ 168.309943][ T8929] syzkaller1: entered allmulticast mode [ 168.579581][ T8628] veth0_vlan: entered promiscuous mode [ 168.633350][ T8628] veth1_vlan: entered promiscuous mode [ 168.640006][ T8940] netlink: 'syz.3.642': attribute type 29 has an invalid length. [ 168.654874][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 168.685351][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.706877][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.741973][ T8628] veth0_macvtap: entered promiscuous mode [ 168.752187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.770552][ T8628] veth1_macvtap: entered promiscuous mode [ 168.777157][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.812379][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.838617][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.849614][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.860372][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.871846][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.910797][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.931685][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.955730][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.966321][ T8628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.977055][ T8628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.996125][ T8628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.005184][ T8628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.249110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.269946][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.300398][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.309363][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.781467][ T8964] netlink: 'syz.2.647': attribute type 33 has an invalid length. [ 169.987241][ T1161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.358303][ T8979] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 170.559045][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.567877][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.577621][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.586140][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.594431][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.601736][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.712386][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 170.762730][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.770187][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.777830][ T8982] bridge_slave_0: entered allmulticast mode [ 170.784962][ T8982] bridge_slave_0: entered promiscuous mode [ 170.792557][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.799934][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.807586][ T8982] bridge_slave_1: entered allmulticast mode [ 170.814934][ T8982] bridge_slave_1: entered promiscuous mode [ 170.840156][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.851720][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.880453][ T8982] team0: Port device team_slave_0 added [ 170.887756][ T8982] team0: Port device team_slave_1 added [ 170.908995][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.916364][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.942296][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.954785][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.961746][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.988472][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.256152][ T1161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.309862][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 171.322777][ T8982] hsr_slave_0: entered promiscuous mode [ 171.338714][ T8982] hsr_slave_1: entered promiscuous mode [ 171.354491][ T8982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.369902][ T8982] Cannot create hsr debugfs directory [ 171.445827][ T1161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.555447][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.557893][ T1161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.583004][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.592214][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.600485][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.608206][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.616148][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.860513][ T1161] bridge_slave_1: left allmulticast mode [ 171.867794][ T1161] bridge_slave_1: left promiscuous mode [ 171.873871][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.884299][ T1161] bridge_slave_0: left allmulticast mode [ 171.890628][ T1161] bridge_slave_0: left promiscuous mode [ 171.896926][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.350936][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.362039][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.373166][ T1161] bond0 (unregistering): Released all slaves [ 172.653529][ T5838] Bluetooth: hci0: command tx timeout [ 172.727423][ T9047] x_tables: duplicate underflow at hook 3 [ 172.780420][ T9047] IPVS: Unknown mcast interface: netdevsim0 [ 172.916626][ T1161] hsr_slave_0: left promiscuous mode [ 172.935066][ T1161] hsr_slave_1: left promiscuous mode [ 172.942314][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.959704][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.970122][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.978430][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.999502][ T1161] veth1_macvtap: left promiscuous mode [ 173.005695][ T1161] veth0_macvtap: left promiscuous mode [ 173.012444][ T1161] veth1_vlan: left promiscuous mode [ 173.020606][ T9062] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 173.029495][ T1161] veth0_vlan: left promiscuous mode [ 173.450229][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 173.494931][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 173.697741][ T5838] Bluetooth: hci4: command tx timeout [ 173.900489][ T9066] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 173.928045][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 174.235640][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.243440][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.250664][ T9016] bridge_slave_0: entered allmulticast mode [ 174.259600][ T9016] bridge_slave_0: entered promiscuous mode [ 174.275117][ T8982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.306421][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.330196][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.339436][ T9016] bridge_slave_1: entered allmulticast mode [ 174.373769][ T9016] bridge_slave_1: entered promiscuous mode [ 174.393658][ T8982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.580655][ T8982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.637176][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.645607][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 174.658501][ T8982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.680501][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.733054][ T5838] Bluetooth: hci0: command tx timeout [ 174.750088][ T9016] team0: Port device team_slave_0 added [ 174.777941][ T9016] team0: Port device team_slave_1 added [ 174.795760][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 174.847454][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.859615][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.886087][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.897856][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.683'. [ 174.947512][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.977656][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.999417][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.048704][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.110020][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.141518][ T9118] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.686'. [ 175.223848][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.255259][ T9016] hsr_slave_0: entered promiscuous mode [ 175.261386][ T9016] hsr_slave_1: entered promiscuous mode [ 175.268141][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.279781][ T9016] Cannot create hsr debugfs directory [ 175.307166][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.332133][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 175.604682][ T1161] bridge_slave_1: left allmulticast mode [ 175.610453][ T1161] bridge_slave_1: left promiscuous mode [ 175.633407][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.646764][ T1161] bridge_slave_0: left allmulticast mode [ 175.652620][ T1161] bridge_slave_0: left promiscuous mode [ 175.671998][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.757997][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 175.789885][ T5838] Bluetooth: hci4: command tx timeout [ 175.810673][ T9134] xt_bpf: check failed: parse error [ 176.615460][ T9146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.696'. [ 176.624906][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 176.813068][ T9155] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 176.821357][ T5838] Bluetooth: hci0: command tx timeout [ 176.828935][ T9155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.867876][ T9155] Bluetooth: MGMT ver 1.23 [ 176.898402][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.922054][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.941073][ T1161] bond0 (unregistering): Released all slaves [ 176.966124][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.990606][ T9161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 177.060823][ T9153] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 177.083019][ T9153] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.698'. [ 177.181836][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.225996][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.233194][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.351233][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.358443][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.437387][ T1161] hsr_slave_0: left promiscuous mode [ 177.448779][ T1161] hsr_slave_1: left promiscuous mode [ 177.454831][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.462293][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.482724][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.490368][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.522384][ T1161] veth1_macvtap: left promiscuous mode [ 177.534443][ T1161] veth0_macvtap: left promiscuous mode [ 177.540097][ T1161] veth1_vlan: left promiscuous mode [ 177.546210][ T1161] veth0_vlan: left promiscuous mode [ 177.864736][ T5838] Bluetooth: hci4: command tx timeout [ 178.661574][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 178.701999][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 178.893027][ T5838] Bluetooth: hci0: command tx timeout [ 179.185660][ T8982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.379582][ T9016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.404641][ T9016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.425144][ T9016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.463299][ T9016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.576712][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.596250][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.608803][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.618202][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.626470][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.636843][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.644574][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.657679][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.660327][ T8982] veth0_vlan: entered promiscuous mode [ 179.670940][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.678885][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.686732][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.694306][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.706408][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.713513][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.720883][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.730513][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.734793][ T8982] veth1_vlan: entered promiscuous mode [ 179.750151][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.759714][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.772522][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.773981][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.788501][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.795646][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.805708][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.812975][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.821053][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.829068][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.836537][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.849113][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.851608][ T8982] veth0_macvtap: entered promiscuous mode [ 179.857210][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.870261][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.887446][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.890293][ T8982] veth1_macvtap: entered promiscuous mode [ 179.907349][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.918975][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.928373][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.933462][ T5838] Bluetooth: hci4: command tx timeout [ 179.944937][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.957626][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.965804][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.975921][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.984878][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.992373][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.000125][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.009439][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.024805][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.055077][ T8982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.064569][ T9213] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.071935][ T8982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.081550][ T8982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.121020][ T8982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.272530][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.291999][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.348760][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.359273][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.375522][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.629024][ T9016] veth0_vlan: entered promiscuous mode [ 180.652019][ T9016] veth1_vlan: entered promiscuous mode [ 180.695786][ T9016] veth0_macvtap: entered promiscuous mode [ 180.710921][ T9016] veth1_macvtap: entered promiscuous mode [ 180.741936][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.759480][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.769438][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.781011][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.792428][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.811225][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.822544][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.835036][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.847517][ T9016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.856492][ T9016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.866361][ T9016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.875474][ T9016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.951140][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.029929][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.046345][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.074674][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.082551][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.209372][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.280878][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.450087][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.649560][ T11] bridge_slave_1: left allmulticast mode [ 181.655352][ T11] bridge_slave_1: left promiscuous mode [ 181.661053][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.670642][ T11] bridge_slave_0: left allmulticast mode [ 181.676588][ T11] bridge_slave_0: left promiscuous mode [ 181.682249][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.017879][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.030331][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.041224][ T11] bond0 (unregistering): Released all slaves [ 182.548096][ T11] hsr_slave_0: left promiscuous mode [ 182.560031][ T11] hsr_slave_1: left promiscuous mode [ 182.566010][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.575868][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.584355][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.591846][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.599840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.608694][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.620627][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 182.623746][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.635450][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.639763][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.684883][ T11] veth1_macvtap: left promiscuous mode [ 182.690432][ T11] veth0_macvtap: left promiscuous mode [ 182.696086][ T11] veth1_vlan: left promiscuous mode [ 182.701359][ T11] veth0_vlan: left promiscuous mode [ 183.073491][ T11] team0 (unregistering): Port device team_slave_1 removed [ 183.112179][ T11] team0 (unregistering): Port device team_slave_0 removed [ 183.891885][ T9262] chnl_net:caif_netlink_parms(): no params data found [ 183.893067][ T9286] __nla_validate_parse: 1 callbacks suppressed [ 183.893082][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 184.115478][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.125611][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.139384][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.147607][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.156927][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.165392][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.172762][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.173045][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.181448][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 184.202782][ T9262] bridge_slave_0: entered allmulticast mode [ 184.228851][ T9262] bridge_slave_0: entered promiscuous mode [ 184.242155][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.250894][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.258814][ T9262] bridge_slave_1: entered allmulticast mode [ 184.267500][ T9262] bridge_slave_1: entered promiscuous mode [ 184.278311][ T9305] erspan0: entered promiscuous mode [ 184.284151][ T9305] macvtap1: entered promiscuous mode [ 184.289588][ T9305] macvtap1: entered allmulticast mode [ 184.295019][ T9305] erspan0: entered allmulticast mode [ 184.349173][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.437771][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.462505][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.559662][ T9262] team0: Port device team_slave_0 added [ 184.635653][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.683001][ T9262] team0: Port device team_slave_1 added [ 184.733036][ T5838] Bluetooth: hci0: command tx timeout [ 184.766697][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.787356][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.825745][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.854705][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.884582][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.912942][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.962953][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.022465][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.140120][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 185.163235][ T9262] hsr_slave_0: entered promiscuous mode [ 185.191512][ T9262] hsr_slave_1: entered promiscuous mode [ 185.278550][ T9346] ip6tnl4: entered allmulticast mode [ 185.303409][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.751'. [ 185.377374][ T9341] netlink: 96 bytes leftover after parsing attributes in process `syz.0.749'. [ 185.476913][ T9357] netlink: 'syz.2.754': attribute type 7 has an invalid length. [ 185.586090][ T9362] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 185.594175][ T11] bridge_slave_1: left allmulticast mode [ 185.599841][ T11] bridge_slave_1: left promiscuous mode [ 185.607360][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.619061][ T11] bridge_slave_0: left allmulticast mode [ 185.625446][ T11] bridge_slave_0: left promiscuous mode [ 185.631423][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.659062][ T9367] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 185.766165][ T9370] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 185.976487][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.987452][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.998593][ T11] bond0 (unregistering): Released all slaves [ 186.057693][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 186.253950][ T5838] Bluetooth: hci4: command tx timeout [ 186.409407][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.449113][ T9388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.451251][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.465689][ T9298] bridge_slave_0: entered allmulticast mode [ 186.472647][ T9298] bridge_slave_0: entered promiscuous mode [ 186.526256][ T11] hsr_slave_0: left promiscuous mode [ 186.558653][ T11] hsr_slave_1: left promiscuous mode [ 186.565181][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.572625][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.643577][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.651103][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.652044][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 186.725074][ T11] veth1_macvtap: left promiscuous mode [ 186.730608][ T11] veth0_macvtap: left promiscuous mode [ 186.740399][ T11] veth1_vlan: left promiscuous mode [ 186.745807][ T11] veth0_vlan: left promiscuous mode [ 186.814627][ T5838] Bluetooth: hci0: command tx timeout [ 187.370755][ T11] team0 (unregistering): Port device team_slave_1 removed [ 187.435556][ T9413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.770'. [ 187.468044][ T11] team0 (unregistering): Port device team_slave_0 removed [ 187.860301][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.867643][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.878951][ T9298] bridge_slave_1: entered allmulticast mode [ 187.891109][ T9298] bridge_slave_1: entered promiscuous mode [ 188.057219][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.085711][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.171311][ T9262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.243301][ T9262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.258853][ T9298] team0: Port device team_slave_0 added [ 188.271088][ T9262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.305797][ T9298] team0: Port device team_slave_1 added [ 188.333052][ T5838] Bluetooth: hci4: command tx timeout [ 188.359641][ T9262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.412254][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.431955][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.461996][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.505026][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.530729][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.564810][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.645146][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 188.678564][ T9298] hsr_slave_0: entered promiscuous mode [ 188.686398][ T9298] hsr_slave_1: entered promiscuous mode [ 188.692550][ T9298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.701090][ T9298] Cannot create hsr debugfs directory [ 188.716474][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 188.826442][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.894814][ T5838] Bluetooth: hci0: command tx timeout [ 188.915648][ T9464] Cannot find del_set index 4 as target [ 188.934221][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.011849][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.019051][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.021272][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 189.028697][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.042453][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.147325][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 189.474000][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.550471][ T9262] veth0_vlan: entered promiscuous mode [ 189.569581][ T9262] veth1_vlan: entered promiscuous mode [ 189.606475][ T9493] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 189.614440][ T9493] netlink: 228 bytes leftover after parsing attributes in process `syz.0.793'. [ 189.670600][ T9262] veth0_macvtap: entered promiscuous mode [ 189.684379][ T9495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 189.696742][ T9495] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.705210][ T9495] gretap1: entered promiscuous mode [ 189.710640][ T9495] gretap1: entered allmulticast mode [ 189.739477][ T9298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.752043][ T9262] veth1_macvtap: entered promiscuous mode [ 189.767695][ T9298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.782087][ T9298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.803841][ T9298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.817187][ T9500] netlink: 188 bytes leftover after parsing attributes in process `syz.0.796'. [ 189.844757][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.855903][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.867209][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.911374][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.941295][ T9262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.959313][ T9262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.970930][ T9262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.986935][ T9262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.136023][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.188561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.206846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.267469][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.280186][ T8207] hid (null): unknown global tag 0xd [ 190.290510][ T8207] hid-generic 0005:10CF:4501.0001: unknown global tag 0xd [ 190.302114][ T9514] syzkaller1: entered promiscuous mode [ 190.308598][ T8207] hid-generic 0005:10CF:4501.0001: item 0 0 1 13 parsing failed [ 190.316587][ T9514] syzkaller1: entered allmulticast mode [ 190.324195][ T8207] hid-generic 0005:10CF:4501.0001: probe with driver hid-generic failed with error -22 [ 190.337674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.370877][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.410587][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.414989][ T54] Bluetooth: hci4: command tx timeout [ 190.417737][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.504583][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.511808][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.664782][ T9298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.784716][ T9535] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 190.847605][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 190.916875][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 190.953318][ T9538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.020186][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.059263][ T9538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.079421][ T9550] netlink: 168 bytes leftover after parsing attributes in process `syz.3.810'. [ 191.163976][ T9538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.210904][ T9558] netlink: 9 bytes leftover after parsing attributes in process `syz.3.812'. [ 191.244527][ T9538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.265587][ T9558] 0·: renamed from hsr_slave_1 [ 191.271980][ T9558] 0·: entered allmulticast mode [ 191.279904][ T9558] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 191.321899][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 191.344182][ T9558] netlink: 'syz.3.812': attribute type 3 has an invalid length. [ 191.398245][ T9538] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.420553][ T9538] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.451705][ T9538] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.474482][ T9538] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.490645][ T9298] veth0_vlan: entered promiscuous mode [ 191.522130][ T9298] veth1_vlan: entered promiscuous mode [ 191.590820][ T9298] veth0_macvtap: entered promiscuous mode [ 191.607711][ T9298] veth1_macvtap: entered promiscuous mode [ 191.631689][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.650977][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.661818][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.680698][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.691778][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.703433][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.714951][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.731065][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.754919][ T9298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.768710][ T9298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.782548][ T9298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.801248][ T9298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.849061][ T9575] netlink: 248 bytes leftover after parsing attributes in process `syz.0.814'. [ 191.860121][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 191.866277][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 191.872329][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 191.912447][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.941108][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.011657][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.053624][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.297423][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.840980][ T9602] x_tables: duplicate underflow at hook 1 [ 193.035775][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.045033][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.053923][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.062566][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.070696][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.079790][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.090856][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.190747][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.254775][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.274590][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 193.353992][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.361174][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.369122][ T9607] bridge_slave_0: entered allmulticast mode [ 193.376195][ T9607] bridge_slave_0: entered promiscuous mode [ 193.389060][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.397757][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.406026][ T9607] bridge_slave_1: entered allmulticast mode [ 193.412635][ T9607] bridge_slave_1: entered promiscuous mode [ 193.441802][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.451316][ T11] bridge_slave_1: left allmulticast mode [ 193.458429][ T11] bridge_slave_1: left promiscuous mode [ 193.467074][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.476301][ T11] bridge_slave_0: left allmulticast mode [ 193.481948][ T11] bridge_slave_0: left promiscuous mode [ 193.488282][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.048161][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.061416][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.072388][ T11] bond0 (unregistering): Released all slaves [ 194.087687][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.144196][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.159843][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.168737][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.180582][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.198728][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.208744][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.274485][ T9633] netlink: 'syz.0.826': attribute type 39 has an invalid length. [ 194.299031][ T9640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 194.316119][ T9637] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 194.386594][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 194.398171][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 194.411128][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 194.431314][ T9607] team0: Port device team_slave_0 added [ 194.489007][ T9607] team0: Port device team_slave_1 added [ 194.578301][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.595946][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.627463][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.650290][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.657951][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.684458][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.790138][ T11] hsr_slave_0: left promiscuous mode [ 194.826851][ T11] hsr_slave_1: left promiscuous mode [ 194.843551][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.864119][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.895360][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.901768][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.033973][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.041879][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.085979][ T11] veth1_macvtap: left promiscuous mode [ 195.091544][ T11] veth0_macvtap: left promiscuous mode [ 195.103052][ T11] veth1_vlan: left promiscuous mode [ 195.108420][ T11] veth0_vlan: left promiscuous mode [ 195.133565][ T5146] Bluetooth: hci0: command tx timeout [ 195.501369][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.545101][ T11] team0 (unregistering): Port device team_slave_0 removed [ 195.927994][ T9607] hsr_slave_0: entered promiscuous mode [ 195.934685][ T9607] hsr_slave_1: entered promiscuous mode [ 196.067354][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 196.253514][ T5146] Bluetooth: hci4: command tx timeout [ 196.277207][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 196.371613][ T9678] netlink: 2 bytes leftover after parsing attributes in process `syz.2.837'. [ 196.401569][ T9678] unknown channel width for channel at 909000KHz? [ 196.441806][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.449179][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.462661][ T9635] bridge_slave_0: entered allmulticast mode [ 196.480418][ T9635] bridge_slave_0: entered promiscuous mode [ 196.490845][ T9683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.838'. [ 196.501381][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.526271][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.533751][ T9635] bridge_slave_1: entered allmulticast mode [ 196.540429][ T9635] bridge_slave_1: entered promiscuous mode [ 196.600073][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.659925][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.740574][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.771172][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.924500][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.976594][ T9635] team0: Port device team_slave_0 added [ 197.085932][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.126953][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'. [ 197.215773][ T5146] Bluetooth: hci0: command tx timeout [ 197.400144][ T9635] team0: Port device team_slave_1 added [ 197.424144][ T9710] gre0: entered allmulticast mode [ 197.581033][ T9607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.628602][ T9607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.666373][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.700936][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.739496][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.759885][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.770463][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.807188][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.828200][ T9607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.870688][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 197.928458][ T9607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.996772][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 198.023906][ T9635] hsr_slave_0: entered promiscuous mode [ 198.030061][ T9635] hsr_slave_1: entered promiscuous mode [ 198.036640][ T9635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.044621][ T9635] Cannot create hsr debugfs directory [ 198.052529][ T11] bridge_slave_1: left allmulticast mode [ 198.062045][ T11] bridge_slave_1: left promiscuous mode [ 198.068116][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.077225][ T11] bridge_slave_0: left allmulticast mode [ 198.083347][ T11] bridge_slave_0: left promiscuous mode [ 198.089172][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.304771][ T9748] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 198.334039][ T5146] Bluetooth: hci4: command tx timeout [ 198.409678][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.420915][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.431141][ T11] bond0 (unregistering): Released all slaves [ 198.701311][ T9754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.764470][ T11] hsr_slave_0: left promiscuous mode [ 198.773082][ T11] hsr_slave_1: left promiscuous mode [ 198.779071][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.790945][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.822591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.863477][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.126604][ T11] veth1_macvtap: left promiscuous mode [ 199.141232][ T11] veth0_macvtap: left promiscuous mode [ 199.151722][ T11] veth1_vlan: left promiscuous mode [ 199.160730][ T11] veth0_vlan: left promiscuous mode [ 199.197388][ T9765] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 199.208102][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 199.221399][ T9765] xt_TCPMSS: Only works on TCP SYN packets [ 199.293483][ T5146] Bluetooth: hci0: command tx timeout [ 199.687489][ T11] team0 (unregistering): Port device team_slave_1 removed [ 199.728755][ T11] team0 (unregistering): Port device team_slave_0 removed [ 200.111412][ T9759] syz_tun: entered allmulticast mode [ 200.168972][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.233457][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.290857][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.298084][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.336488][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.343699][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.414589][ T5146] Bluetooth: hci4: command tx timeout [ 200.434369][ T9607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.482452][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.532110][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.538454][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 200.550620][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.588349][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.596968][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.609303][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.623369][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.635282][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.651789][ T9790] xt_TCPMSS: Only works on TCP SYN packets [ 200.703926][ T9635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.729424][ T9635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.767059][ T9635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.791101][ T9635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.888148][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.978465][ T9607] veth0_vlan: entered promiscuous mode [ 201.007031][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.016739][ T9607] veth1_vlan: entered promiscuous mode [ 201.049214][ T9635] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.066447][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.073641][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.108970][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.116167][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.167769][ T9635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.187060][ T9635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.207270][ T9607] veth0_macvtap: entered promiscuous mode [ 201.235072][ T9607] veth1_macvtap: entered promiscuous mode [ 201.267455][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.293433][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.314755][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.365671][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.391061][ T5146] Bluetooth: hci0: command tx timeout [ 201.413505][ T9607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.422240][ T9607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.444480][ T9828] Bluetooth: MGMT ver 1.23 [ 201.489192][ T9607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.500930][ T9607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.588969][ T9834] netlink: 'syz.3.880': attribute type 246 has an invalid length. [ 201.619361][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.695793][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.722916][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.758407][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.781385][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.830685][ T9842] netlink: 'syz.2.881': attribute type 29 has an invalid length. [ 201.843962][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 201.876406][ T9842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.881'. [ 201.989908][ T9635] veth0_vlan: entered promiscuous mode [ 202.038188][ T9635] veth1_vlan: entered promiscuous mode [ 202.187060][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 202.206972][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 202.215140][ T9635] veth0_macvtap: entered promiscuous mode [ 202.229724][ T9635] veth1_macvtap: entered promiscuous mode [ 202.239270][ T9860] xt_l2tp: v2 doesn't support IP mode [ 202.260585][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.284087][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.305731][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.327254][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.340733][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.356340][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.368998][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.381190][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.395306][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 202.422580][ T9635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.443243][ T9635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.451998][ T9635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.475895][ T9635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.493545][ T5146] Bluetooth: hci4: command tx timeout [ 202.535893][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.632955][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.649331][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.671219][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.692606][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.715046][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.810310][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.258492][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.710255][ T11] bridge_slave_1: left allmulticast mode [ 203.719170][ T11] bridge_slave_1: left promiscuous mode [ 203.736903][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.746049][ T9873] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.892'. [ 203.783472][ T11] bridge_slave_0: left allmulticast mode [ 203.799475][ T11] bridge_slave_0: left promiscuous mode [ 203.819933][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.144004][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.156059][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.169875][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.180550][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.189253][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.196918][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.403200][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.420577][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.430945][ T11] bond0 (unregistering): Released all slaves [ 204.633981][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 204.700808][ T11] hsr_slave_0: left promiscuous mode [ 204.706910][ T11] hsr_slave_1: left promiscuous mode [ 204.712570][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.720075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.729095][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.737401][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.756654][ T11] veth1_macvtap: left promiscuous mode [ 204.762590][ T11] veth0_macvtap: left promiscuous mode [ 204.768645][ T11] veth1_vlan: left promiscuous mode [ 204.773980][ T11] veth0_vlan: left promiscuous mode [ 205.411727][ T11] team0 (unregistering): Port device team_slave_1 removed [ 205.593159][ T11] team0 (unregistering): Port device team_slave_0 removed [ 205.669683][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.699581][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.708339][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.716419][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.726351][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.742110][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.253398][ T5146] Bluetooth: hci0: command tx timeout [ 206.270137][ T9898] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 206.288046][ T9913] netlink: 64 bytes leftover after parsing attributes in process `syz.3.898'. [ 206.369197][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.376909][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.385654][ T9885] bridge_slave_0: entered allmulticast mode [ 206.393043][ T9885] bridge_slave_0: entered promiscuous mode [ 206.444850][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.452060][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.482973][ T9885] bridge_slave_1: entered allmulticast mode [ 206.489948][ T9885] bridge_slave_1: entered promiscuous mode [ 206.542406][ T9926] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 206.611950][ T9926] bridge0: port 3(team0) entered blocking state [ 206.618702][ T9926] bridge0: port 3(team0) entered disabled state [ 206.626188][ T9926] team0: entered allmulticast mode [ 206.631382][ T9926] team_slave_0: entered allmulticast mode [ 206.637298][ T9926] team_slave_1: entered allmulticast mode [ 206.643268][ T9926] geneve0: entered allmulticast mode [ 206.649596][ T9926] team0: entered promiscuous mode [ 206.655329][ T9926] team_slave_0: entered promiscuous mode [ 206.661197][ T9926] team_slave_1: entered promiscuous mode [ 206.667115][ T9926] geneve0: entered promiscuous mode [ 206.681437][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.712294][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.860802][ T9885] team0: Port device team_slave_0 added [ 206.885939][ T9885] team0: Port device team_slave_1 added [ 206.940308][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.953622][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.980737][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.007696][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.015745][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.042093][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.174453][ T9885] hsr_slave_0: entered promiscuous mode [ 207.181135][ T9885] hsr_slave_1: entered promiscuous mode [ 207.245220][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.248459][ T9949] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 207.302066][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 207.344849][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.356993][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.359002][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.398576][ T9952] netlink: 'syz.3.909': attribute type 20 has an invalid length. [ 207.411328][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.438334][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.449979][ T9955] netlink: 'syz.3.909': attribute type 20 has an invalid length. [ 207.486761][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.621996][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.774352][ T5146] Bluetooth: hci4: command tx timeout [ 207.830662][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.839926][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.847451][ T9915] bridge_slave_0: entered allmulticast mode [ 207.864227][ T9915] bridge_slave_0: entered promiscuous mode [ 207.882232][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.892764][ T9972] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 207.903288][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.910650][ T9915] bridge_slave_1: entered allmulticast mode [ 207.918465][ T9915] bridge_slave_1: entered promiscuous mode [ 207.987836][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.026682][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.087065][ T11] bridge_slave_1: left allmulticast mode [ 208.093266][ T11] bridge_slave_1: left promiscuous mode [ 208.101802][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.139004][ T11] bridge_slave_0: left allmulticast mode [ 208.160892][ T11] bridge_slave_0: left promiscuous mode [ 208.166973][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.335471][ T5146] Bluetooth: hci0: command tx timeout [ 208.517489][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.528201][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.539561][ T11] bond0 (unregistering): Released all slaves [ 208.557354][ T9915] team0: Port device team_slave_0 added [ 208.567914][ T9915] team0: Port device team_slave_1 added [ 208.576892][ T9979] bridge_slave_0: entered promiscuous mode [ 208.779485][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.788403][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.816576][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.829245][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.836359][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.877491][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.910536][ T9994] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 208.919225][ T9994] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 208.929306][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 208.930323][ T9994] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 208.995589][ T9885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.022606][ T9885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.079698][ T9915] hsr_slave_0: entered promiscuous mode [ 209.087317][ T9915] hsr_slave_1: entered promiscuous mode [ 209.093828][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.101619][ T9915] Cannot create hsr debugfs directory [ 209.111734][ T9885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.130634][ T9885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.178192][ T11] hsr_slave_0: left promiscuous mode [ 209.187538][ T11] hsr_slave_1: left promiscuous mode [ 209.193699][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.201329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.209489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.217202][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.237289][ T11] veth1_macvtap: left promiscuous mode [ 209.243048][ T11] veth0_macvtap: left promiscuous mode [ 209.248638][ T11] veth1_vlan: left promiscuous mode [ 209.254057][ T11] veth0_vlan: left promiscuous mode [ 209.559746][ T9995] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 209.568347][ T9995] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 209.582154][ T9995] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 209.704146][ T11] team0 (unregistering): Port device team_slave_1 removed [ 209.745825][ T11] team0 (unregistering): Port device team_slave_0 removed [ 209.853136][ T5146] Bluetooth: hci4: command tx timeout [ 210.417858][ T5146] Bluetooth: hci0: command tx timeout [ 210.446064][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.490404][T10023] nftables ruleset with unbound set [ 210.521945][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.542755][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.550031][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.561578][T10023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 210.602670][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.603168][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 210.609885][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.634555][T10023] syzkaller1: entered promiscuous mode [ 210.640225][T10023] syzkaller1: entered allmulticast mode [ 210.811544][ T9915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.830638][ T9915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.864040][ T9915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.885960][ T9915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.042040][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.060606][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.088334][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.108315][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.115533][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.150638][ T9885] veth0_vlan: entered promiscuous mode [ 211.164438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.171657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.200854][ T9885] veth1_vlan: entered promiscuous mode [ 211.248762][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 211.288181][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 211.372318][ T9885] veth0_macvtap: entered promiscuous mode [ 211.404692][T10046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'. [ 211.415587][ T9885] veth1_macvtap: entered promiscuous mode [ 211.448583][T10046] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 211.464085][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.473205][T10046] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 211.488128][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.531019][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.586894][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.622081][ T9885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.636289][ T9885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.648112][ T9885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.668674][ T9885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.851527][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.860387][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.868074][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.929996][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.941142][ T5146] Bluetooth: hci4: command tx timeout [ 211.956588][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.250764][ T9915] veth0_vlan: entered promiscuous mode [ 212.266132][ T9915] veth1_vlan: entered promiscuous mode [ 212.295672][ T9915] veth0_macvtap: entered promiscuous mode [ 212.308768][ T9915] veth1_macvtap: entered promiscuous mode [ 212.329087][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.340722][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.350784][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.362122][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.373747][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.383774][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.394885][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.409842][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.431072][T10090] openvswitch: netlink: nsh attr 0 has unexpected len 188 expected 0 [ 212.442456][ T9915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.443398][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.466761][ T9915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.476914][ T9915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.490894][ T9915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.568931][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.584106][T10092] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 212.588610][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.621783][T10092] bond4: entered promiscuous mode [ 212.627020][T10092] bond4: entered allmulticast mode [ 212.651778][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.668244][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.678888][T10092] netlink: 'syz.0.943': attribute type 5 has an invalid length. [ 212.816279][T10103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.012078][ T1161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.609632][ T1161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.081264][ T1161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.147768][ T1161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.220770][ T1161] bridge_slave_1: left allmulticast mode [ 214.226869][ T1161] bridge_slave_1: left promiscuous mode [ 214.232602][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.278769][ T1161] bridge_slave_0: left allmulticast mode [ 214.292219][ T1161] bridge_slave_0: left promiscuous mode [ 214.300504][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.323298][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 214.651618][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.666723][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.683439][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.706548][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.717668][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.727031][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.879257][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.890306][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.900998][ T1161] bond0 (unregistering): Released all slaves [ 214.914551][T10112] bond0: entered allmulticast mode [ 214.943229][T10112] bond_slave_0: entered allmulticast mode [ 214.949114][T10112] bond_slave_1: entered allmulticast mode [ 214.955193][T10112] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 215.167673][ T1161] hsr_slave_0: left promiscuous mode [ 215.175415][ T1161] hsr_slave_1: left promiscuous mode [ 215.181129][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.189337][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.197193][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.205748][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.225511][ T1161] veth1_macvtap: left promiscuous mode [ 215.231047][ T1161] veth0_macvtap: left promiscuous mode [ 215.236675][ T1161] veth1_vlan: left promiscuous mode [ 215.241923][ T1161] veth0_vlan: left promiscuous mode [ 215.605613][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 215.650016][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 216.128123][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.142562][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.157834][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.171567][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.186171][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.193639][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.264701][T10119] chnl_net:caif_netlink_parms(): no params data found [ 216.459571][T10119] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.475052][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.490280][T10119] bridge_slave_0: entered allmulticast mode [ 216.499009][T10119] bridge_slave_0: entered promiscuous mode [ 216.524241][T10119] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.531601][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.546243][T10119] bridge_slave_1: entered allmulticast mode [ 216.558320][T10119] bridge_slave_1: entered promiscuous mode [ 216.625976][T10119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.638889][T10119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.672564][T10148] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 216.683298][T10148] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 216.785867][T10119] team0: Port device team_slave_0 added [ 216.817596][ T5146] Bluetooth: hci0: command tx timeout [ 216.842149][T10119] team0: Port device team_slave_1 added [ 217.599501][T10119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.621647][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.655096][T10119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.767310][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.791599][T10119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.799791][T10183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.965'. [ 217.803169][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.839038][T10119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.852360][T10135] chnl_net:caif_netlink_parms(): no params data found [ 217.960961][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.089901][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.189165][T10119] hsr_slave_0: entered promiscuous mode [ 218.222701][T10119] hsr_slave_1: entered promiscuous mode [ 218.254043][ T5146] Bluetooth: hci4: command tx timeout [ 218.311458][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.497734][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.523090][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.530580][T10135] bridge_slave_0: entered allmulticast mode [ 218.538525][T10135] bridge_slave_0: entered promiscuous mode [ 218.591877][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.621021][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.636589][T10135] bridge_slave_1: entered allmulticast mode [ 218.647145][T10135] bridge_slave_1: entered promiscuous mode [ 218.648409][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.677497][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'. [ 218.725332][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.778646][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.850830][T10135] team0: Port device team_slave_0 added [ 218.886434][T10135] team0: Port device team_slave_1 added [ 218.898879][ T5146] Bluetooth: hci0: command tx timeout [ 218.906705][ T1161] bridge_slave_1: left allmulticast mode [ 218.912421][ T1161] bridge_slave_1: left promiscuous mode [ 218.918456][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.926964][ T1161] bridge_slave_0: left allmulticast mode [ 218.932644][ T1161] bridge_slave_0: left promiscuous mode [ 218.938975][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.329165][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.340044][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.350180][ T1161] bond0 (unregistering): Released all slaves [ 219.380553][T10217] netlink: 72 bytes leftover after parsing attributes in process `syz.3.977'. [ 219.449926][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.470114][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.527968][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.632098][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.651004][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.697077][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.816240][T10242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.981'. [ 219.854422][T10135] hsr_slave_0: entered promiscuous mode [ 219.867160][T10135] hsr_slave_1: entered promiscuous mode [ 219.873382][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.880964][T10135] Cannot create hsr debugfs directory [ 219.896485][T10244] vlan0: entered allmulticast mode [ 219.901657][T10244] bridge_slave_0: entered allmulticast mode [ 219.910596][T10244] bridge_slave_0: left allmulticast mode [ 220.007894][ T1161] hsr_slave_0: left promiscuous mode [ 220.017144][ T1161] hsr_slave_1: left promiscuous mode [ 220.024793][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.032294][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.045142][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.056237][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.079624][ T1161] veth1_macvtap: left promiscuous mode [ 220.086609][ T1161] veth0_macvtap: left promiscuous mode [ 220.092229][ T1161] veth1_vlan: left promiscuous mode [ 220.100118][ T1161] veth0_vlan: left promiscuous mode [ 220.333094][ T5146] Bluetooth: hci4: command tx timeout [ 220.501143][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 220.544358][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 220.976059][ T5146] Bluetooth: hci0: command tx timeout [ 221.299823][T10119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.330158][T10119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.361040][T10119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.386988][T10119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.625900][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.672438][T10119] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.711733][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.719129][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.762588][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.769777][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.955356][T10135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.966608][T10135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.985093][T10135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.003905][T10135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.161542][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.212755][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.230316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.237442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.279235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.286499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.308845][T10119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.416322][ T5146] Bluetooth: hci4: command tx timeout [ 222.460223][T10119] veth0_vlan: entered promiscuous mode [ 222.502728][T10119] veth1_vlan: entered promiscuous mode [ 222.585903][T10119] veth0_macvtap: entered promiscuous mode [ 222.604392][T10119] veth1_macvtap: entered promiscuous mode [ 222.650851][T10119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.677612][T10119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.693784][T10119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.734747][T10119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.764257][T10119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.778811][T10119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.789584][T10119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.789888][T10291] xt_l2tp: wrong L2TP version: 0 [ 222.798624][T10119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.834059][T10292] xt_l2tp: wrong L2TP version: 0 [ 222.847972][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.957024][ T389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.984863][ T389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.048273][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.056705][ T5146] Bluetooth: hci0: command tx timeout [ 223.073026][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.440440][T10135] veth0_vlan: entered promiscuous mode [ 223.476516][T10135] veth1_vlan: entered promiscuous mode [ 223.536592][T10135] veth0_macvtap: entered promiscuous mode [ 223.573054][T10135] veth1_macvtap: entered promiscuous mode [ 223.609429][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.621301][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.644259][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.657757][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.669901][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.682354][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.693995][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.710127][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.745933][T10135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.757290][T10135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.780713][T10135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.799884][T10135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.970847][ T389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.979651][ T389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.050509][ T389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.062003][ T389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.407827][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.749465][T10263] Set syz1 is full, maxelem 65536 reached [ 225.315046][T10341] netlink: 'syz.3.1012': attribute type 13 has an invalid length. [ 225.469143][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.478343][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.487778][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.496417][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.506883][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.514392][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.552499][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.649684][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.668297][T10342] chnl_net:caif_netlink_parms(): no params data found [ 225.728971][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.761716][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.769220][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.777460][T10342] bridge_slave_0: entered allmulticast mode [ 225.784465][T10342] bridge_slave_0: entered promiscuous mode [ 225.791994][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.801942][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.809481][T10342] bridge_slave_1: entered allmulticast mode [ 225.816326][T10342] bridge_slave_1: entered promiscuous mode [ 225.842109][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.854626][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.892002][T10342] team0: Port device team_slave_0 added [ 225.909431][T10342] team0: Port device team_slave_1 added [ 225.940414][ T11] bridge_slave_1: left allmulticast mode [ 225.949737][ T11] bridge_slave_1: left promiscuous mode [ 225.956180][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.965813][ T11] bridge_slave_0: left allmulticast mode [ 225.971479][ T11] bridge_slave_0: left promiscuous mode [ 225.977595][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.268307][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.278899][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.289534][ T11] bond0 (unregistering): Released all slaves [ 226.299272][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.306461][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.332727][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.348645][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.355968][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.382409][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.429735][T10342] hsr_slave_0: entered promiscuous mode [ 226.436396][T10342] hsr_slave_1: entered promiscuous mode [ 226.442512][T10342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.450578][T10342] Cannot create hsr debugfs directory [ 226.781769][ T11] hsr_slave_0: left promiscuous mode [ 226.804230][ T11] hsr_slave_1: left promiscuous mode [ 226.824731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.854329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.889616][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.914090][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.976687][ T11] veth1_macvtap: left promiscuous mode [ 226.992557][ T11] veth0_macvtap: left promiscuous mode [ 227.004701][ T11] veth1_vlan: left promiscuous mode [ 227.010532][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.019256][ T11] veth0_vlan: left promiscuous mode [ 227.029462][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.037705][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.050202][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.061901][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.069745][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.452017][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.491621][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.535221][ T5146] Bluetooth: hci0: command tx timeout [ 227.918890][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 228.059283][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 228.414396][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 228.640822][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.754177][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.782456][T10369] chnl_net:caif_netlink_parms(): no params data found [ 228.855351][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.966157][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.005599][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.017418][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.025873][T10369] bridge_slave_0: entered allmulticast mode [ 229.033365][T10369] bridge_slave_0: entered promiscuous mode [ 229.043038][T10342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.079115][T10342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.091821][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.101316][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.111172][T10369] bridge_slave_1: entered allmulticast mode [ 229.120074][T10369] bridge_slave_1: entered promiscuous mode [ 229.133444][ T5146] Bluetooth: hci4: command tx timeout [ 229.133874][T10342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.163527][T10342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.188868][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.209772][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.256302][T10369] team0: Port device team_slave_0 added [ 229.271647][T10369] team0: Port device team_slave_1 added [ 229.303206][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.310401][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.337594][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.350468][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.357869][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.384991][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.399267][ T11] bridge_slave_1: left allmulticast mode [ 229.405257][ T11] bridge_slave_1: left promiscuous mode [ 229.411952][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.421660][ T11] bridge_slave_0: left allmulticast mode [ 229.428565][ T11] bridge_slave_0: left promiscuous mode [ 229.440087][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.624110][ T5146] Bluetooth: hci0: command tx timeout [ 229.898033][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.908940][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.919457][ T11] bond0 (unregistering): Released all slaves [ 229.936071][T10438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1040'. [ 229.947503][T10438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1040'. [ 229.957267][T10438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.281529][T10369] hsr_slave_0: entered promiscuous mode [ 230.288576][T10369] hsr_slave_1: entered promiscuous mode [ 230.488214][ T11] hsr_slave_0: left promiscuous mode [ 230.506889][ T11] hsr_slave_1: left promiscuous mode [ 230.516268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.547861][T10482] can: request_module (can-proto-5) failed. [ 230.550116][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.562248][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.578270][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.605569][ T11] veth1_macvtap: left promiscuous mode [ 230.611218][ T11] veth0_macvtap: left promiscuous mode [ 230.617128][ T11] veth1_vlan: left promiscuous mode [ 230.622500][ T11] veth0_vlan: left promiscuous mode [ 231.047061][ T11] team0 (unregistering): Port device team_slave_1 removed [ 231.089436][ T11] team0 (unregistering): Port device team_slave_0 removed [ 231.217978][ T5146] Bluetooth: hci4: command tx timeout [ 231.717185][ T5146] Bluetooth: hci0: command tx timeout [ 231.725761][T10342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.806366][T10498] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 231.841127][T10342] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.843463][T10500] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 231.901736][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.908962][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.031229][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.038483][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.107493][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 232.142268][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 232.470647][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.608414][T10369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.640968][T10369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.669652][T10369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.673714][T10531] netlink: 'syz.3.1063': attribute type 39 has an invalid length. [ 232.690886][T10369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.719151][T10342] veth0_vlan: entered promiscuous mode [ 232.754248][T10342] veth1_vlan: entered promiscuous mode [ 232.838463][T10533] ip6gre2: entered promiscuous mode [ 232.902091][T10342] veth0_macvtap: entered promiscuous mode [ 232.925938][T10342] veth1_macvtap: entered promiscuous mode [ 232.968321][T10369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.014786][T10342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.026883][T10342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.039462][T10342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.104400][T10342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.142673][T10369] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.162725][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 233.176081][T10342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.197041][T10342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.211458][T10342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.220933][T10342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.251284][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.258484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.293146][ T5146] Bluetooth: hci4: command tx timeout [ 233.338010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.345252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.464589][T10560] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1071'. [ 233.524379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.532347][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.627720][ T389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.666765][ T389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.773118][ T5146] Bluetooth: hci0: command tx timeout [ 233.859530][T10369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.015604][T10581] netem: change failed [ 234.027070][T10584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1077'. [ 234.277145][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.381573][T10369] veth0_vlan: entered promiscuous mode [ 234.403690][T10369] veth1_vlan: entered promiscuous mode [ 234.438670][T10369] veth0_macvtap: entered promiscuous mode [ 234.469602][T10369] veth1_macvtap: entered promiscuous mode [ 234.506863][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.550574][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.573080][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.586977][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.597705][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.608947][T10369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.647413][T10369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.672984][T10369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.684495][T10369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.728634][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.758592][T10369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.771930][T10369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.785258][T10369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.794559][T10369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.880370][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.897882][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.920515][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.948138][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.956114][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.028861][ T52] bridge_slave_1: left allmulticast mode [ 235.040330][ T52] bridge_slave_1: left promiscuous mode [ 235.046508][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.067023][ T52] bridge_slave_0: left allmulticast mode [ 235.072712][ T52] bridge_slave_0: left promiscuous mode [ 235.080746][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.388679][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.404101][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.415090][ T52] bond0 (unregistering): Released all slaves [ 235.639896][ T52] hsr_slave_0: left promiscuous mode [ 235.652165][ T52] hsr_slave_1: left promiscuous mode [ 235.660696][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.674424][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.683488][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.690965][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.732446][ T52] veth1_macvtap: left promiscuous mode [ 235.741098][ T52] veth0_macvtap: left promiscuous mode [ 235.783368][ T52] veth1_vlan: left promiscuous mode [ 235.789265][ T52] veth0_vlan: left promiscuous mode [ 235.905946][T10609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 236.014113][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.029440][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.039175][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.048491][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.065321][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.085807][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.371621][ T52] team0 (unregistering): Port device team_slave_1 removed [ 236.417114][ T52] team0 (unregistering): Port device team_slave_0 removed [ 236.810794][T10605] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 236.831418][T10608] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 237.009090][T10610] chnl_net:caif_netlink_parms(): no params data found [ 237.165161][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.202792][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.210311][T10610] bridge_slave_0: entered allmulticast mode [ 237.244263][T10610] bridge_slave_0: entered promiscuous mode [ 237.270710][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.285036][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.295948][T10610] bridge_slave_1: entered allmulticast mode [ 237.313045][T10610] bridge_slave_1: entered promiscuous mode [ 237.415096][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.449226][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.530658][T10610] team0: Port device team_slave_0 added [ 237.566973][T10610] team0: Port device team_slave_1 added [ 237.633051][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.652414][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.660788][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.674844][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.682390][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 237.687219][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.691177][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.761656][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 237.830402][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.882814][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 237.905239][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.912508][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.945122][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.967529][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 238.040214][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.069983][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.087514][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.119930][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.183134][ T5146] Bluetooth: hci0: command tx timeout [ 238.189836][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.307109][T10610] hsr_slave_0: entered promiscuous mode [ 238.335585][T10610] hsr_slave_1: entered promiscuous mode [ 238.365783][T10610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.392995][T10610] Cannot create hsr debugfs directory [ 238.462584][T10664] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 238.484046][ T8209] ------------[ cut here ]------------ [ 238.489851][ T8209] Invalid VIF (ffff88807f0929d0) magic 0x0, 08:02:11:00:00:01, 1/0 [ 238.498129][ T8209] WARNING: CPU: 1 PID: 8209 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b73/0x23c0 [ 238.510093][ T8209] Modules linked in: [ 238.514032][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: kworker/1:9 Not tainted 6.14.0-rc2-syzkaller-00187-g62520094e98c #0 [ 238.524851][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 238.534986][ T8209] Workqueue: mld mld_ifc_work [ 238.539704][ T8209] RIP: 0010:mac80211_hwsim_tx+0x1b73/0x23c0 [ 238.545654][ T8209] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 a0 d3 ca 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 3e d7 3c fa 90 <0f> 0b 90 90 e9 65 f2 ff ff e8 0f 14 7d fa 90 0f 0b 90 e9 d1 f2 ff [ 238.565349][ T8209] RSP: 0018:ffffc90003deeb50 EFLAGS: 00010246 [ 238.571451][ T8209] RAX: 1f9e6bb988d6b300 RBX: 0000000000000001 RCX: ffff888035519e00 [ 238.579480][ T8209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.587521][ T8209] RBP: ffff88807f092e2a R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 238.595572][ T8209] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 0000000000000000 [ 238.603611][ T8209] R13: dffffc0000000000 R14: ffff88807f0929d0 R15: 0000000000000000 [ 238.611613][ T8209] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 238.620617][ T8209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.627277][ T8209] CR2: 00007fc5980d56c0 CR3: 00000000609a2000 CR4: 00000000003526f0 [ 238.635317][ T8209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.643352][ T8209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.651383][ T8209] Call Trace: [ 238.654720][ T8209] [ 238.657684][ T8209] ? __warn+0x165/0x4d0 [ 238.661836][ T8209] ? mac80211_hwsim_tx+0x1b73/0x23c0 [ 238.667146][ T8209] ? report_bug+0x2b3/0x500 [ 238.671644][ T8209] ? mac80211_hwsim_tx+0x1b73/0x23c0 [ 238.676984][ T8209] ? handle_bug+0x60/0x90 [ 238.681315][ T8209] ? exc_invalid_op+0x1a/0x50 [ 238.686042][ T8209] ? asm_exc_invalid_op+0x1a/0x20 [ 238.691089][ T8209] ? __warn_printk+0x292/0x360 [ 238.695922][ T8209] ? mac80211_hwsim_tx+0x1b73/0x23c0 [ 238.701251][ T8209] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 238.707375][ T8209] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 238.714031][ T8209] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 238.719670][ T8209] ? do_raw_spin_unlock+0x13c/0x8b0 [ 238.724944][ T8209] ieee80211_queue_skb+0x1ae9/0x24b0 [ 238.730278][ T8209] ieee80211_tx+0x2c4/0x470 [ 238.734831][ T8209] ? __pfx_ieee80211_tx+0x10/0x10 [ 238.740151][ T8209] ? ieee80211_xmit+0x30f/0x3f0 [ 238.745057][ T8209] __ieee80211_subif_start_xmit+0xe65/0x15a0 [ 238.751073][ T8209] ? call_rcu+0x168/0xac0 [ 238.755470][ T8209] ? __dev_queue_xmit+0x87b/0x3f50 [ 238.760636][ T8209] ? __ieee80211_subif_start_xmit+0x300/0x15a0 [ 238.766830][ T8209] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 238.773305][ T8209] ? __lock_acquire+0x1397/0x2100 [ 238.778403][ T8209] ieee80211_subif_start_xmit+0xde/0x4d0 [ 238.784279][ T8209] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 238.790587][ T8209] ? __pfx_lock_acquire+0x10/0x10 [ 238.795668][ T8209] dev_hard_start_xmit+0x27a/0x7d0 [ 238.800817][ T8209] __dev_queue_xmit+0x1b73/0x3f50 [ 238.805917][ T8209] ? __dev_queue_xmit+0x2f4/0x3f50 [ 238.811072][ T8209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 238.816497][ T8209] ? neigh_resolve_output+0x450/0x740 [ 238.821867][ T8209] ? read_seqbegin+0x15a/0x2c0 [ 238.826649][ T8209] ? lockdep_hardirqs_on+0x99/0x150 [ 238.831849][ T8209] ? read_seqbegin+0x200/0x2c0 [ 238.836640][ T8209] ? __pfx_read_seqbegin+0x10/0x10 [ 238.841745][ T8209] ? neigh_resolve_output+0x2e5/0x740 [ 238.847172][ T8209] ? eth_header+0x11c/0x1f0 [ 238.851695][ T8209] ? __asan_memcpy+0x40/0x70 [ 238.856331][ T8209] ? eth_header+0x11c/0x1f0 [ 238.860857][ T8209] ? __pfx_eth_header+0x10/0x10 [ 238.865766][ T8209] ? neigh_resolve_output+0x61f/0x740 [ 238.871182][ T8209] ip6_finish_output2+0x12bc/0x17c0 [ 238.876445][ T8209] ? ip6_finish_output2+0x63b/0x17c0 [ 238.881745][ T8209] ? __pfx_ip6_finish_output2+0x10/0x10 [ 238.887332][ T8209] ? ip6_mtu+0x81/0x3f0 [ 238.891535][ T8209] ip6_finish_output+0x41e/0x840 [ 238.896550][ T8209] NF_HOOK+0x9e/0x430 [ 238.900551][ T8209] ? NF_HOOK+0xfa/0x430 [ 238.904750][ T8209] ? __pfx_NF_HOOK+0x10/0x10 [ 238.909378][ T8209] ? __pfx_dst_output+0x10/0x10 [ 238.914297][ T8209] ? icmp6_dst_alloc+0x3aa/0x420 [ 238.919262][ T8209] mld_sendpack+0x843/0xdb0 [ 238.923813][ T8209] ? __pfx_mld_newpack+0x10/0x10 [ 238.928796][ T8209] ? mld_sendpack+0x1e8/0xdb0 [ 238.933533][ T8209] ? __pfx_mld_sendpack+0x10/0x10 [ 238.938590][ T8209] mld_ifc_work+0x7d9/0xd90 [ 238.943140][ T8209] ? process_scheduled_works+0x9c6/0x18e0 [ 238.948902][ T8209] process_scheduled_works+0xabe/0x18e0 [ 238.954536][ T8209] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.960570][ T8209] ? assign_work+0x364/0x3d0 [ 238.965230][ T8209] worker_thread+0x870/0xd30 [ 238.969857][ T8209] ? __kthread_parkme+0x169/0x1d0 [ 238.974957][ T8209] ? __pfx_worker_thread+0x10/0x10 [ 238.980085][ T8209] kthread+0x7a9/0x920 [ 238.984198][ T8209] ? __pfx_kthread+0x10/0x10 [ 238.988818][ T8209] ? __pfx_worker_thread+0x10/0x10 [ 238.993974][ T8209] ? __pfx_kthread+0x10/0x10 [ 238.998581][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.003219][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.007831][ T8209] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.013061][ T8209] ? lockdep_hardirqs_on+0x99/0x150 [ 239.018274][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.022905][ T8209] ret_from_fork+0x4b/0x80 [ 239.027340][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.031952][ T8209] ret_from_fork_asm+0x1a/0x30 [ 239.036777][ T8209] [ 239.039809][ T8209] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.047080][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: kworker/1:9 Not tainted 6.14.0-rc2-syzkaller-00187-g62520094e98c #0 [ 239.057832][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.067886][ T8209] Workqueue: mld mld_ifc_work [ 239.072564][ T8209] Call Trace: [ 239.075841][ T8209] [ 239.078762][ T8209] dump_stack_lvl+0x241/0x360 [ 239.083449][ T8209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.088659][ T8209] ? __pfx__printk+0x10/0x10 [ 239.093265][ T8209] ? vscnprintf+0x5d/0x90 [ 239.097608][ T8209] panic+0x349/0x880 [ 239.101509][ T8209] ? __warn+0x174/0x4d0 [ 239.105688][ T8209] ? __pfx_panic+0x10/0x10 [ 239.110126][ T8209] ? ret_from_fork_asm+0x1a/0x30 [ 239.115072][ T8209] __warn+0x344/0x4d0 [ 239.119061][ T8209] ? mac80211_hwsim_tx+0x1b73/0x23c0 [ 239.124354][ T8209] report_bug+0x2b3/0x500 [ 239.128703][ T8209] ? mac80211_hwsim_tx+0x1b73/0x23c0 [ 239.134018][ T8209] handle_bug+0x60/0x90 [ 239.138187][ T8209] exc_invalid_op+0x1a/0x50 [ 239.142685][ T8209] asm_exc_invalid_op+0x1a/0x20 [ 239.147530][ T8209] RIP: 0010:mac80211_hwsim_tx+0x1b73/0x23c0 [ 239.153521][ T8209] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 a0 d3 ca 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 3e d7 3c fa 90 <0f> 0b 90 90 e9 65 f2 ff ff e8 0f 14 7d fa 90 0f 0b 90 e9 d1 f2 ff [ 239.173154][ T8209] RSP: 0018:ffffc90003deeb50 EFLAGS: 00010246 [ 239.179242][ T8209] RAX: 1f9e6bb988d6b300 RBX: 0000000000000001 RCX: ffff888035519e00 [ 239.187206][ T8209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.195187][ T8209] RBP: ffff88807f092e2a R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 239.203180][ T8209] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 0000000000000000 [ 239.211165][ T8209] R13: dffffc0000000000 R14: ffff88807f0929d0 R15: 0000000000000000 [ 239.219140][ T8209] ? __warn_printk+0x292/0x360 [ 239.224045][ T8209] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 239.230175][ T8209] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 239.236794][ T8209] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 239.242252][ T8209] ? do_raw_spin_unlock+0x13c/0x8b0 [ 239.247459][ T8209] ieee80211_queue_skb+0x1ae9/0x24b0 [ 239.252777][ T8209] ieee80211_tx+0x2c4/0x470 [ 239.257289][ T8209] ? __pfx_ieee80211_tx+0x10/0x10 [ 239.262331][ T8209] ? ieee80211_xmit+0x30f/0x3f0 [ 239.267191][ T8209] __ieee80211_subif_start_xmit+0xe65/0x15a0 [ 239.273190][ T8209] ? call_rcu+0x168/0xac0 [ 239.277533][ T8209] ? __dev_queue_xmit+0x87b/0x3f50 [ 239.282685][ T8209] ? __ieee80211_subif_start_xmit+0x300/0x15a0 [ 239.288862][ T8209] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 239.295303][ T8209] ? __lock_acquire+0x1397/0x2100 [ 239.300352][ T8209] ieee80211_subif_start_xmit+0xde/0x4d0 [ 239.306009][ T8209] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 239.312301][ T8209] ? __pfx_lock_acquire+0x10/0x10 [ 239.317333][ T8209] dev_hard_start_xmit+0x27a/0x7d0 [ 239.322542][ T8209] __dev_queue_xmit+0x1b73/0x3f50 [ 239.327598][ T8209] ? __dev_queue_xmit+0x2f4/0x3f50 [ 239.332716][ T8209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 239.338087][ T8209] ? neigh_resolve_output+0x450/0x740 [ 239.343463][ T8209] ? read_seqbegin+0x15a/0x2c0 [ 239.348235][ T8209] ? lockdep_hardirqs_on+0x99/0x150 [ 239.353439][ T8209] ? read_seqbegin+0x200/0x2c0 [ 239.358215][ T8209] ? __pfx_read_seqbegin+0x10/0x10 [ 239.363325][ T8209] ? neigh_resolve_output+0x2e5/0x740 [ 239.368705][ T8209] ? eth_header+0x11c/0x1f0 [ 239.373212][ T8209] ? __asan_memcpy+0x40/0x70 [ 239.377817][ T8209] ? eth_header+0x11c/0x1f0 [ 239.382332][ T8209] ? __pfx_eth_header+0x10/0x10 [ 239.387174][ T8209] ? neigh_resolve_output+0x61f/0x740 [ 239.392586][ T8209] ip6_finish_output2+0x12bc/0x17c0 [ 239.397788][ T8209] ? ip6_finish_output2+0x63b/0x17c0 [ 239.403091][ T8209] ? __pfx_ip6_finish_output2+0x10/0x10 [ 239.408654][ T8209] ? ip6_mtu+0x81/0x3f0 [ 239.412805][ T8209] ip6_finish_output+0x41e/0x840 [ 239.417754][ T8209] NF_HOOK+0x9e/0x430 [ 239.421740][ T8209] ? NF_HOOK+0xfa/0x430 [ 239.425899][ T8209] ? __pfx_NF_HOOK+0x10/0x10 [ 239.430518][ T8209] ? __pfx_dst_output+0x10/0x10 [ 239.435378][ T8209] ? icmp6_dst_alloc+0x3aa/0x420 [ 239.440313][ T8209] mld_sendpack+0x843/0xdb0 [ 239.444821][ T8209] ? __pfx_mld_newpack+0x10/0x10 [ 239.449781][ T8209] ? mld_sendpack+0x1e8/0xdb0 [ 239.454467][ T8209] ? __pfx_mld_sendpack+0x10/0x10 [ 239.459517][ T8209] mld_ifc_work+0x7d9/0xd90 [ 239.464033][ T8209] ? process_scheduled_works+0x9c6/0x18e0 [ 239.469764][ T8209] process_scheduled_works+0xabe/0x18e0 [ 239.475354][ T8209] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.481343][ T8209] ? assign_work+0x364/0x3d0 [ 239.485952][ T8209] worker_thread+0x870/0xd30 [ 239.490561][ T8209] ? __kthread_parkme+0x169/0x1d0 [ 239.495589][ T8209] ? __pfx_worker_thread+0x10/0x10 [ 239.500700][ T8209] kthread+0x7a9/0x920 [ 239.504772][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.509377][ T8209] ? __pfx_worker_thread+0x10/0x10 [ 239.514510][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.519109][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.523712][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.528311][ T8209] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.533511][ T8209] ? lockdep_hardirqs_on+0x99/0x150 [ 239.538722][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.543321][ T8209] ret_from_fork+0x4b/0x80 [ 239.547743][ T8209] ? __pfx_kthread+0x10/0x10 [ 239.552326][ T8209] ret_from_fork_asm+0x1a/0x30 [ 239.557100][ T8209] [ 239.560424][ T8209] Kernel Offset: disabled [ 239.564833][ T8209] Rebooting in 86400 seconds..