last executing test programs: 1m38.131052389s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m36.71711668s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m35.433012508s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m19.779456532s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m19.088777581s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m18.310289735s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m2.467326125s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 59.929903526s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 58.443688062s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 45.313183971s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 43.661445291s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 42.697541451s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 28.679173998s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 28.055497441s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 27.043388833s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 12.159032394s ago: executing program 3 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 10.745952769s ago: executing program 1 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x1}, &(0x7f0000000080)=0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000002900000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.514988753s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="487c6da2fe1a4bfd2bfce3f146a6a1b754e56b634ca80c15314d7a7a0544ae92484bb1d509c1ab5b320d0b6b219593c866b096a31a51d3e4168ba5ceaa7542ddde244ed9604a32c4f39052eb67f681fd3f1e0402c501cc406eec15b77a437093639789", 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.98122684s ago: executing program 4 (id=2009): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$can_raw(r0, &(0x7f00000005c0), 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/139, 0x8b}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 3.764751322s ago: executing program 4 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40000880}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x0, 0x0, 0xff, 0x0, 0x1, @private2, @remote, 0x7, 0x80, 0x3, 0x10000}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000806050000000000000000000a00000105000100070000000900020073797aae2fdd3350"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) readv(r5, &(0x7f000000a400)=[{&(0x7f000000a300)=""/199, 0xc7}], 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) 3.407507076s ago: executing program 4 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='macvlan1\x00', 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x248, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x184, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x138, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x128, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x114, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "a047738110e68958dc33d9691d646ee6470d3b98b0a6bef97c725d836472d8d3d7402ccb59f64fc458c0deb18db5e7b6090a72cf5cfda7084e6f842131209922ab59a4fdfcfbede310c2a53b5821c95b5e9af66ce9027d070fad7ce350fee9dde3e396676182e7a837748336ea82ea39648d35072dfeb21d389eba6196cc513c2ca397d9c688e943f429b3cd679a33d033dabd7f61a8e952c74c87b945fcf69f13c26ddadd5f6cf82581b9d4b87d108d1d4095a472e94f92d8143596cc8cb211546c8fc834e69b2711b991014986cd6975dab13ac42273e8f4b951d74d0a8deb7aa75cce8f7851f2ee"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x15080000}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x53, 0x7, 0x1, 0x0, "216e35fcbea63553d046a1b92580e076a7046a520b740ae8a6d1dcb3a3097da2321993fe86f7cd3d608bcd0861f1e30e2f67295651d98ef4ff51c694d30e4808c66848e3d1b9c18c65139c70e676ca"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "a36670ae8e51878ecbd60e6b16a1d5cd3a00ba93f04db3e77017377526dabb6103d81af6350c9af5e0eb14f54ccc23d1be123ccdd8a85dfeaac71130980f53b73e2ce8c76019911c66fee6c569f76f5a7fa5b4f3cfd4d79881deebbe64a95af24742d612d4c03f0cd6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xab, 0x6, "6e9d6ce3efcc851db941cb212211baeed8e1799fd400b1389b95431e8c65511b34282aba46d307614b57fc2e40c56c7244d3bba8e18df8aec80cbd42c18d385b9f047e387377931e540b2c9294cdcd22ea5f398383aa4447c5e01228667edf39498db555785f44e4adc6d426061c222d0053ac58718ee1180a5de100dfbec541ffd5bd6a3718f5c35521a7aa8f8127c520d9cdbd6179dda6ed73ec97345af0ff43bd125136b99a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x428}, 0x1, 0x0, 0x0, 0xc000}, 0x81) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r3, 0x1, 0x7c000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.285634476s ago: executing program 4 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r2, 0x1, 0x29, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffa3ea}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x2}}}]}, 0x38}}, 0x8010) r7 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.165387403s ago: executing program 2 (id=2016): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}}}, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.948843653s ago: executing program 4 (id=2017): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r0, 0x8) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x200, 0x70bd2a, 0x25dfdbfe, {0x80, 0x0, 0x20, 0xff, 0x0, 0x3, 0xc8, 0xb, 0x800}, [@RTA_TABLE={0x8, 0xf, 0x1}]}, 0x24}}, 0x0) 2.78907533s ago: executing program 4 (id=2018): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x9, 0x724c}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.653183055s ago: executing program 2 (id=2019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000014c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080026bd7004fddbdf25070000000500350008000000060028000100000005002f000100000008003400ff00000005002e0001000000050030000000000005002900000000000500300000000000"], 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x4008001) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r3, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 1.742105069s ago: executing program 2 (id=2020): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x20) pipe(&(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 1.633077768s ago: executing program 2 (id=2021): r0 = socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001c80)="aa5d337ae4", 0x5}], 0x2, 0x0, 0x0, 0x8000}, 0x80c1) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) recvmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0xfec6, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x3b, 0x10000, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 1.53083067s ago: executing program 2 (id=2022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)='1', 0x1}], 0x1, 0x0, 0x0, 0x804}, 0x2000c957) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="cdd8398bf229adf0eb1960b7d3b06f9d52bc209e73717b349147aa2d7cba4c3b4dca410c1e180ea7362d36982546463d4a5130715130d0c5254e1f862ca88d0006f08d6b1e94199830d0edf86c5c1adf9876be07b992fcf84db82b04c918b4eddece95f0105bc60868b96776e1b67477ef0dbe3c68c55ee25ea3631e72fc8eaa63f83d8b10cc6ce83583d3fbc4acc4838d467dada80ba27e7d59ca9a6205d3390793d28b2f17265ba63ace127e5101fce612d61ea47ae235307b839df46bb42baf8ed88ac5ccce7366803b6f54ec9e3866f0c2631a149635391f25ba731cc1e2535cf044bd3f3dd92e", @ANYRES16=r6, @ANYBLOB="0102000000000000000003002600"], 0x14}, 0x8, 0x3000000000002}, 0x0) 0s ago: executing program 2 (id=2023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bbdc0ac3ae8ccbab1348e1a9904f26e4835fdaac84073f6260651161817e89ecb7e2d30bba16c263440a950b63359135b5030686be114746c99f4150c33561ca319b1fa63e5083eef4a69548bb6b5bc4b2df7f48d72cd0c46b4171610e4f4e4f9f80fa1ab7b032923df52fe229e0e4bf1c900d8367e3f29a6771052c19d05346b6a0f55e"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000001c0004801800018008000100666962001000028008000240000000000900010073797a30000000000900020073791cc68a7a32000000001400000011000100"/112], 0x70}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xffffffffffffffff) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}, 0x10) kernel console output (not intermixed with test programs): nl_net:caif_netlink_parms(): no params data found [ 366.851173][ T24] hid-generic 0005:699A:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 366.964722][T12114] fido_id[12114]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 367.025397][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.347717][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 367.437407][ T5830] Bluetooth: hci0: command tx timeout [ 367.623503][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.637504][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.644875][T12131] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1658'. [ 367.644920][T12033] bridge_slave_0: entered allmulticast mode [ 367.689384][T12033] bridge_slave_0: entered promiscuous mode [ 367.812323][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.826863][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.834334][T12033] bridge_slave_1: entered allmulticast mode [ 367.859931][T12033] bridge_slave_1: entered promiscuous mode [ 368.131924][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.161852][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.181891][ T53] bridge_slave_1: left allmulticast mode [ 368.187744][ T53] bridge_slave_1: left promiscuous mode [ 368.193716][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.225992][ T53] bridge_slave_0: left allmulticast mode [ 368.234089][ T53] bridge_slave_0: left promiscuous mode [ 368.240665][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.243718][ T5830] Bluetooth: hci3: command tx timeout [ 368.261320][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 368.270608][T12144] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 368.278256][T12144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.300586][ T53] bridge_slave_1: left allmulticast mode [ 368.306315][ T53] bridge_slave_1: left promiscuous mode [ 368.324775][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.335533][ T53] bridge_slave_0: left allmulticast mode [ 368.348948][ T53] bridge_slave_0: left promiscuous mode [ 368.354992][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.363532][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 368.441815][T12147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1663'. [ 368.637158][ T5830] Bluetooth: hci1: command tx timeout [ 369.051130][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.062512][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.074798][ T53] bond0 (unregistering): Released all slaves [ 369.232924][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.244443][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.259111][ T53] bond0 (unregistering): Released all slaves [ 369.371997][T12033] team0: Port device team_slave_0 added [ 369.516779][ T5830] Bluetooth: hci0: command tx timeout [ 369.530428][T12033] team0: Port device team_slave_1 added [ 369.565227][T12151] tc_dump_action: action bad kind [ 369.625308][T12033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.634016][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.661585][T12033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.673270][T12151] tc_dump_action: action bad kind [ 369.679138][T12151] tc_dump_action: action bad kind [ 369.684382][T12151] tc_dump_action: action bad kind [ 369.724050][T12033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.731995][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.762043][T12033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.831482][T12151] tc_dump_action: action bad kind [ 369.856898][T12151] tc_dump_action: action bad kind [ 369.923981][T12151] tc_dump_action: action bad kind [ 369.931154][T12151] tc_dump_action: action bad kind [ 369.991858][T12151] tc_dump_action: action bad kind [ 370.031223][T12151] tc_dump_action: action bad kind [ 370.041111][T12151] tc_dump_action: action bad kind [ 370.090748][T12151] tc_dump_action: action bad kind [ 370.114943][T12151] tc_dump_action: action bad kind [ 370.190280][T12151] tc_dump_action: action bad kind [ 370.209095][T12151] tc_dump_action: action bad kind [ 370.214386][T12151] tc_dump_action: action bad kind [ 370.234530][T12033] hsr_slave_0: entered promiscuous mode [ 370.259861][T12033] hsr_slave_1: entered promiscuous mode [ 370.266146][T12033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.275663][T12033] Cannot create hsr debugfs directory [ 370.281641][T12151] tc_dump_action: action bad kind [ 370.306946][T12165] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1668'. [ 370.323417][ T5830] Bluetooth: hci3: command tx timeout [ 370.343774][T12151] tc_dump_action: action bad kind [ 370.376299][ T53] hsr_slave_0: left promiscuous mode [ 370.382855][ T53] hsr_slave_1: left promiscuous mode [ 370.403894][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.411769][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.420980][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.428978][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.442521][ T53] hsr_slave_0: left promiscuous mode [ 370.449964][ T53] hsr_slave_1: left promiscuous mode [ 370.456172][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.464406][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.473351][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.482338][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.531850][ T53] veth1_macvtap: left promiscuous mode [ 370.538089][ T53] veth0_macvtap: left promiscuous mode [ 370.543812][ T53] veth1_vlan: left promiscuous mode [ 370.549696][ T53] veth0_vlan: left promiscuous mode [ 370.565531][ T53] veth1_macvtap: left promiscuous mode [ 370.571762][ T53] veth0_macvtap: left promiscuous mode [ 370.584628][ T53] veth1_vlan: left promiscuous mode [ 370.590712][ T53] veth0_vlan: left promiscuous mode [ 370.717430][ T5830] Bluetooth: hci1: command tx timeout [ 371.280392][ T53] team0 (unregistering): Port device team_slave_1 removed [ 371.340887][ T53] team0 (unregistering): Port device team_slave_0 removed [ 371.609535][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 371.659834][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 372.196948][ T53] team0 (unregistering): Port device team_slave_1 removed [ 372.239813][ T53] team0 (unregistering): Port device team_slave_0 removed [ 372.397159][ T5830] Bluetooth: hci3: command tx timeout [ 372.894096][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 372.903208][T12184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1675'. [ 372.922202][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 372.993755][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 373.005117][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 373.057776][T12014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.100428][T12014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.158782][T12014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.226256][T12014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.414088][T12002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.449573][T12002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.482556][T12002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.603982][T12002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.854455][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.973439][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.990394][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.089241][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.096567][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.157410][T12002] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.205371][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.212662][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.229198][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.236545][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.263604][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.270863][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.373276][T12033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.397024][T12033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.434415][T12033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.467880][T12033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.651405][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1683'. [ 374.839254][T12033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.902665][T12033] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.911428][T12231] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 374.993576][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.000860][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.073726][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.081032][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.204373][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.232216][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.569506][T12002] veth0_vlan: entered promiscuous mode [ 375.606416][T12014] veth0_vlan: entered promiscuous mode [ 375.633102][T12002] veth1_vlan: entered promiscuous mode [ 375.757492][T12014] veth1_vlan: entered promiscuous mode [ 375.833340][T12002] veth0_macvtap: entered promiscuous mode [ 375.860187][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.870754][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 375.884567][T12002] veth1_macvtap: entered promiscuous mode [ 375.964199][T12014] veth0_macvtap: entered promiscuous mode [ 375.988393][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.021516][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.034037][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.049882][T12014] veth1_macvtap: entered promiscuous mode [ 376.072214][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.140050][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.158517][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.173300][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.191777][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.204017][T12014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.213131][T12002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.234912][T12002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.245876][T12002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.255114][T12002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.281312][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.295654][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.315027][T12014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.352853][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 376.465687][T12014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.475290][T12014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.485579][T12014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.495846][T12014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.714986][T12033] veth0_vlan: entered promiscuous mode [ 376.723500][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.745193][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.815487][T12033] veth1_vlan: entered promiscuous mode [ 376.862347][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.890226][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.957554][T12033] veth0_macvtap: entered promiscuous mode [ 377.045935][T12033] veth1_macvtap: entered promiscuous mode [ 377.119721][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.144319][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.175259][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.211923][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.227825][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.239493][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.250614][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.262308][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.284221][T12033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.385571][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.405045][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.415794][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.426912][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.438819][T12033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.479020][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.480847][T12033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.495092][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.505296][T12033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.526333][T12033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.535680][T12033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.633185][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.700622][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 377.861295][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.002634][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.113966][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.213051][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.247838][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.296737][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.304625][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.532114][ T13] bridge_slave_1: left allmulticast mode [ 378.540260][ T13] bridge_slave_1: left promiscuous mode [ 378.546111][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.566577][ T13] bridge_slave_0: left allmulticast mode [ 378.572325][ T13] bridge_slave_0: left promiscuous mode [ 378.585143][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.728607][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.739149][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.759646][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.788203][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.801221][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.283127][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.301100][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.315828][ T13] bond0 (unregistering): Released all slaves [ 379.438233][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.455459][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.466293][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.487423][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.517510][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.763825][ T13] hsr_slave_0: left promiscuous mode [ 379.771146][ T13] hsr_slave_1: left promiscuous mode [ 379.777905][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.785421][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.794802][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.802417][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.823513][ T13] veth1_macvtap: left promiscuous mode [ 379.830051][ T13] veth0_macvtap: left promiscuous mode [ 379.835701][ T13] veth1_vlan: left promiscuous mode [ 379.841840][ T13] veth0_vlan: left promiscuous mode [ 380.559366][ T13] team0 (unregistering): Port device team_slave_1 removed [ 380.624601][ T13] team0 (unregistering): Port device team_slave_0 removed [ 380.703127][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.731796][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.740564][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.756838][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.773296][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.889221][ T5830] Bluetooth: hci0: command tx timeout [ 381.395557][T12309] chnl_net:caif_netlink_parms(): no params data found [ 381.598400][ T5830] Bluetooth: hci1: command tx timeout [ 381.761634][T12318] chnl_net:caif_netlink_parms(): no params data found [ 381.806020][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.813601][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.823815][T12309] bridge_slave_0: entered allmulticast mode [ 381.831542][T12309] bridge_slave_0: entered promiscuous mode [ 381.855661][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.863826][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.872151][T12309] bridge_slave_1: entered allmulticast mode [ 381.881413][T12309] bridge_slave_1: entered promiscuous mode [ 381.973835][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.989995][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.080185][T12309] team0: Port device team_slave_0 added [ 382.091695][T12309] team0: Port device team_slave_1 added [ 382.195847][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.215401][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.231242][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.240688][T12318] bridge_slave_0: entered allmulticast mode [ 382.267691][T12318] bridge_slave_0: entered promiscuous mode [ 382.352277][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.380944][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.394642][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.402455][T12318] bridge_slave_1: entered allmulticast mode [ 382.411340][T12318] bridge_slave_1: entered promiscuous mode [ 382.444792][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.466648][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.511382][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.564467][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.621544][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.635126][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.662912][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.689667][T12377] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1720'. [ 382.699991][T12377] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1720'. [ 382.709326][T12377] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1720'. [ 382.749725][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.833995][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.861261][T12383] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1721'. [ 382.880408][ T5830] Bluetooth: hci3: command tx timeout [ 382.900529][T12383] xfrm0: left promiscuous mode [ 382.905489][T12383] xfrm0: left allmulticast mode [ 382.956975][ T5830] Bluetooth: hci0: command tx timeout [ 383.024766][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.085361][T12336] chnl_net:caif_netlink_parms(): no params data found [ 383.198336][T12309] hsr_slave_0: entered promiscuous mode [ 383.205942][T12309] hsr_slave_1: entered promiscuous mode [ 383.222086][T12318] team0: Port device team_slave_0 added [ 383.280137][T12318] team0: Port device team_slave_1 added [ 383.582310][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.592221][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.619483][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.676692][ T5830] Bluetooth: hci1: command tx timeout [ 383.719718][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.727402][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.754055][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.776386][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.794046][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.811378][T12336] bridge_slave_0: entered allmulticast mode [ 383.819101][T12411] Unsupported ieee802154 address type: 0 [ 383.828577][T12336] bridge_slave_0: entered promiscuous mode [ 383.848358][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.855632][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.875065][T12336] bridge_slave_1: entered allmulticast mode [ 383.883788][T12336] bridge_slave_1: entered promiscuous mode [ 383.900384][T12413] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 384.024977][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.123399][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.172106][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.235099][T12422] netlink: 'syz.2.1733': attribute type 12 has an invalid length. [ 384.470932][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.549178][T12318] hsr_slave_0: entered promiscuous mode [ 384.564336][T12318] hsr_slave_1: entered promiscuous mode [ 384.580059][T12438] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 384.590716][T12318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.600330][T12318] Cannot create hsr debugfs directory [ 384.675021][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.715912][T12336] team0: Port device team_slave_0 added [ 384.800657][T12435] bond3: (slave gretap3): making interface the new active one [ 384.810487][T12435] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 384.823712][T12336] team0: Port device team_slave_1 added [ 384.909005][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.960624][ T5830] Bluetooth: hci3: command tx timeout [ 385.036979][ T5830] Bluetooth: hci0: command tx timeout [ 385.202214][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.221366][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.255934][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.302586][T12459] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 385.313402][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.336162][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.363404][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.703778][T12336] hsr_slave_0: entered promiscuous mode [ 385.713742][T12336] hsr_slave_1: entered promiscuous mode [ 385.720865][T12336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.729222][T12336] Cannot create hsr debugfs directory [ 385.771117][ T55] Bluetooth: hci1: command tx timeout [ 385.933992][ T13] bridge_slave_1: left allmulticast mode [ 385.940716][ T13] bridge_slave_1: left promiscuous mode [ 385.956789][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.975235][ T13] bridge_slave_0: left allmulticast mode [ 385.987056][ T13] bridge_slave_0: left promiscuous mode [ 385.995843][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.005528][T12480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'. [ 386.025365][ T13] bridge_slave_1: left allmulticast mode [ 386.031844][ T13] bridge_slave_1: left promiscuous mode [ 386.037859][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.052019][ T13] bridge_slave_0: left allmulticast mode [ 386.059166][ T13] bridge_slave_0: left promiscuous mode [ 386.064902][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.789400][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.803126][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.814005][ T13] bond0 (unregistering): Released all slaves [ 386.929373][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.942037][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.952432][ T13] bond0 (unregistering): Released all slaves [ 387.038867][ T55] Bluetooth: hci3: command tx timeout [ 387.118329][ T55] Bluetooth: hci0: command tx timeout [ 387.703893][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.713618][T12504] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 387.728562][T12504] bond0: (slave vcan0): Error -95 calling set_mac_address [ 387.759772][T12309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.830287][T12309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.837497][ T55] Bluetooth: hci1: command tx timeout [ 387.907189][T12309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.963574][T12309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.201113][ T13] hsr_slave_0: left promiscuous mode [ 388.212450][ T13] hsr_slave_1: left promiscuous mode [ 388.221297][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.235156][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.245523][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.253753][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.273764][ T13] hsr_slave_0: left promiscuous mode [ 388.280473][ T13] hsr_slave_1: left promiscuous mode [ 388.286902][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.294545][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.303221][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.315364][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.390418][ T13] veth1_macvtap: left promiscuous mode [ 388.397396][ T13] veth0_macvtap: left promiscuous mode [ 388.403134][ T13] veth1_vlan: left promiscuous mode [ 388.409190][ T13] veth0_vlan: left promiscuous mode [ 388.420120][ T13] veth1_macvtap: left promiscuous mode [ 388.425703][ T13] veth0_macvtap: left promiscuous mode [ 388.438339][ T13] veth1_vlan: left promiscuous mode [ 388.447136][ T13] veth0_vlan: left promiscuous mode [ 389.108763][ T13] team0 (unregistering): Port device team_slave_1 removed [ 389.116997][ T55] Bluetooth: hci3: command tx timeout [ 389.168604][ T13] team0 (unregistering): Port device team_slave_0 removed [ 389.996875][ T13] team0 (unregistering): Port device team_slave_1 removed [ 390.042973][ T13] team0 (unregistering): Port device team_slave_0 removed [ 390.535822][T12532] netlink: 4140 bytes leftover after parsing attributes in process `syz.2.1761'. [ 390.910695][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.001743][T12309] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.050750][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.057996][ T9580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.171705][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.179007][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.499598][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1764'. [ 391.599182][T12336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.659410][T12561] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 391.678246][T12336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.761348][T12336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.852424][T12336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.021059][T12309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.039796][T12318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 392.061947][T12571] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1767'. [ 392.091807][T12318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.111927][T12318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.152054][T12318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.314050][T12579] netlink: 'syz.4.1770': attribute type 24 has an invalid length. [ 392.332021][T12581] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 392.341289][T12309] veth0_vlan: entered promiscuous mode [ 392.352476][T12579] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 392.360244][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'. [ 392.393982][T12309] veth1_vlan: entered promiscuous mode [ 392.463389][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.574623][T12309] veth0_macvtap: entered promiscuous mode [ 392.641725][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.662516][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.675869][T12309] veth1_macvtap: entered promiscuous mode [ 392.730188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.737445][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.841168][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.876875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.884225][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.910585][T12309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.927233][T12309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.943409][T12309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.015262][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.022556][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.038887][T12309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.172008][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.179298][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.239497][T12309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.255795][T12309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.280759][T12309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.294000][T12609] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 393.297644][T12309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.312495][T12609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1778'. [ 393.532171][T12609] dummy0: entered promiscuous mode [ 393.538708][T12609] bridge0: port 1(dummy0) entered blocking state [ 393.548662][T12609] bridge0: port 1(dummy0) entered disabled state [ 393.555630][T12609] dummy0: entered allmulticast mode [ 393.571176][T12609] bridge0: port 1(dummy0) entered blocking state [ 393.577800][T12609] bridge0: port 1(dummy0) entered forwarding state [ 393.794497][T12614] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1779'. [ 393.860194][T12318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.881231][T12614] gretap0: entered promiscuous mode [ 394.212378][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.260209][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.354630][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.404026][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.478625][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 394.502169][T12634] netlink: 'syz.4.1783': attribute type 5 has an invalid length. [ 394.524750][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1783'. [ 394.556162][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.584312][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1783'. [ 394.598982][T12634] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1783'. [ 394.623704][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.812811][T12318] veth0_vlan: entered promiscuous mode [ 394.835806][T12318] veth1_vlan: entered promiscuous mode [ 394.920910][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.987969][T12336] veth0_vlan: entered promiscuous mode [ 395.009703][T12318] veth0_macvtap: entered promiscuous mode [ 395.041879][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.065508][T12336] veth1_vlan: entered promiscuous mode [ 395.083351][T12318] veth1_macvtap: entered promiscuous mode [ 395.120267][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.187409][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.199033][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.211143][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.222435][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.238157][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.264803][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.313820][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.328379][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.340604][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.362409][T12336] veth0_macvtap: entered promiscuous mode [ 395.384296][T12318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.394304][T12318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.409627][T12318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.420967][T12318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.440657][T12336] veth1_macvtap: entered promiscuous mode [ 395.489702][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.501538][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.512414][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.524873][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.535104][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.548585][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.560350][T12336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.648701][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.684439][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.695007][T12336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.707035][T12336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.718803][T12336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.765029][T12336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.775760][T12336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.785494][T12336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.795159][T12336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.827697][ T9580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.847521][ T9580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.907425][ T1160] bridge_slave_1: left allmulticast mode [ 395.913147][ T1160] bridge_slave_1: left promiscuous mode [ 395.922849][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.932325][ T1160] bridge_slave_0: left allmulticast mode [ 395.938693][ T1160] bridge_slave_0: left promiscuous mode [ 395.944435][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.329536][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.345002][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.358380][ T1160] bond0 (unregistering): Released all slaves [ 396.405642][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.429650][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.753618][ T9580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.781710][ T9580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.797486][ T55] Bluetooth: hci3: command tx timeout [ 397.131241][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.141291][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.150271][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.172798][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.182224][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.192133][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.202393][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.384797][ T1160] hsr_slave_0: left promiscuous mode [ 397.426821][ T1160] hsr_slave_1: left promiscuous mode [ 397.438826][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.454834][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.471358][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.484252][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.526175][ T1160] veth1_macvtap: left promiscuous mode [ 397.533901][ T1160] veth0_macvtap: left promiscuous mode [ 397.539983][ T1160] veth1_vlan: left promiscuous mode [ 397.545287][ T1160] veth0_vlan: left promiscuous mode [ 398.026139][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 398.071211][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 398.660162][T12675] xt_CT: No such helper "syz1" [ 398.943412][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.953731][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.962405][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.977286][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.989604][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.277594][ T5140] Bluetooth: hci0: command tx timeout [ 399.489218][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.525355][T12661] chnl_net:caif_netlink_parms(): no params data found [ 399.579753][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.681925][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.745272][T12681] chnl_net:caif_netlink_parms(): no params data found [ 399.777960][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.874476][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.882104][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.893700][T12661] bridge_slave_0: entered allmulticast mode [ 399.902154][T12661] bridge_slave_0: entered promiscuous mode [ 399.929743][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.937395][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.945220][T12661] bridge_slave_1: entered allmulticast mode [ 399.953340][T12661] bridge_slave_1: entered promiscuous mode [ 400.043109][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.061994][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.135859][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.146326][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.154587][T12681] bridge_slave_0: entered allmulticast mode [ 400.163547][T12681] bridge_slave_0: entered promiscuous mode [ 400.173343][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.180751][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.188340][T12681] bridge_slave_1: entered allmulticast mode [ 400.195970][T12681] bridge_slave_1: entered promiscuous mode [ 400.220069][T12661] team0: Port device team_slave_0 added [ 400.230067][T12661] team0: Port device team_slave_1 added [ 400.311949][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.328727][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.343214][T12661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.351867][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.378997][T12661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.421279][T12661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.428383][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.455373][T12661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.497538][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.525516][T12681] team0: Port device team_slave_0 added [ 400.540422][T12681] team0: Port device team_slave_1 added [ 400.572994][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.741053][T12661] hsr_slave_0: entered promiscuous mode [ 400.764017][T12661] hsr_slave_1: entered promiscuous mode [ 400.786978][T12705] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 400.805103][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.037383][ T5140] Bluetooth: hci1: command tx timeout [ 401.079553][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.080875][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.089727][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.108006][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.142615][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.152981][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.171135][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.186246][T12716] __nla_validate_parse: 4 callbacks suppressed [ 401.186266][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 401.210035][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.236646][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.254409][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 401.260366][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.272320][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.299260][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.362874][ T5832] Bluetooth: hci0: command tx timeout [ 401.618487][T12681] hsr_slave_0: entered promiscuous mode [ 401.642107][T12681] hsr_slave_1: entered promiscuous mode [ 401.655808][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.674812][T12681] Cannot create hsr debugfs directory [ 401.898757][T12733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.234122][ T1160] bridge_slave_1: left allmulticast mode [ 402.247367][ T1160] bridge_slave_1: left promiscuous mode [ 402.253387][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.277330][ T1160] bridge_slave_0: left allmulticast mode [ 402.283097][ T1160] bridge_slave_0: left promiscuous mode [ 402.290592][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.321944][ T1160] bridge_slave_1: left allmulticast mode [ 402.345650][ T1160] bridge_slave_1: left promiscuous mode [ 402.353851][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.385110][ T1160] bridge_slave_0: left allmulticast mode [ 402.391187][ T1160] bridge_slave_0: left promiscuous mode [ 402.406957][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.117010][ T5832] Bluetooth: hci1: command tx timeout [ 403.196940][ T5832] Bluetooth: hci3: command tx timeout [ 403.438190][ T5832] Bluetooth: hci0: command tx timeout [ 403.518471][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.532958][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.544174][ T1160] bond0 (unregistering): Released all slaves [ 403.718827][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.734817][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.752590][ T1160] bond0 (unregistering): Released all slaves [ 404.137539][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1814'. [ 404.147524][T12768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1814'. [ 404.426171][T12711] chnl_net:caif_netlink_parms(): no params data found [ 404.593588][T12784] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 404.681883][T12783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.695648][T12783] team0: Device macvtap1 is already an upper device of the team interface [ 405.086020][ T1160] hsr_slave_0: left promiscuous mode [ 405.108557][ T1160] hsr_slave_1: left promiscuous mode [ 405.121861][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.130264][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.141246][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.153213][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.166285][ T1160] hsr_slave_0: left promiscuous mode [ 405.176334][ T1160] hsr_slave_1: left promiscuous mode [ 405.182733][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.192824][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.198556][ T5832] Bluetooth: hci1: command tx timeout [ 405.208266][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.215763][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.254660][ T1160] veth1_macvtap: left promiscuous mode [ 405.260405][ T1160] veth0_macvtap: left promiscuous mode [ 405.267707][ T1160] veth1_vlan: left promiscuous mode [ 405.273072][ T1160] veth0_vlan: left promiscuous mode [ 405.277837][ T5832] Bluetooth: hci3: command tx timeout [ 405.285680][ T1160] veth1_macvtap: left promiscuous mode [ 405.291679][ T1160] veth0_macvtap: left promiscuous mode [ 405.297504][ T1160] veth1_vlan: left promiscuous mode [ 405.302840][ T1160] veth0_vlan: left promiscuous mode [ 405.524736][ T5832] Bluetooth: hci0: command tx timeout [ 405.994057][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 406.053903][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 406.991847][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 407.041766][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 407.277069][ T5832] Bluetooth: hci1: command tx timeout [ 407.361711][ T5832] Bluetooth: hci3: command tx timeout [ 407.523034][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.531141][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.539659][T12711] bridge_slave_0: entered allmulticast mode [ 407.547363][T12711] bridge_slave_0: entered promiscuous mode [ 407.555681][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.578339][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.585756][T12711] bridge_slave_1: entered allmulticast mode [ 407.597701][T12711] bridge_slave_1: entered promiscuous mode [ 407.617340][T12661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.641878][T12661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.651295][T12794] delete_channel: no stack [ 407.790645][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.885811][T12661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.918183][T12661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.986344][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.109157][T12711] team0: Port device team_slave_0 added [ 408.132166][T12711] team0: Port device team_slave_1 added [ 408.227745][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.234900][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.264356][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.278372][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.285447][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.314101][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.440697][T12711] hsr_slave_0: entered promiscuous mode [ 408.458790][T12711] hsr_slave_1: entered promiscuous mode [ 408.465140][T12711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.473078][T12711] Cannot create hsr debugfs directory [ 408.632829][T12833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.820056][T12681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.889146][T12681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.898699][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 408.982676][T12681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.064960][T12681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.185389][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'. [ 409.192344][T12661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.265870][T12661] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.328415][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.335642][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.373669][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.380989][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.437875][ T5832] Bluetooth: hci3: command tx timeout [ 409.869989][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.902289][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 409.912180][T12711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.915569][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 409.935287][T12711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.964176][T12711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.967376][T12867] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1838'. [ 409.992770][T12711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.065854][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.109009][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.116237][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.162626][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.169920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.288486][T12661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.360186][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.427919][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.456056][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.463357][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.488978][T12661] veth0_vlan: entered promiscuous mode [ 410.510023][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.517289][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.550448][T12661] veth1_vlan: entered promiscuous mode [ 410.671779][T12661] veth0_macvtap: entered promiscuous mode [ 410.713228][T12661] veth1_macvtap: entered promiscuous mode [ 410.781695][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.838002][T12661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.853845][T12661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.879556][T12661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.891346][T12886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1841'. [ 410.922654][T12661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.950962][T12884] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 410.985835][T12886] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1841'. [ 411.059555][T12661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.078339][T12661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.098068][T12661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.126867][T12661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.272305][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 411.287809][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 411.303309][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.340442][T12681] veth0_vlan: entered promiscuous mode [ 411.375684][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 411.442146][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.446866][T12681] veth1_vlan: entered promiscuous mode [ 411.470395][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.544706][ T9580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.559515][ T9580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.585402][T12711] veth0_vlan: entered promiscuous mode [ 411.627555][T12681] veth0_macvtap: entered promiscuous mode [ 411.658218][T12711] veth1_vlan: entered promiscuous mode [ 411.672129][T12681] veth1_macvtap: entered promiscuous mode [ 411.760881][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.774445][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.785660][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.796685][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.824246][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.861984][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.882258][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.894721][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.926180][T12681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.936348][T12681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.946143][T12681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.959432][T12681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.067878][T12711] veth0_macvtap: entered promiscuous mode [ 412.170539][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.238362][T12711] veth1_macvtap: entered promiscuous mode [ 412.309419][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.389618][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.414019][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.425929][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.444528][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.454823][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.465368][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.477786][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.505619][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.542635][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.554709][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.571141][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.582168][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.594528][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.628483][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.665542][T12711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.674631][T12711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.685015][T12711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.694716][T12711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.721409][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.730198][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.822067][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.836242][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.961677][ T1160] bridge_slave_1: left allmulticast mode [ 412.970428][ T1160] bridge_slave_1: left promiscuous mode [ 412.976296][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.994870][ T1160] bridge_slave_0: left allmulticast mode [ 413.012812][ T1160] bridge_slave_0: left promiscuous mode [ 413.019851][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.360013][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.372698][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.383207][ T1160] bond0 (unregistering): Released all slaves [ 413.396814][ T9580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.409213][ T9580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.538299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.548361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.908594][ T1160] hsr_slave_0: left promiscuous mode [ 413.914763][ T1160] hsr_slave_1: left promiscuous mode [ 413.937619][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.945124][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.977886][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.985412][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.039589][ T1160] veth1_macvtap: left promiscuous mode [ 414.045305][ T1160] veth0_macvtap: left promiscuous mode [ 414.057976][ T1160] veth1_vlan: left promiscuous mode [ 414.063464][ T1160] veth0_vlan: left promiscuous mode [ 414.204954][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.225412][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.236304][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.245323][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.253525][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.893023][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 414.953746][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 415.038943][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.050646][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.061148][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.083344][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.110614][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.869367][T12915] chnl_net:caif_netlink_parms(): no params data found [ 415.994570][T12926] chnl_net:caif_netlink_parms(): no params data found [ 416.047019][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.292864][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.309218][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.321455][ T5832] Bluetooth: hci0: command tx timeout [ 416.335005][T12915] bridge_slave_0: entered allmulticast mode [ 416.368771][T12915] bridge_slave_0: entered promiscuous mode [ 416.441852][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.537855][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.545086][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.578297][T12915] bridge_slave_1: entered allmulticast mode [ 416.586931][T12915] bridge_slave_1: entered promiscuous mode [ 416.680681][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.698763][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.711703][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.724108][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.734480][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.762975][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.853894][T12965] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1858'. [ 416.875720][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.939628][T12926] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.947607][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.954921][T12926] bridge_slave_0: entered allmulticast mode [ 416.963487][T12926] bridge_slave_0: entered promiscuous mode [ 416.996248][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.007159][T12926] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.014660][T12926] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.022306][T12926] bridge_slave_1: entered allmulticast mode [ 417.031048][T12926] bridge_slave_1: entered promiscuous mode [ 417.077238][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.196926][ T5140] Bluetooth: hci1: command tx timeout [ 417.199362][T12915] team0: Port device team_slave_0 added [ 417.219535][T12926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.233001][T12926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.261937][T12915] team0: Port device team_slave_1 added [ 417.379095][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.386117][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.413188][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.427122][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.434176][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.462127][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.513564][T12926] team0: Port device team_slave_0 added [ 417.589476][T12926] team0: Port device team_slave_1 added [ 417.773875][T12926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.785296][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.822482][T12926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.929011][T12915] hsr_slave_0: entered promiscuous mode [ 417.935664][T12915] hsr_slave_1: entered promiscuous mode [ 417.949352][T12926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.964102][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.002289][T12926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.101965][T12991] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1863'. [ 418.282191][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 418.332102][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.367109][T12926] hsr_slave_0: entered promiscuous mode [ 418.373946][T12926] hsr_slave_1: entered promiscuous mode [ 418.381793][T12926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.396038][T12926] Cannot create hsr debugfs directory [ 418.407340][ T5140] Bluetooth: hci0: command tx timeout [ 418.476348][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.564243][T13013] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 418.585747][T13012] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 418.606187][T13013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1868'. [ 418.646383][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.701896][T13009] syzkaller1: entered promiscuous mode [ 418.708142][T13009] syzkaller1: entered allmulticast mode [ 418.806651][ T5140] Bluetooth: hci3: command tx timeout [ 418.816090][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.135983][T12958] chnl_net:caif_netlink_parms(): no params data found [ 419.286826][ T5140] Bluetooth: hci1: command tx timeout [ 419.744666][ T1160] bridge_slave_1: left allmulticast mode [ 419.774495][ T1160] bridge_slave_1: left promiscuous mode [ 419.811905][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.829748][ T1160] bridge_slave_0: left allmulticast mode [ 419.835463][ T1160] bridge_slave_0: left promiscuous mode [ 419.855369][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'. [ 419.860165][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.881019][ T1160] bridge_slave_1: left allmulticast mode [ 419.887011][ T1160] bridge_slave_1: left promiscuous mode [ 419.892736][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.902384][ T1160] bridge_slave_0: left allmulticast mode [ 419.909256][ T1160] bridge_slave_0: left promiscuous mode [ 419.915242][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.918133][T13058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 420.453272][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 420.487635][ T5140] Bluetooth: hci0: command tx timeout [ 420.520837][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'. [ 420.615835][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.634968][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.646714][ T1160] bond0 (unregistering): Released all slaves [ 420.774554][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.786380][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.797264][ T1160] bond0 (unregistering): Released all slaves [ 420.884146][ T5140] Bluetooth: hci3: command tx timeout [ 421.033653][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.040913][T13072] SET target dimension over the limit! [ 421.057488][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.064850][T12958] bridge_slave_0: entered allmulticast mode [ 421.088981][T12958] bridge_slave_0: entered promiscuous mode [ 421.195487][T13076] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 421.227894][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.235493][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.243432][T12958] bridge_slave_1: entered allmulticast mode [ 421.251827][T12958] bridge_slave_1: entered promiscuous mode [ 421.296022][T13076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.357010][ T5140] Bluetooth: hci1: command tx timeout [ 421.405225][T13077] bond4: (slave gretap4): making interface the new active one [ 421.415296][T13077] bond4: (slave gretap4): Enslaving as an active interface with an up link [ 421.448894][T13076] bond4: entered allmulticast mode [ 421.454065][T13076] gretap4: entered allmulticast mode [ 421.479125][T13080] smc: net device bond0 applied user defined pnetid SYZ2 [ 421.504950][T13077] syz.4.1883 (13077) used greatest stack depth: 18944 bytes left [ 421.530142][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.627124][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.733004][T12958] team0: Port device team_slave_0 added [ 421.761080][T12958] team0: Port device team_slave_1 added [ 421.928535][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.935543][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.974224][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.016121][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.037855][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.065690][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.128730][ T1160] hsr_slave_0: left promiscuous mode [ 422.144992][ T1160] hsr_slave_1: left promiscuous mode [ 422.152470][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.161651][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.172341][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.180007][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.206688][ T1160] hsr_slave_0: left promiscuous mode [ 422.216768][ T1160] hsr_slave_1: left promiscuous mode [ 422.222996][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.243494][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.268669][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.276171][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.300204][T13102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1891'. [ 422.371188][ T1160] veth1_macvtap: left promiscuous mode [ 422.382189][ T1160] veth0_macvtap: left promiscuous mode [ 422.389603][ T1160] veth1_vlan: left promiscuous mode [ 422.394973][ T1160] veth0_vlan: left promiscuous mode [ 422.407300][ T1160] veth1_macvtap: left promiscuous mode [ 422.412867][ T1160] veth0_macvtap: left promiscuous mode [ 422.418985][ T1160] veth1_vlan: left promiscuous mode [ 422.424315][ T1160] veth0_vlan: left promiscuous mode [ 422.566933][ T5140] Bluetooth: hci0: command tx timeout [ 422.966607][ T5140] Bluetooth: hci3: command tx timeout [ 423.126082][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 423.171470][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 423.447864][ T5140] Bluetooth: hci1: command tx timeout [ 423.921391][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 423.964189][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 424.533562][T12958] hsr_slave_0: entered promiscuous mode [ 424.542321][T12958] hsr_slave_1: entered promiscuous mode [ 424.550131][T12958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.596919][T12958] Cannot create hsr debugfs directory [ 424.744366][T12926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.830798][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 424.856550][T13114] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1894'. [ 424.865770][T13114] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1894'. [ 424.876096][T12926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.970477][T12926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.992322][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1895'. [ 425.036556][ T5140] Bluetooth: hci3: command tx timeout [ 425.053413][T12926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.132780][T12915] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 425.147089][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 425.150293][T12915] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.175943][T13126] Bluetooth: MGMT ver 1.23 [ 425.219287][T12915] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.241895][T12915] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.653297][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.679835][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.715615][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.735909][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.765084][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.772371][ T9580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.783387][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.790821][ T9580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.813599][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.820860][ T9580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.843007][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.850290][ T9580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.918526][T13137] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 426.079294][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1902'. [ 426.108150][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 426.140087][T12958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.178136][T12958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.190364][T12958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.213810][T12958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.589943][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.641379][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.694453][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.701758][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.779199][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.786469][ T9580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.836192][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.836266][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 426.860295][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.869942][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 427.090527][T12926] veth0_vlan: entered promiscuous mode [ 427.132942][T12926] veth1_vlan: entered promiscuous mode [ 427.165810][T12915] veth0_vlan: entered promiscuous mode [ 427.204785][T12915] veth1_vlan: entered promiscuous mode [ 427.374773][T12926] veth0_macvtap: entered promiscuous mode [ 427.388038][T12915] veth0_macvtap: entered promiscuous mode [ 427.405994][T12926] veth1_macvtap: entered promiscuous mode [ 427.419307][T12915] veth1_macvtap: entered promiscuous mode [ 427.477133][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.489526][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.502442][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.521583][T12958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.542579][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.564143][T12926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.573746][T12926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.583369][T12926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.593052][T12926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.606113][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.618472][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.628588][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.640361][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.652504][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.675054][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.693856][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.705825][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.758821][T12915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.769881][T12915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.782270][T12915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.791936][T12915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.924845][ T9580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.937768][T12958] veth0_vlan: entered promiscuous mode [ 427.943181][ T9580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.988362][T12958] veth1_vlan: entered promiscuous mode [ 428.032707][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.053824][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.065714][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.074388][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.116075][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.139179][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.164895][T12958] veth0_macvtap: entered promiscuous mode [ 428.195451][T12958] veth1_macvtap: entered promiscuous mode [ 428.302706][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.324271][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.351970][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.376523][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.386537][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.403475][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.418969][T12958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.595224][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.619615][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.643434][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.670871][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.682956][T13198] __nla_validate_parse: 3 callbacks suppressed [ 428.682975][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 428.701818][T12958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.715871][T12958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.726163][T12958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.738708][T12958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.747631][T12958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.827374][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.897943][T13198] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 428.905848][T13198] netlink: 'syz.2.1919': attribute type 2 has an invalid length. [ 428.926249][T13200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1920'. [ 428.949069][T13200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1920'. [ 429.085902][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.235290][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.350138][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.432146][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.445229][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.514002][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.541703][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.681832][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.702732][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.712263][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.727589][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.736151][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.882487][ T1160] bridge_slave_1: left allmulticast mode [ 429.888506][ T1160] bridge_slave_1: left promiscuous mode [ 429.894247][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.904679][ T1160] bridge_slave_0: left allmulticast mode [ 429.912468][ T1160] bridge_slave_0: left promiscuous mode [ 429.920136][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.438196][T13212] xt_CT: No such helper "pptp" [ 430.525926][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.541960][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.560412][ T1160] bond0 (unregistering): Released all slaves [ 430.773913][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.787476][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.796248][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.806173][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.817876][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.915805][T13205] chnl_net:caif_netlink_parms(): no params data found [ 430.982150][ T1160] hsr_slave_0: left promiscuous mode [ 430.989189][ T1160] hsr_slave_1: left promiscuous mode [ 430.995108][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.003168][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.012116][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.019926][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.043659][ T1160] veth1_macvtap: left promiscuous mode [ 431.050263][ T1160] veth0_macvtap: left promiscuous mode [ 431.055919][ T1160] veth1_vlan: left promiscuous mode [ 431.061491][ T1160] veth0_vlan: left promiscuous mode [ 431.586034][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 431.637539][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 431.759933][ T5140] Bluetooth: hci0: command tx timeout [ 432.159653][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.170957][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.182138][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.195711][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.205064][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.744012][T13205] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.756785][T13205] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.764158][T13205] bridge_slave_0: entered allmulticast mode [ 432.772745][T13205] bridge_slave_0: entered promiscuous mode [ 432.817355][T13205] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.824677][T13205] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.847254][T13205] bridge_slave_1: entered allmulticast mode [ 432.855231][T13205] bridge_slave_1: entered promiscuous mode [ 432.889024][ T5140] Bluetooth: hci1: command tx timeout [ 433.010230][T13205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.084454][T13205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.180956][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 433.284748][T13205] team0: Port device team_slave_0 added [ 433.348402][T13205] team0: Port device team_slave_1 added [ 433.517483][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 433.639292][T13205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.674730][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.718952][T13205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.734294][T13205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.746987][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.776773][T13205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.828375][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.847530][ T5140] Bluetooth: hci0: command tx timeout [ 433.890846][T13219] chnl_net:caif_netlink_parms(): no params data found [ 433.936275][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.958108][T13233] chnl_net:caif_netlink_parms(): no params data found [ 434.050835][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.102747][T13205] hsr_slave_0: entered promiscuous mode [ 434.110548][T13205] hsr_slave_1: entered promiscuous mode [ 434.134075][T13290] syzkaller0: entered allmulticast mode [ 434.197290][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.317138][ T5140] Bluetooth: hci3: command tx timeout [ 434.425590][T13219] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.434398][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.441997][T13219] bridge_slave_0: entered allmulticast mode [ 434.450767][T13219] bridge_slave_0: entered promiscuous mode [ 434.461775][T13219] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.469267][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.477046][T13219] bridge_slave_1: entered allmulticast mode [ 434.485014][T13219] bridge_slave_1: entered promiscuous mode [ 434.495687][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 434.571757][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.579685][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.587262][T13233] bridge_slave_0: entered allmulticast mode [ 434.595308][T13233] bridge_slave_0: entered promiscuous mode [ 434.667583][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.674770][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.697633][T13233] bridge_slave_1: entered allmulticast mode [ 434.705666][T13233] bridge_slave_1: entered promiscuous mode [ 434.871199][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.899419][T13219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.930566][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.971629][ T5140] Bluetooth: hci1: command tx timeout [ 434.990136][T13219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.059558][T13327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.139291][T13233] team0: Port device team_slave_0 added [ 435.151528][T13219] team0: Port device team_slave_0 added [ 435.170496][T13233] team0: Port device team_slave_1 added [ 435.199263][T13219] team0: Port device team_slave_1 added [ 435.237527][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.317722][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.324724][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.352925][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.383266][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.427766][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.434911][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.461976][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.476251][T13219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.483413][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.510458][T13219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.523976][T13219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.532666][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.559363][T13219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.619030][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.780641][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.918771][ T5140] Bluetooth: hci0: command tx timeout [ 435.970490][T13219] hsr_slave_0: entered promiscuous mode [ 435.981084][T13219] hsr_slave_1: entered promiscuous mode [ 435.994861][T13219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.007271][T13219] Cannot create hsr debugfs directory [ 436.020346][T13233] hsr_slave_0: entered promiscuous mode [ 436.027924][T13233] hsr_slave_1: entered promiscuous mode [ 436.034283][T13233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.043806][T13233] Cannot create hsr debugfs directory [ 436.397541][ T5140] Bluetooth: hci3: command tx timeout [ 436.418352][ T1160] bridge_slave_1: left allmulticast mode [ 436.465673][ T1160] bridge_slave_1: left promiscuous mode [ 436.476036][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.486250][ T1160] bridge_slave_0: left allmulticast mode [ 436.492578][ T1160] bridge_slave_0: left promiscuous mode [ 436.499819][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.514003][ T1160] bridge_slave_1: left allmulticast mode [ 436.520128][ T1160] bridge_slave_1: left promiscuous mode [ 436.525930][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.537331][ T1160] bridge_slave_0: left allmulticast mode [ 436.543290][ T1160] bridge_slave_0: left promiscuous mode [ 436.551143][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.054251][ T5140] Bluetooth: hci1: command tx timeout [ 437.309386][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.321306][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.332391][ T1160] bond0 (unregistering): Released all slaves [ 437.471927][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.484016][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.494582][ T1160] bond0 (unregistering): Released all slaves [ 437.997270][ T5140] Bluetooth: hci0: command tx timeout [ 438.052124][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1953'. [ 438.117844][T13358] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 438.266650][T13205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.337889][T13205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.450733][T13205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.478835][ T5140] Bluetooth: hci3: command tx timeout [ 438.500677][T13205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.634300][ T1160] hsr_slave_0: left promiscuous mode [ 438.640805][ T1160] hsr_slave_1: left promiscuous mode [ 438.647457][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.654969][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.666210][T13378] netlink: 'syz.2.1957': attribute type 1 has an invalid length. [ 438.674648][T13378] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1957'. [ 438.675643][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.706930][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.730447][ T1160] hsr_slave_0: left promiscuous mode [ 438.749061][ T1160] hsr_slave_1: left promiscuous mode [ 438.755218][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.775669][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.787259][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.795456][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.837590][ T1160] veth1_macvtap: left promiscuous mode [ 438.843232][ T1160] veth0_macvtap: left promiscuous mode [ 438.849564][ T1160] veth1_vlan: left promiscuous mode [ 438.854905][ T1160] veth0_vlan: left promiscuous mode [ 438.861762][ T1160] veth1_macvtap: left promiscuous mode [ 438.868268][ T1160] veth0_macvtap: left promiscuous mode [ 438.874226][ T1160] veth1_vlan: left promiscuous mode [ 438.880247][ T1160] veth0_vlan: left promiscuous mode [ 439.121814][ T5140] Bluetooth: hci1: command tx timeout [ 439.634233][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 439.692249][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 440.569415][ T5140] Bluetooth: hci3: command tx timeout [ 440.672131][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 440.719704][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 441.505443][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 441.505634][T13393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1961'. [ 441.554494][T13205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.600079][T13219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.626691][T13219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.688682][T13219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.715606][T13205] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.725526][T13219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.741776][T13403] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1964'. [ 441.801140][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.808389][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.840911][T13403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1964'. [ 441.863147][T13403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1964'. [ 441.882517][T13403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.970118][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.977395][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.194788][T13417] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 442.358918][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 442.462772][T13219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.603514][T13219] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.649281][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 442.663497][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 442.718332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.725586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.882596][T13233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.903924][T13233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.924413][T13233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.944319][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.951608][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.973898][T13233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.055571][T13205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.066367][T13445] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 443.313889][T13205] veth0_vlan: entered promiscuous mode [ 443.393366][T13205] veth1_vlan: entered promiscuous mode [ 443.505393][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.597008][T13455] Bluetooth: MGMT ver 1.23 [ 443.600494][T13205] veth0_macvtap: entered promiscuous mode [ 443.642750][T13205] veth1_macvtap: entered promiscuous mode [ 443.680982][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.744040][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.751425][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.794055][T13205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.812792][T13205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.825729][T13205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.856831][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 443.866208][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 443.894061][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.901343][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.955660][T13205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.004923][T13219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.040991][T13205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.055067][T13205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.065616][T13205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.074521][T13205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.401472][T13219] veth0_vlan: entered promiscuous mode [ 444.414841][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.440361][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.504662][T13490] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 444.516449][T13219] veth1_vlan: entered promiscuous mode [ 444.545573][T13490] batadv0: entered promiscuous mode [ 444.553726][T13490] batadv0: entered allmulticast mode [ 444.565175][T13490] bridge0: port 3(batadv0) entered blocking state [ 444.584319][T13490] bridge0: port 3(batadv0) entered disabled state [ 444.593959][T13492] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 444.610250][T13490] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 444.620535][ T9580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.644096][ T9580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.720812][T13219] veth0_macvtap: entered promiscuous mode [ 444.750527][T13219] veth1_macvtap: entered promiscuous mode [ 444.814484][ T1154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 444.821976][T13219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.824141][ T1154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 444.853428][T13219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.867546][T13219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.888166][T13219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.943763][T13219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.050731][T13219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.077309][T13219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.093844][T13219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.136184][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.207295][T13219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.216107][T13219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.257582][T13219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.276762][T13219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.322552][T13512] veth7: entered allmulticast mode [ 445.440788][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.568571][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.643529][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.683947][T13233] veth0_vlan: entered promiscuous mode [ 445.738783][ T1154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.761342][T13233] veth1_vlan: entered promiscuous mode [ 445.776762][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.784989][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.835190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.851008][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.886245][T13233] veth0_macvtap: entered promiscuous mode [ 445.946830][T13233] veth1_macvtap: entered promiscuous mode [ 446.029455][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.043237][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.053399][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.063964][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.074558][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.085153][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.098251][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.108607][ T1154] bridge_slave_1: left allmulticast mode [ 446.114297][ T1154] bridge_slave_1: left promiscuous mode [ 446.120518][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.131943][ T1154] bridge_slave_0: left allmulticast mode [ 446.138302][ T1154] bridge_slave_0: left promiscuous mode [ 446.144077][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.684277][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.704904][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.720207][ T1154] bond0 (unregistering): Released all slaves [ 446.755963][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.767866][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.777915][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.788642][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.811807][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.871531][T13233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.886278][T13233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.896160][T13233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.910813][T13233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.982513][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.992711][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.004634][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.014596][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.025209][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.187948][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.195934][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.206750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.264284][ T1154] hsr_slave_0: left promiscuous mode [ 447.275234][ T1154] hsr_slave_1: left promiscuous mode [ 447.282989][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.290702][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.298892][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.306715][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.331435][ T1154] veth1_macvtap: left promiscuous mode [ 447.337898][ T1154] veth0_macvtap: left promiscuous mode [ 447.343596][ T1154] veth1_vlan: left promiscuous mode [ 447.349060][ T1154] veth0_vlan: left promiscuous mode [ 448.096324][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 448.230731][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 448.266314][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.287701][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.296226][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.330834][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.340067][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.937309][T13546] netlink: 'syz.4.1996': attribute type 4 has an invalid length. [ 449.004954][T13545] __nla_validate_parse: 6 callbacks suppressed [ 449.004978][T13545] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1996'. [ 449.098016][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.118145][ T5832] Bluetooth: hci0: command tx timeout [ 449.126547][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.672607][T13522] chnl_net:caif_netlink_parms(): no params data found [ 450.096200][T13573] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 450.144045][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2003'. [ 450.210009][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.237400][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.244830][T13522] bridge_slave_0: entered allmulticast mode [ 450.268690][T13522] bridge_slave_0: entered promiscuous mode [ 450.322393][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.346371][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.354030][T13522] bridge_slave_1: entered allmulticast mode [ 450.362159][T13522] bridge_slave_1: entered promiscuous mode [ 450.397223][ T5832] Bluetooth: hci1: command tx timeout [ 450.473540][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.487764][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.586363][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.611902][T13522] team0: Port device team_slave_0 added [ 450.625905][T13522] team0: Port device team_slave_1 added [ 450.671550][T13539] chnl_net:caif_netlink_parms(): no params data found [ 450.703827][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.722198][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.731349][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.758563][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.772019][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.779305][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.808304][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.845197][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.956394][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.009127][T13522] hsr_slave_0: entered promiscuous mode [ 451.015729][T13522] hsr_slave_1: entered promiscuous mode [ 451.091880][T13539] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.100064][T13539] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.108276][T13539] bridge_slave_0: entered allmulticast mode [ 451.115646][T13539] bridge_slave_0: entered promiscuous mode [ 451.154525][T13539] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.162426][T13539] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.170575][T13539] bridge_slave_1: entered allmulticast mode [ 451.178273][T13539] bridge_slave_1: entered promiscuous mode [ 451.197836][ T5832] Bluetooth: hci0: command tx timeout [ 451.296136][T13539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.313861][T13539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.438905][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.471834][T13539] team0: Port device team_slave_0 added [ 451.486393][T13539] team0: Port device team_slave_1 added [ 451.544237][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.631566][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.654712][T13539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.662184][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.689370][T13539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.704720][T13539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.712051][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.738218][T13539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.777697][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.854831][T13539] hsr_slave_0: entered promiscuous mode [ 451.862767][T13539] hsr_slave_1: entered promiscuous mode [ 451.869429][T13539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.877158][T13539] Cannot create hsr debugfs directory [ 452.253377][ T1154] bridge_slave_1: left allmulticast mode [ 452.274332][ T1154] bridge_slave_1: left promiscuous mode [ 452.307169][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.329153][ T1154] bridge_slave_0: left allmulticast mode [ 452.334889][ T1154] bridge_slave_0: left promiscuous mode [ 452.349207][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.382109][ T1154] bridge_slave_1: left allmulticast mode [ 452.398632][ T1154] bridge_slave_1: left promiscuous mode [ 452.404505][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.425184][ T1154] bridge_slave_0: left allmulticast mode [ 452.434599][ T1154] bridge_slave_0: left promiscuous mode [ 452.443234][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.476857][ T5832] Bluetooth: hci1: command tx timeout [ 452.555414][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.574153][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.583782][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.595537][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.606667][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.253750][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.265399][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.275998][ T1154] bond0 (unregistering): Released all slaves [ 453.277854][ T5832] Bluetooth: hci0: command tx timeout [ 453.433278][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.445920][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.457135][ T1154] bond0 (unregistering): Released all slaves [ 453.636389][T13522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.686205][T13522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.882119][T13522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.909414][T13522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.566137][ T5832] Bluetooth: hci1: command tx timeout [ 454.637034][ T5832] Bluetooth: hci3: command tx timeout [ 454.665345][ T1154] hsr_slave_0: left promiscuous mode [ 454.678800][ T1154] hsr_slave_1: left promiscuous mode [ 454.688688][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.702628][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.712210][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.725666][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.735418][T13643] No such timeout policy "syz0" [ 454.744781][ T1154] hsr_slave_0: left promiscuous mode [ 454.752116][ T1154] hsr_slave_1: left promiscuous mode [ 454.758277][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.765756][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.774059][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.781882][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.845822][ T1154] veth1_macvtap: left promiscuous mode [ 454.852477][ T1154] veth0_macvtap: left promiscuous mode [ 454.858566][ T1154] veth1_vlan: left promiscuous mode [ 454.864101][ T1154] veth0_vlan: left promiscuous mode [ 454.871247][ T1154] veth1_macvtap: left promiscuous mode [ 454.880171][ T1154] veth0_macvtap: left promiscuous mode [ 454.885878][ T1154] veth1_vlan: left promiscuous mode [ 454.891384][ T1154] veth0_vlan: left promiscuous mode [ 455.356915][ T5832] Bluetooth: hci0: command tx timeout [ 455.564192][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 455.655251][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 456.637587][ T5832] Bluetooth: hci1: command tx timeout [ 456.693650][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 456.716868][ T5832] Bluetooth: hci3: command tx timeout [ 456.749917][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 457.430923][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 457.440382][ C0] ================================================================== [ 457.440405][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 457.440458][ C0] Read of size 2 at addr ffff88801eff342a by task syz.2.2023/13665 [ 457.440478][ C0] [ 457.440496][ C0] CPU: 0 UID: 0 PID: 13665 Comm: syz.2.2023 Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 457.440526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 457.440540][ C0] Call Trace: [ 457.440549][ C0] [ 457.440558][ C0] dump_stack_lvl+0x189/0x250 [ 457.440600][ C0] ? __virt_addr_valid+0x18c/0x540 [ 457.440639][ C0] ? rcu_is_watching+0x15/0xb0 [ 457.440679][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.440708][ C0] ? rcu_is_watching+0x15/0xb0 [ 457.440738][ C0] ? lock_release+0x4b/0x3e0 [ 457.440774][ C0] ? __virt_addr_valid+0x18c/0x540 [ 457.440800][ C0] ? __virt_addr_valid+0x469/0x540 [ 457.440827][ C0] print_report+0xb4/0x290 [ 457.440856][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 457.440885][ C0] kasan_report+0x118/0x150 [ 457.440927][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 457.440982][ C0] rose_timer_expiry+0x471/0x4b0 [ 457.441013][ C0] call_timer_fn+0x17b/0x5f0 [ 457.441047][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 457.441075][ C0] ? call_timer_fn+0xbe/0x5f0 [ 457.441101][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 457.441134][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.441165][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.441192][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 457.441222][ C0] __run_timer_base+0x61a/0x860 [ 457.441246][ C0] ? ktime_get+0x3e/0x1f0 [ 457.441273][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 457.441296][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 457.441328][ C0] run_timer_softirq+0xb7/0x180 [ 457.441353][ C0] handle_softirqs+0x283/0x870 [ 457.441412][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 457.441434][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 457.441468][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 457.441505][ C0] __irq_exit_rcu+0xca/0x1f0 [ 457.441523][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 457.441547][ C0] irq_exit_rcu+0x9/0x30 [ 457.441563][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 457.441583][ C0] [ 457.441591][ C0] [ 457.441599][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.441622][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 457.441650][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 457.441668][ C0] RSP: 0018:ffffc900042aea80 EFLAGS: 00000293 [ 457.441689][ C0] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: ffff888027158000 [ 457.441706][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.441718][ C0] RBP: ffffc900042aebd0 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 457.441733][ C0] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: dffffc0000000000 [ 457.441749][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 457.441775][ C0] ? console_flush_all+0x13a/0xc40 [ 457.441800][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 457.441829][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.441856][ C0] console_unlock+0xc4/0x270 [ 457.441876][ C0] ? __pfx_console_unlock+0x10/0x10 [ 457.441897][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.441930][ C0] vprintk_emit+0x5b7/0x7a0 [ 457.441950][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 457.441967][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 457.441988][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.442010][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.442030][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.442057][ C0] _printk+0xcf/0x120 [ 457.442079][ C0] ? __pfx__printk+0x10/0x10 [ 457.442111][ C0] __nla_validate_parse+0x2563/0x2d40 [ 457.442158][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.442189][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.442219][ C0] ? stack_trace_save+0x9c/0xe0 [ 457.442249][ C0] nla_validate_array+0xfc/0x260 [ 457.442277][ C0] __nla_validate_parse+0x7e8/0x2d40 [ 457.442313][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.442339][ C0] ? __lock_acquire+0xaac/0xd20 [ 457.442372][ C0] ? nfnl_pernet+0x23/0x240 [ 457.442407][ C0] __nla_parse+0x40/0x60 [ 457.442431][ C0] nfnetlink_rcv+0x10e5/0x2530 [ 457.442476][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 457.442531][ C0] ? skb_clone+0x246/0x3a0 [ 457.442573][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.442594][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.442635][ C0] netlink_unicast+0x758/0x8d0 [ 457.442673][ C0] netlink_sendmsg+0x805/0xb30 [ 457.442699][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.442722][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 457.442745][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.442772][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.442794][ C0] __sock_sendmsg+0x219/0x270 [ 457.442827][ C0] ____sys_sendmsg+0x505/0x830 [ 457.442854][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.442884][ C0] ? import_iovec+0x74/0xa0 [ 457.442914][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 457.442953][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.442999][ C0] ? __fget_files+0x2a/0x420 [ 457.443029][ C0] ? __fget_files+0x3a0/0x420 [ 457.443060][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 457.443087][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.443122][ C0] ? do_syscall_64+0xba/0x210 [ 457.443148][ C0] do_syscall_64+0xf6/0x210 [ 457.443173][ C0] ? clear_bhb_loop+0x45/0xa0 [ 457.443196][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.443215][ C0] RIP: 0033:0x7f019058e969 [ 457.443235][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.443254][ C0] RSP: 002b:00007f01914a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.443273][ C0] RAX: ffffffffffffffda RBX: 00007f01907b6080 RCX: 00007f019058e969 [ 457.443288][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 457.443300][ C0] RBP: 00007f0190610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 457.443313][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.443325][ C0] R13: 0000000000000000 R14: 00007f01907b6080 R15: 00007ffeb774b748 [ 457.443348][ C0] [ 457.443356][ C0] [ 457.443362][ C0] Allocated by task 12926: [ 457.443404][ C0] kasan_save_track+0x3e/0x80 [ 457.443426][ C0] __kasan_kmalloc+0x93/0xb0 [ 457.443448][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 457.443473][ C0] __alloc_workqueue+0x103/0x1b70 [ 457.443501][ C0] alloc_workqueue+0xd4/0x210 [ 457.443524][ C0] wg_newlink+0x29e/0x640 [ 457.443548][ C0] rtnl_newlink_create+0x305/0xaf0 [ 457.443575][ C0] rtnl_newlink+0x16d6/0x1c70 [ 457.443594][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 457.443612][ C0] netlink_rcv_skb+0x219/0x490 [ 457.443631][ C0] netlink_unicast+0x758/0x8d0 [ 457.443660][ C0] netlink_sendmsg+0x805/0xb30 [ 457.443680][ C0] __sock_sendmsg+0x219/0x270 [ 457.443708][ C0] __sys_sendto+0x3bd/0x520 [ 457.443729][ C0] __x64_sys_sendto+0xde/0x100 [ 457.443760][ C0] do_syscall_64+0xf6/0x210 [ 457.443783][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.443802][ C0] [ 457.443808][ C0] Freed by task 13417: [ 457.443818][ C0] kasan_save_track+0x3e/0x80 [ 457.443839][ C0] kasan_save_free_info+0x46/0x50 [ 457.443869][ C0] __kasan_slab_free+0x62/0x70 [ 457.443890][ C0] kfree+0x193/0x440 [ 457.443910][ C0] rcu_core+0xca5/0x1710 [ 457.443943][ C0] handle_softirqs+0x283/0x870 [ 457.443973][ C0] __irq_exit_rcu+0xca/0x1f0 [ 457.443989][ C0] irq_exit_rcu+0x9/0x30 [ 457.444005][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 457.444025][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.444046][ C0] [ 457.444051][ C0] Last potentially related work creation: [ 457.444060][ C0] kasan_save_stack+0x3e/0x60 [ 457.444080][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 457.444110][ C0] call_rcu+0x142/0x990 [ 457.444126][ C0] kthread_worker_fn+0x504/0xb60 [ 457.444148][ C0] kthread+0x70e/0x8a0 [ 457.444169][ C0] ret_from_fork+0x4b/0x80 [ 457.444202][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.444220][ C0] [ 457.444225][ C0] The buggy address belongs to the object at ffff88801eff3400 [ 457.444225][ C0] which belongs to the cache kmalloc-512 of size 512 [ 457.444244][ C0] The buggy address is located 42 bytes inside of [ 457.444244][ C0] freed 512-byte region [ffff88801eff3400, ffff88801eff3600) [ 457.444266][ C0] [ 457.444272][ C0] The buggy address belongs to the physical page: [ 457.444299][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801eff3400 pfn:0x1eff0 [ 457.444345][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 457.444363][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 457.444385][ C0] page_type: f5(slab) [ 457.444404][ C0] raw: 00fff00000000240 ffff88801a041c80 ffffea0000933210 ffffea000080f410 [ 457.444423][ C0] raw: ffff88801eff3400 000000000010000a 00000000f5000000 0000000000000000 [ 457.444443][ C0] head: 00fff00000000240 ffff88801a041c80 ffffea0000933210 ffffea000080f410 [ 457.444463][ C0] head: ffff88801eff3400 000000000010000a 00000000f5000000 0000000000000000 [ 457.444482][ C0] head: 00fff00000000002 ffffea00007bfc01 00000000ffffffff 00000000ffffffff [ 457.444500][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 457.444512][ C0] page dumped because: kasan: bad access detected [ 457.444547][ C0] page_owner tracks the page as allocated [ 457.444574][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 98944017531, free_ts 98855447973 [ 457.444611][ C0] post_alloc_hook+0x1d8/0x230 [ 457.444641][ C0] get_page_from_freelist+0x21ce/0x22b0 [ 457.444671][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 457.444701][ C0] alloc_pages_mpol+0x232/0x4a0 [ 457.444730][ C0] allocate_slab+0x8a/0x3b0 [ 457.444749][ C0] ___slab_alloc+0xbfc/0x1480 [ 457.444802][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 457.444826][ C0] __ipv6_dev_mc_inc+0x420/0xaf0 [ 457.444863][ C0] addrconf_dad_work+0x3d0/0x14b0 [ 457.444892][ C0] process_scheduled_works+0xadb/0x17a0 [ 457.444924][ C0] worker_thread+0x8a0/0xda0 [ 457.444939][ C0] kthread+0x70e/0x8a0 [ 457.444956][ C0] ret_from_fork+0x4b/0x80 [ 457.444973][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.444988][ C0] page last free pid 5838 tgid 5838 stack trace: [ 457.445000][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 457.445024][ C0] __slab_free+0x326/0x400 [ 457.445039][ C0] qlist_free_all+0x9a/0x140 [ 457.445057][ C0] kasan_quarantine_reduce+0x148/0x160 [ 457.445077][ C0] __kasan_slab_alloc+0x22/0x80 [ 457.445100][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 457.445124][ C0] __alloc_skb+0x112/0x2d0 [ 457.445143][ C0] netlink_ack+0x146/0xa50 [ 457.445179][ C0] netlink_rcv_skb+0x2a0/0x490 [ 457.445196][ C0] netlink_unicast+0x758/0x8d0 [ 457.445222][ C0] netlink_sendmsg+0x805/0xb30 [ 457.445240][ C0] __sock_sendmsg+0x219/0x270 [ 457.445266][ C0] __sys_sendto+0x3bd/0x520 [ 457.445308][ C0] __x64_sys_sendto+0xde/0x100 [ 457.445328][ C0] do_syscall_64+0xf6/0x210 [ 457.445349][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.445368][ C0] [ 457.445374][ C0] Memory state around the buggy address: [ 457.445386][ C0] ffff88801eff3300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 457.445400][ C0] ffff88801eff3380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 457.445416][ C0] >ffff88801eff3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.445427][ C0] ^ [ 457.445438][ C0] ffff88801eff3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.445451][ C0] ffff88801eff3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.445469][ C0] ================================================================== [ 457.445497][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 457.445512][ C0] CPU: 0 UID: 0 PID: 13665 Comm: syz.2.2023 Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 457.445536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 457.445548][ C0] Call Trace: [ 457.445556][ C0] [ 457.445565][ C0] dump_stack_lvl+0x99/0x250 [ 457.445596][ C0] ? __asan_memcpy+0x40/0x70 [ 457.445616][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.445643][ C0] ? __pfx__printk+0x10/0x10 [ 457.445670][ C0] panic+0x2db/0x790 [ 457.445702][ C0] ? __pfx_panic+0x10/0x10 [ 457.445730][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 457.445774][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.445795][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.445814][ C0] ? print_memory_metadata+0x314/0x400 [ 457.445843][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 457.445873][ C0] check_panic_on_warn+0x89/0xb0 [ 457.445905][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 457.445941][ C0] end_report+0x78/0x160 [ 457.445966][ C0] kasan_report+0x129/0x150 [ 457.445994][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 457.446028][ C0] rose_timer_expiry+0x471/0x4b0 [ 457.446059][ C0] call_timer_fn+0x17b/0x5f0 [ 457.446087][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 457.446116][ C0] ? call_timer_fn+0xbe/0x5f0 [ 457.446143][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 457.446176][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.446196][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.446218][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 457.446249][ C0] __run_timer_base+0x61a/0x860 [ 457.446275][ C0] ? ktime_get+0x3e/0x1f0 [ 457.446303][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 457.446326][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 457.446358][ C0] run_timer_softirq+0xb7/0x180 [ 457.446384][ C0] handle_softirqs+0x283/0x870 [ 457.446420][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 457.446440][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 457.446472][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 457.446499][ C0] __irq_exit_rcu+0xca/0x1f0 [ 457.446517][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 457.446540][ C0] irq_exit_rcu+0x9/0x30 [ 457.446563][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 457.446585][ C0] [ 457.446592][ C0] [ 457.446601][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.446623][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 457.446644][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 457.446661][ C0] RSP: 0018:ffffc900042aea80 EFLAGS: 00000293 [ 457.446682][ C0] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: ffff888027158000 [ 457.446699][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.446712][ C0] RBP: ffffc900042aebd0 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 457.446728][ C0] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: dffffc0000000000 [ 457.446742][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 457.446769][ C0] ? console_flush_all+0x13a/0xc40 [ 457.446795][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 457.446823][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.446850][ C0] console_unlock+0xc4/0x270 [ 457.446869][ C0] ? __pfx_console_unlock+0x10/0x10 [ 457.446889][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.446945][ C0] vprintk_emit+0x5b7/0x7a0 [ 457.446966][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 457.446982][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 457.447002][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.447024][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.447043][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.447070][ C0] _printk+0xcf/0x120 [ 457.447093][ C0] ? __pfx__printk+0x10/0x10 [ 457.447121][ C0] __nla_validate_parse+0x2563/0x2d40 [ 457.447154][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.447178][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.447210][ C0] ? stack_trace_save+0x9c/0xe0 [ 457.447243][ C0] nla_validate_array+0xfc/0x260 [ 457.447273][ C0] __nla_validate_parse+0x7e8/0x2d40 [ 457.447310][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.447337][ C0] ? __lock_acquire+0xaac/0xd20 [ 457.447371][ C0] ? nfnl_pernet+0x23/0x240 [ 457.447402][ C0] __nla_parse+0x40/0x60 [ 457.447427][ C0] nfnetlink_rcv+0x10e5/0x2530 [ 457.447475][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 457.447531][ C0] ? skb_clone+0x246/0x3a0 [ 457.447568][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.447589][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.447615][ C0] netlink_unicast+0x758/0x8d0 [ 457.447653][ C0] netlink_sendmsg+0x805/0xb30 [ 457.447682][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.447706][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 457.447730][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.447753][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.447776][ C0] __sock_sendmsg+0x219/0x270 [ 457.447810][ C0] ____sys_sendmsg+0x505/0x830 [ 457.447840][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.447871][ C0] ? import_iovec+0x74/0xa0 [ 457.447902][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 457.447941][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.447988][ C0] ? __fget_files+0x2a/0x420 [ 457.448016][ C0] ? __fget_files+0x3a0/0x420 [ 457.448049][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 457.448077][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.448121][ C0] ? do_syscall_64+0xba/0x210 [ 457.448149][ C0] do_syscall_64+0xf6/0x210 [ 457.448174][ C0] ? clear_bhb_loop+0x45/0xa0 [ 457.448199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.448220][ C0] RIP: 0033:0x7f019058e969 [ 457.448240][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.448259][ C0] RSP: 002b:00007f01914a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.448281][ C0] RAX: ffffffffffffffda RBX: 00007f01907b6080 RCX: 00007f019058e969 [ 457.448318][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 457.448332][ C0] RBP: 00007f0190610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 457.448344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.448357][ C0] R13: 0000000000000000 R14: 00007f01907b6080 R15: 00007ffeb774b748 [ 457.448383][ C0] [ 457.448772][ C0] Kernel Offset: disabled