last executing test programs: 1m28.235769485s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 1m27.25629717s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 1m26.560537623s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 1m25.409997823s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 1m10.75463791s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 1m9.874769361s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 1m8.483502006s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 54.912734125s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 54.00818678s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 52.648886484s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 40.667384544s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 38.059679798s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 38.03195213s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 21.621051222s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 20.558608689s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 6.182813827s ago: executing program 4 (id=98): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r2, 0x65, 0x0, 0x0, 0x20b35fff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x44, 0x13, 0x1, 0x0, 0xffffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x44}}, 0x0) 5.067294604s ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd26, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 4.648828087s ago: executing program 0 (id=431): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x3, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20002010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x2, 0x3}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5825d7312b7c914569c1828c55754dba8833d4d7a4b48e8e56f42b21a4f9", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f000000000000000000000000000000000008001700"], 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e8f5c037593cca2086150d964f3810e7cb3eb78379e2f1d3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df532ec9449e5a1c3cbe4943eb376d4f75b2e1d1bc490b5a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e185a629a5595946a1ee0eb82a2cc02f8d234dc47d1baf6"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x17c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb39f18e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44010) 1.697260857s ago: executing program 2 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.542907241s ago: executing program 2 (id=1465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x68}}, 0x0) 1.531839864s ago: executing program 2 (id=1467): r0 = epoll_create1(0x80000) (async) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) (async) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) sendto$inet(r3, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000010}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000600)) 1.364950922s ago: executing program 2 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000004b80)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0xffff, @empty, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffff01}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@tclass={{0x14, 0x29, 0x43, 0x8}}], 0x18}}], 0x2, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000280080004000500000008000300", @ANYRES32=0x0, @ANYBLOB="aee252d9d617d4f4fe5e9fbb8c68867e21b872d7f127e897682e49358a6481d1abf54afc5f05c4c32b9921c7363cf852006a"], 0x44}, 0x1, 0x8}, 0x0) 1.075977853s ago: executing program 3 (id=1470): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xe}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="17000000", @ANYRES16=r5, @ANYBLOB="742309040000000000000001007fd8fad10700000000000800090000000000060002000100000008000a0000000000080017", @ANYRES32=r2, @ANYBLOB="1c75b84051e8cde7f7d4c2e68fafc29500fc2e929d2bed8f9d774a8d"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4004800) 1.036702895s ago: executing program 2 (id=1471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'veth1_to_bridge\x00', &(0x7f0000001a40)=@ethtool_per_queue_op={0x4b, 0x4e}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'rose0\x00', @broadcast}) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0xffce) 842.97153ms ago: executing program 3 (id=1472): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000500810000001c0004800c00010006000000000000000c00019f0f0c0000090000000c0002000000000005000000060001000400000008000500", @ANYRES32=r2], 0x74}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) (async) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7000ffdbdf250900000008000300", @ANYRES32=r10, @ANYBLOB="040028000800090001ac0f0004002800080037000000000004000b000c006e800400020004000100"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x2000c090) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 764.468955ms ago: executing program 2 (id=1473): syz_emit_ethernet(0x14, &(0x7f0000000200)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44850) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000002540)={0x7, 'vlan0\x00', {0xb}, 0x90}) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@remote, @default, @default, @remote, @remote, @default, @rose, @default]}, &(0x7f0000000140)=0x48) sendmsg(r5, &(0x7f0000000740)={&(0x7f0000000280)=@caif=@util={0x25, "ec01c3ad803b5383160e59269be1ac46"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="d2e86802229b00852ae84c6f14d2b999016e24d77c701ee3c7697b9b87a9ab1e57720e6fa72ee59bf3e93facbc277b2831553709f6429bbfba1f02cc7829827eb641d50ccfe47e9b1e357a0ccc0c9d80e7de0113f363bcaaf4df2d3a37733b615d7f6b0bd78c158ec0fbd3465277dc80f3ddf2c12ad546", 0x77}, {&(0x7f00000003c0)="6ea34b8deb2a402f6d83cb6964c1f292fbb5935b503847ff67c20a78ec91ce777f40e28783971d4663090858e87c9e8801c8e864f4c128e880d70fbcff52e42a4ee03385cfa6ad3a10db12111b3816ce4fe4a2c993331a825df502a9cdb3bc708c1e2d40175cc339eda23aa4ca6e7a65ce7ac6880dbe1455c591f7aa9a08ece13b81f6bca61c565b440429aa5230f0076c61700db706af71973f06e6c729cd803eceaf875631459d578e012a05eaeac7bb63015ebdcd1bfa241ead782f2004d929de54c28568232db595398c04e44afe2f0f8c6afa6fa280561534ba4129f5e884a5259889ce6ad6fa3ca0bccd9b483f17", 0xf1}], 0x3, &(0x7f0000000500)=[{0x110, 0x116, 0x910, "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"}, {0x98, 0x0, 0x9, "2e2bdabe2004f12f2fbe33ba7296dcc04c17283cd68f641c3a5e6c2418b8d6314f69d144c4475a88929bd755975ec3336810640efb19107ce581cf84d3a911d9fdfe3071d048104c10fff61c6c9a6b279e36fee16e92493d591d50384a110a99ccc3722af4427eb8dac880c6a8976892de728a8de2645eaef1d4211bfad6169822f92dc3"}, {0x68, 0x115, 0x32, "2d1948ed3dc0e5cc7159b4a7b8895b517f224c42be61885862dc9c484b8c1d36836ca013bd787ad5c5d8bf58b59b6d92d1322a96e5d9930f78bc209c60db24a1814eab2b7cfc5d4a7d67c0c39cf6bb827dfcc915c3ccb9"}], 0x210}, 0x20000040) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x6}}}, 0x24}}, 0x0) 674.387694ms ago: executing program 3 (id=1474): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300), 0x0) 542.715987ms ago: executing program 3 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r1, r1, 0x2f, 0x2024, 0x4, @void, @void, @value}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 427.987573ms ago: executing program 3 (id=1476): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000040)=0x6, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000040)=0x6, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 0s ago: executing program 3 (id=1477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x181}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 81 - 0 [ 245.196003][T11848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.211407][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.248281][T11848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.261369][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'. [ 245.287850][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.295449][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.311887][T11876] bridge_slave_0: entered allmulticast mode [ 245.318984][T11876] bridge_slave_0: entered promiscuous mode [ 245.392021][T11876] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.399272][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.420465][T11876] bridge_slave_1: entered allmulticast mode [ 245.427608][T11876] bridge_slave_1: entered promiscuous mode [ 245.473783][T11848] hsr_slave_0: entered promiscuous mode [ 245.480313][T11848] hsr_slave_1: entered promiscuous mode [ 245.486598][T11848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.499165][T11848] Cannot create hsr debugfs directory [ 245.518899][T11963] netdevsim netdevsim2 »»»»»»: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.528219][T11963] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.537863][T11963] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.547340][T11963] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.585591][T11876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.598910][T11876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.762840][T11876] team0: Port device team_slave_0 added [ 245.789048][T11876] team0: Port device team_slave_1 added [ 245.879918][ T8619] bridge_slave_1: left allmulticast mode [ 245.886692][ T8619] bridge_slave_1: left promiscuous mode [ 245.894218][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.905967][ T8619] bridge_slave_0: left allmulticast mode [ 245.913232][ T8619] bridge_slave_0: left promiscuous mode [ 245.919068][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.936514][ T8619] bridge_slave_1: left allmulticast mode [ 245.951314][ T8619] bridge_slave_1: left promiscuous mode [ 245.957145][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.983400][ T8619] bridge_slave_0: left allmulticast mode [ 245.989144][ T8619] bridge_slave_0: left promiscuous mode [ 245.995640][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.050993][ T5836] Bluetooth: hci0: command tx timeout [ 246.852073][ T5836] Bluetooth: hci3: command tx timeout [ 247.091461][ T5836] Bluetooth: hci1: command tx timeout [ 247.352123][ T8619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.363344][ T8619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.374662][ T8619] bond0 (unregistering): Released all slaves [ 247.503696][ T8619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.515565][ T8619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.526516][ T8619] bond0 (unregistering): Released all slaves [ 247.542999][T11972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 247.554604][T11972] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.562861][T11972] gretap2: entered promiscuous mode [ 247.568097][T11972] gretap2: entered allmulticast mode [ 247.619529][T11876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.637957][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.672174][T11876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.791263][T11876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.798266][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.830579][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1168'. [ 247.847061][T11876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.887118][T11823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.899229][T11823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.954249][T11823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.985502][T11823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.121340][T11990] TCP: TCP_TX_DELAY enabled [ 248.132888][ T5836] Bluetooth: hci0: command tx timeout [ 248.162032][T11876] hsr_slave_0: entered promiscuous mode [ 248.178831][T11876] hsr_slave_1: entered promiscuous mode [ 248.189855][T11876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.206071][T11876] Cannot create hsr debugfs directory [ 248.239507][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 248.250657][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 248.261903][T11994] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 248.288188][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1172'. [ 248.360776][ T5836] block nbd0: Receive control failed (result -107) [ 248.555474][T11999] pimreg3: entered allmulticast mode [ 248.919618][ T8619] hsr_slave_0: left promiscuous mode [ 248.931660][ T5836] Bluetooth: hci3: command tx timeout [ 248.992277][ T8619] hsr_slave_1: left promiscuous mode [ 249.028986][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.056737][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.076703][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.102111][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.125830][ T8619] hsr_slave_0: left promiscuous mode [ 249.138900][ T8619] hsr_slave_1: left promiscuous mode [ 249.171557][ T5836] Bluetooth: hci1: command tx timeout [ 249.177290][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.201525][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.217258][T12025] netlink: 'syz.2.1176': attribute type 10 has an invalid length. [ 249.243543][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.261329][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.348945][ T8619] veth1_macvtap: left promiscuous mode [ 249.367803][ T8619] veth0_macvtap: left promiscuous mode [ 249.374228][ T8619] veth1_vlan: left promiscuous mode [ 249.381986][ T8619] veth0_vlan: left promiscuous mode [ 249.388079][ T8619] veth1_macvtap: left promiscuous mode [ 249.394223][ T8619] veth0_macvtap: left promiscuous mode [ 249.399779][ T8619] veth1_vlan: left promiscuous mode [ 249.406674][ T8619] veth0_vlan: left promiscuous mode [ 249.965426][ T8619] team0 (unregistering): Port device team_slave_1 removed [ 250.019254][ T8619] team0 (unregistering): Port device team_slave_0 removed [ 250.889564][ T8619] team0 (unregistering): Port device team_slave_1 removed [ 250.947484][ T8619] team0 (unregistering): Port device team_slave_0 removed [ 251.027336][ T5836] Bluetooth: hci3: command tx timeout [ 251.407956][T11848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.417813][T11848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.463612][T12025] hsr0: entered promiscuous mode [ 251.488036][T12025] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 251.521605][T12025] bond0: (slave hsr0): Error -95 calling set_mac_address [ 251.550599][T11848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.582419][T11848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.663432][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.842089][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.886239][T12047] netem: change failed [ 251.943012][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.950162][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.994809][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.001984][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.108070][T12057] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 252.172560][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'. [ 252.200139][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'. [ 252.229016][T11848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.275356][T11848] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.325058][T11823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.335541][T11823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.353471][T11876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.432876][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 252.442963][T11876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.453955][T11876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.548812][T12071] team1: entered promiscuous mode [ 252.571300][T12071] 8021q: adding VLAN 0 to HW filter on device team1 [ 252.639599][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.646791][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.687836][T11876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.789934][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.797156][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.959332][T12088] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 252.988252][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 253.036274][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.186483][T11823] veth0_vlan: entered promiscuous mode [ 253.215371][T11876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.240427][T11823] veth1_vlan: entered promiscuous mode [ 253.264164][T11876] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.295931][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.303145][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.323785][T11848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.332391][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.339511][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.395548][T11848] veth0_vlan: entered promiscuous mode [ 253.418583][T11876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.431595][T11876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.478973][T11848] veth1_vlan: entered promiscuous mode [ 253.495412][T11823] veth0_macvtap: entered promiscuous mode [ 253.518779][T11823] veth1_macvtap: entered promiscuous mode [ 253.558129][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.575849][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.588797][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.629445][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.671996][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.704000][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.729323][T11823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.739886][T11823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.759310][T11823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.779769][T11823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.865077][T11848] veth0_macvtap: entered promiscuous mode [ 253.927551][T11848] veth1_macvtap: entered promiscuous mode [ 253.987497][T11876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.001630][T11848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.023460][T11848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.041371][T11848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.071410][T11848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.095972][T11848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.112398][ T8620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.143255][T11848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.161958][ T8620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.165188][T12114] xt_socket: unknown flags 0x4 [ 254.181651][T11848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.193006][T11848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.216274][T11848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.229018][T11848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.295555][T11848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.331355][T11848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.348503][T11848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.371290][T11848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.396940][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.436788][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.686058][T11876] veth0_vlan: entered promiscuous mode [ 254.716295][T12131] xt_policy: neither incoming nor outgoing policy selected [ 254.768614][T12131] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 254.784739][T11876] veth1_vlan: entered promiscuous mode [ 254.885110][ T8619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.894801][T12138] "syz.2.1197" (12138) uses obsolete ecb(arc4) skcipher [ 254.902085][ T8619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.957124][T11876] veth0_macvtap: entered promiscuous mode [ 255.146013][T11876] veth1_macvtap: entered promiscuous mode [ 255.234286][ T8620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.309384][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.320224][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.333688][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.366276][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.378677][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.391379][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.402329][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.415266][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.439537][T11876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.526725][ T8620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.548367][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.561322][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.571831][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.582984][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.594060][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.604889][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.641024][T11876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.703942][ T8620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.720123][T11876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.729070][T11876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.738694][T11876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.747941][T11876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.922877][ T8620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.023150][ T8619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.064695][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073355][ T8619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.111384][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.119262][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.222752][ T8620] bridge_slave_1: left allmulticast mode [ 256.228471][ T8620] bridge_slave_1: left promiscuous mode [ 256.257790][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.304180][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.311049][ T8620] bridge_slave_0: left allmulticast mode [ 256.318759][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.320428][ T8620] bridge_slave_0: left promiscuous mode [ 256.332009][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.339482][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.348039][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.356487][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.365597][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.728549][ T8620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.739525][ T8620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.749880][ T8620] bond0 (unregistering): Released all slaves [ 257.505494][ T8620] hsr_slave_0: left promiscuous mode [ 257.524307][ T8620] hsr_slave_1: left promiscuous mode [ 257.554543][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.577743][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.603570][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.632586][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.655389][ T8620] veth1_macvtap: left promiscuous mode [ 257.680559][ T8620] veth0_macvtap: left promiscuous mode [ 257.686233][ T8620] veth1_vlan: left promiscuous mode [ 257.700433][ T8620] veth0_vlan: left promiscuous mode [ 257.776734][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.791662][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.801322][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.814109][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.825229][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.833609][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.285905][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 258.330353][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 258.451349][ T5145] Bluetooth: hci0: command tx timeout [ 258.664835][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 258.681509][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 258.946291][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.990973][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.017667][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.045957][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.056447][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 259.075498][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.322921][T12170] chnl_net:caif_netlink_parms(): no params data found [ 259.558006][T12170] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.586523][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.611021][T12170] bridge_slave_0: entered allmulticast mode [ 259.627546][T12170] bridge_slave_0: entered promiscuous mode [ 259.697745][T12170] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.711485][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.718780][T12170] bridge_slave_1: entered allmulticast mode [ 259.766654][T12170] bridge_slave_1: entered promiscuous mode [ 259.860084][T12170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.891790][ T5836] Bluetooth: hci1: command tx timeout [ 259.924500][T12170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.009607][T12170] team0: Port device team_slave_0 added [ 260.041457][T12170] team0: Port device team_slave_1 added [ 260.124581][T12170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.133559][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.161277][T12170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.185284][T12170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.193264][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.221905][T12170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.258807][ T8620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.362149][ T8620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.429035][T12170] hsr_slave_0: entered promiscuous mode [ 260.436676][T12170] hsr_slave_1: entered promiscuous mode [ 260.447251][T12170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.455793][T12170] Cannot create hsr debugfs directory [ 260.486726][ T8620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.529290][T12207] chnl_net:caif_netlink_parms(): no params data found [ 260.531866][ T5836] Bluetooth: hci0: command tx timeout [ 260.566110][ T8620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.857339][T12195] chnl_net:caif_netlink_parms(): no params data found [ 260.998493][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.016529][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.038080][T12207] bridge_slave_0: entered allmulticast mode [ 261.057073][T12207] bridge_slave_0: entered promiscuous mode [ 261.114257][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.123076][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.131058][T12207] bridge_slave_1: entered allmulticast mode [ 261.138317][T12207] bridge_slave_1: entered promiscuous mode [ 261.172324][ T5836] Bluetooth: hci3: command tx timeout [ 261.305931][ T8620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.412067][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.779096][ T8620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.798736][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.863101][T12270] geneve2: entered promiscuous mode [ 261.868405][T12270] geneve2: entered allmulticast mode [ 261.933646][ T8620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.971415][ T5836] Bluetooth: hci1: command tx timeout [ 261.989113][T12276] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1216'. [ 262.024746][T12207] team0: Port device team_slave_0 added [ 262.035907][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.048077][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.056634][T12195] bridge_slave_0: entered allmulticast mode [ 262.061285][T12278] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.064643][T12195] bridge_slave_0: entered promiscuous mode [ 262.146280][ T8620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.175273][T12207] team0: Port device team_slave_1 added [ 262.192254][T12280] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1218'. [ 262.213822][T12280] netlink: zone id is out of range [ 262.219015][T12280] netlink: zone id is out of range [ 262.230031][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.238110][T12280] netlink: get zone limit has 8 unknown bytes [ 262.245176][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.253284][T12195] bridge_slave_1: entered allmulticast mode [ 262.271568][T12195] bridge_slave_1: entered promiscuous mode [ 262.303784][T12280] sctp: [Deprecated]: syz.2.1218 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.303784][T12280] Use struct sctp_sack_info instead [ 262.344843][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.367123][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.400423][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.414768][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 262.434161][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 262.465055][T12285] netlink: 'syz.3.1220': attribute type 14 has an invalid length. [ 262.469967][ T7206] IPVS: starting estimator thread 0... [ 262.476036][T12285] netlink: 'syz.3.1220': attribute type 13 has an invalid length. [ 262.500460][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.507652][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.542087][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.565958][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.577688][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.610687][T12289] IPVS: using max 21 ests per chain, 50400 per kthread [ 262.786071][T12207] hsr_slave_0: entered promiscuous mode [ 262.821578][T12207] hsr_slave_1: entered promiscuous mode [ 262.838850][T12207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.851304][T12207] Cannot create hsr debugfs directory [ 262.891309][T12195] team0: Port device team_slave_0 added [ 262.924709][T12170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.972343][T12195] team0: Port device team_slave_1 added [ 262.978751][ T8620] bridge_slave_1: left allmulticast mode [ 262.988291][ T8620] bridge_slave_1: left promiscuous mode [ 263.007309][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.025068][ T8620] bridge_slave_0: left allmulticast mode [ 263.031311][ T8620] bridge_slave_0: left promiscuous mode [ 263.037072][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.054845][T12307] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 263.065433][T12307] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1225'. [ 263.066029][ T8620] bridge_slave_1: left allmulticast mode [ 263.094650][ T8620] bridge_slave_1: left promiscuous mode [ 263.106461][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.118906][ T8620] bridge_slave_0: left allmulticast mode [ 263.125450][ T8620] bridge_slave_0: left promiscuous mode [ 263.132191][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.224665][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 263.237625][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 263.251511][ T5836] Bluetooth: hci3: command tx timeout [ 263.821684][ T8620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.839476][ T8620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.849908][ T8620] bond0 (unregistering): Released all slaves [ 263.988673][ T8620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.999796][ T8620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.010510][ T8620] bond0 (unregistering): Released all slaves [ 264.028139][T12170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.051400][ T5836] Bluetooth: hci1: command tx timeout [ 264.088546][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.098531][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.139239][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.232471][T12310] netlink: 'syz.2.1226': attribute type 25 has an invalid length. [ 264.241802][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 264.255016][T12311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.311713][T12170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.321990][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.329105][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.355906][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.486122][T12170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.632289][T12195] hsr_slave_0: entered promiscuous mode [ 264.639959][T12195] hsr_slave_1: entered promiscuous mode [ 264.649827][T12195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.659529][T12195] Cannot create hsr debugfs directory [ 264.920971][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.111138][T12340] sctp: [Deprecated]: syz.3.1234 (pid 12340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.111138][T12340] Use struct sctp_sack_info instead [ 265.331962][ T5836] Bluetooth: hci3: command tx timeout [ 265.425172][T12170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.439554][T12348] netlink: 'syz.2.1236': attribute type 3 has an invalid length. [ 265.482231][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 265.511535][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 265.584786][T12170] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.604585][ T8620] hsr_slave_0: left promiscuous mode [ 265.620154][ T8620] hsr_slave_1: left promiscuous mode [ 265.636229][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.645226][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.661767][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.669326][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.701775][ T8620] hsr_slave_0: left promiscuous mode [ 265.730467][ T8620] hsr_slave_1: left promiscuous mode [ 265.736800][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.750270][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.763351][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.773581][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.828468][ T8620] veth1_macvtap: left promiscuous mode [ 265.834935][ T8620] veth0_macvtap: left promiscuous mode [ 265.840703][ T8620] veth1_vlan: left promiscuous mode [ 265.846075][ T8620] veth0_vlan: left promiscuous mode [ 265.853420][ T8620] veth1_macvtap: left promiscuous mode [ 265.859059][ T8620] veth0_macvtap: left promiscuous mode [ 265.870361][ T8620] veth1_vlan: left promiscuous mode [ 265.875680][ T8620] veth0_vlan: left promiscuous mode [ 266.131434][ T5836] Bluetooth: hci1: command tx timeout [ 266.497971][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 266.553778][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 267.381774][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 267.411148][ T5836] Bluetooth: hci3: command tx timeout [ 267.435357][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 268.009217][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.016459][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.101241][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.108440][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.374860][T12195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.481206][T12195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.531814][T12195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.562649][T12392] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 268.632002][T12195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.733414][T12400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.772751][T12207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.796459][T12207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.842735][T12207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.869568][T12207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.977334][T12170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.007961][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.129578][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'. [ 269.132414][T12195] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.174954][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.182087][ T8620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.225296][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.232488][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.311100][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.347227][T12170] veth0_vlan: entered promiscuous mode [ 269.378714][T12207] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.406861][T12170] veth1_vlan: entered promiscuous mode [ 269.436007][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.443207][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.503540][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.510758][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.598739][T12170] veth0_macvtap: entered promiscuous mode [ 269.662385][T12170] veth1_macvtap: entered promiscuous mode [ 269.673102][T12195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.730159][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.751501][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.772250][T12170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.812998][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.829229][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.844333][T12170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.854577][T12170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.864498][T12170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.873846][T12170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.883211][T12170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.994999][T12195] veth0_vlan: entered promiscuous mode [ 270.014002][T12195] veth1_vlan: entered promiscuous mode [ 270.062009][T12437] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 270.078055][T12207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.131863][T12437] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 270.171339][ T8622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.189220][ T8622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.191294][T12195] veth0_macvtap: entered promiscuous mode [ 270.245297][T12195] veth1_macvtap: entered promiscuous mode [ 270.255526][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.264256][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.293550][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.317179][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.331397][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.349626][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.367669][T12195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.403840][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.440218][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.470778][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.485647][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.507451][T12195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.593693][T12195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.611038][T12195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.620219][T12195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.629036][T12195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.758991][T12207] veth0_vlan: entered promiscuous mode [ 270.788886][T12207] veth1_vlan: entered promiscuous mode [ 270.795194][ T8620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.824524][ T8620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.914194][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.947747][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.972840][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.003232][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.056082][T12207] veth0_macvtap: entered promiscuous mode [ 271.124456][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.172646][T12207] veth1_macvtap: entered promiscuous mode [ 271.232839][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.257184][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.268162][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.278335][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.294373][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.305057][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.322647][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.334387][T12207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.344999][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.355666][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.366267][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.377007][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.387129][T12207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.397643][T12207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.409215][T12207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.419784][T12207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.428771][T12207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.441413][T12207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.450508][T12207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.595812][ T7153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.608147][ T7153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.621752][ T35] bridge_slave_1: left allmulticast mode [ 271.627455][ T35] bridge_slave_1: left promiscuous mode [ 271.637508][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.646038][ T35] bridge_slave_0: left allmulticast mode [ 271.653820][ T35] bridge_slave_0: left promiscuous mode [ 271.659631][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.062190][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.071642][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.081119][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.099962][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.110288][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.136864][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.343406][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.354601][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.367835][ T35] bond0 (unregistering): Released all slaves [ 272.403331][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.415673][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.757832][T12454] chnl_net:caif_netlink_parms(): no params data found [ 272.898891][ T35] hsr_slave_0: left promiscuous mode [ 272.914817][ T35] hsr_slave_1: left promiscuous mode [ 272.924564][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.937120][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.946594][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.960246][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.994139][ T35] veth1_macvtap: left promiscuous mode [ 272.999848][ T35] veth0_macvtap: left promiscuous mode [ 273.015926][ T35] veth1_vlan: left promiscuous mode [ 273.025362][ T35] veth0_vlan: left promiscuous mode [ 273.202563][T12465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1258'. [ 273.257361][T12467] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 273.433193][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.463997][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.485221][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.493606][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.505339][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.513363][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.857055][ T35] team0 (unregistering): Port device team_slave_1 removed [ 273.909039][ T35] team0 (unregistering): Port device team_slave_0 removed [ 274.213747][ T5836] Bluetooth: hci0: command tx timeout [ 274.447084][T12454] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.457058][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.493071][T12454] bridge_slave_0: entered allmulticast mode [ 274.511720][T12454] bridge_slave_0: entered promiscuous mode [ 274.530050][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.549502][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.564909][T12454] bridge_slave_1: entered allmulticast mode [ 274.572853][T12454] bridge_slave_1: entered promiscuous mode [ 274.688400][T12454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.728722][T12454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.922959][T12454] team0: Port device team_slave_0 added [ 274.973072][T12454] team0: Port device team_slave_1 added [ 275.056199][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.066221][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.080577][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.088569][T12454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.096498][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.123158][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.130327][T12454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.142840][T12486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1263'. [ 275.143071][T12454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.158991][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.186996][ T5145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.194270][T12454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.206278][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.229941][T12486] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1263'. [ 275.287458][T12454] hsr_slave_0: entered promiscuous mode [ 275.298267][T12454] hsr_slave_1: entered promiscuous mode [ 275.306150][T12454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.314216][T12454] Cannot create hsr debugfs directory [ 275.570349][ T5145] Bluetooth: hci1: command tx timeout [ 275.585420][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.673611][T12490] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 275.739581][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.842687][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.957776][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.033320][T12497] unknown channel width for channel at 909000KHz? [ 276.291342][ T5145] Bluetooth: hci0: command tx timeout [ 276.360920][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.461916][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.635029][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.665815][T12471] chnl_net:caif_netlink_parms(): no params data found [ 276.799718][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.859517][T12483] chnl_net:caif_netlink_parms(): no params data found [ 276.957622][T12454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.004336][T12454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.084558][T12454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.105630][T12454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.168240][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.176646][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.185051][T12471] bridge_slave_0: entered allmulticast mode [ 277.192261][T12471] bridge_slave_0: entered promiscuous mode [ 277.199935][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.207712][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.215415][T12471] bridge_slave_1: entered allmulticast mode [ 277.225651][T12471] bridge_slave_1: entered promiscuous mode [ 277.250622][ T5145] Bluetooth: hci3: command tx timeout [ 277.298111][T12543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1278'. [ 277.327380][ T35] bridge_slave_1: left allmulticast mode [ 277.335201][ T35] bridge_slave_1: left promiscuous mode [ 277.342291][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.353161][ T35] bridge_slave_0: left allmulticast mode [ 277.358907][ T35] bridge_slave_0: left promiscuous mode [ 277.365520][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.378381][ T35] bridge_slave_1: left allmulticast mode [ 277.385040][ T35] bridge_slave_1: left promiscuous mode [ 277.392079][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.404342][ T35] bridge_slave_0: left allmulticast mode [ 277.410095][ T35] bridge_slave_0: left promiscuous mode [ 277.416541][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.650754][ T5145] Bluetooth: hci1: command tx timeout [ 278.083973][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.096014][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.106807][ T35] bond0 (unregistering): Released all slaves [ 278.245517][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.257477][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.268335][ T35] bond0 (unregistering): Released all slaves [ 278.287925][T12543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1278'. [ 278.315967][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.349792][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.385715][ T5145] Bluetooth: hci0: command tx timeout [ 278.412394][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.419712][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.427507][T12483] bridge_slave_0: entered allmulticast mode [ 278.435056][T12483] bridge_slave_0: entered promiscuous mode [ 278.533011][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.540646][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.547940][T12483] bridge_slave_1: entered allmulticast mode [ 278.555558][T12483] bridge_slave_1: entered promiscuous mode [ 278.588342][T12471] team0: Port device team_slave_0 added [ 278.613446][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.657245][T12471] team0: Port device team_slave_1 added [ 278.702026][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.748482][T12554] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1281'. [ 278.797600][T12483] team0: Port device team_slave_0 added [ 278.807330][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.820595][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.870256][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.893502][T12483] team0: Port device team_slave_1 added [ 278.932605][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.939756][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.966751][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.004866][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.012654][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.039480][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.084593][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.099726][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.126712][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.239429][T12563] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 279.253930][T12562] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 279.278492][T12483] hsr_slave_0: entered promiscuous mode [ 279.286486][T12483] hsr_slave_1: entered promiscuous mode [ 279.294864][T12483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.303852][T12483] Cannot create hsr debugfs directory [ 279.332095][ T5145] Bluetooth: hci3: command tx timeout [ 279.361687][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 279.376295][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 279.424302][T12471] hsr_slave_0: entered promiscuous mode [ 279.466402][T12471] hsr_slave_1: entered promiscuous mode [ 279.484790][T12471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.501277][T12471] Cannot create hsr debugfs directory [ 279.692084][ T35] hsr_slave_0: left promiscuous mode [ 279.697902][ T35] hsr_slave_1: left promiscuous mode [ 279.704719][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.718599][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.727029][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.740691][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.741228][ T5145] Bluetooth: hci1: command tx timeout [ 279.757761][ T35] hsr_slave_0: left promiscuous mode [ 279.769958][ T35] hsr_slave_1: left promiscuous mode [ 279.776694][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.784465][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.794630][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.802639][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.839834][ T35] veth1_macvtap: left promiscuous mode [ 279.845665][ T35] veth0_macvtap: left promiscuous mode [ 279.851404][ T35] veth1_vlan: left promiscuous mode [ 279.856794][ T35] veth0_vlan: left promiscuous mode [ 279.863708][ T35] veth1_macvtap: left promiscuous mode [ 279.869419][ T35] veth0_macvtap: left promiscuous mode [ 279.875307][ T35] veth1_vlan: left promiscuous mode [ 279.880890][ T35] veth0_vlan: left promiscuous mode [ 280.455672][ T5145] Bluetooth: hci0: command tx timeout [ 280.627810][ T35] team0 (unregistering): Port device team_slave_1 removed [ 280.684361][ T35] team0 (unregistering): Port device team_slave_0 removed [ 281.424759][ T5145] Bluetooth: hci3: command tx timeout [ 281.589330][ T35] team0 (unregistering): Port device team_slave_1 removed [ 281.636779][ T35] team0 (unregistering): Port device team_slave_0 removed [ 281.816561][ T5145] Bluetooth: hci1: command tx timeout [ 282.167543][T12583] veth0: entered promiscuous mode [ 282.238421][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.257720][T12583] veth0: left promiscuous mode [ 282.481911][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.490124][T12591] unknown channel width for channel at 909000KHz? [ 282.502291][T12591] unknown channel width for channel at 909000KHz? [ 282.528082][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.535291][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.541782][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 282.561211][T12591] unknown channel width for channel at 909000KHz? [ 282.631557][T12594] macsec0: entered promiscuous mode [ 282.644687][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.651954][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.035159][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.096211][T12454] veth0_vlan: entered promiscuous mode [ 283.137046][T12454] veth1_vlan: entered promiscuous mode [ 283.253607][T12454] veth0_macvtap: entered promiscuous mode [ 283.301493][T12600] netlink: 'syz.2.1293': attribute type 5 has an invalid length. [ 283.309283][T12600] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1293'. [ 283.348414][T12454] veth1_macvtap: entered promiscuous mode [ 283.407937][T12600] bridge3: entered promiscuous mode [ 283.417839][T12600] bridge3: entered allmulticast mode [ 283.486199][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.488066][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'. [ 283.508220][ T5145] Bluetooth: hci3: command tx timeout [ 283.510474][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.569422][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.607322][T12483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.656364][T12483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.776131][T12618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.781865][T12483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.787059][T12618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.821138][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.833038][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.863269][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.887901][T12483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.922857][T12454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.950727][T12454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.967378][T12454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.978261][T12454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.131502][T12627] tipc: Enabling of bearer rejected, failed to enable media [ 284.143064][T12471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.154160][T12471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.171376][T12471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.188441][T12627] tipc: Enabling of bearer rejected, failed to enable media [ 284.241046][T12471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.344557][T12635] xt_ipcomp: unknown flags B [ 284.369478][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.384113][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.452050][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.459959][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.495459][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.573971][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.618081][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.625279][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.668606][T12483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.681883][T12483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.716178][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.723412][ T8619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.870002][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.944977][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.961198][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.989271][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.996469][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.018169][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.025362][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.212047][ T8619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.484248][T12483] veth0_vlan: entered promiscuous mode [ 285.509941][T12483] veth1_vlan: entered promiscuous mode [ 285.526613][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.569149][T12483] veth0_macvtap: entered promiscuous mode [ 285.604198][ T8619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.627710][T12483] veth1_macvtap: entered promiscuous mode [ 285.644968][T12471] veth0_vlan: entered promiscuous mode [ 285.659682][T12471] veth1_vlan: entered promiscuous mode [ 285.684364][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.696822][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.708471][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.720748][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.733287][T12483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.744749][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.756541][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.767008][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.778231][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.791931][T12483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.808294][T12483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.818940][T12483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.828401][T12483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.837964][T12483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.868499][T12471] veth0_macvtap: entered promiscuous mode [ 285.943955][ T8619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.997311][T12471] veth1_macvtap: entered promiscuous mode [ 286.103033][ T8619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.131969][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.143092][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.153318][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.163927][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.173899][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.184640][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.195786][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.205482][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.216675][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.226887][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.237584][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.247760][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.258354][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.269397][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.326867][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.337499][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.345341][T12471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.345377][T12471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.345403][T12471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.345426][T12471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.372068][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.377836][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.385697][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.411294][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.418959][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.426787][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.494075][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.502633][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.588615][ T8617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.618960][ T8617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.751988][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.769886][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.796771][ T8619] bridge_slave_1: left allmulticast mode [ 286.835394][ T8619] bridge_slave_1: left promiscuous mode [ 286.873935][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.941909][ T8619] bridge_slave_0: left allmulticast mode [ 286.947774][ T8619] bridge_slave_0: left promiscuous mode [ 286.963366][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.450044][ T8619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.463086][ T8619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.474012][ T8619] bond0 (unregistering): Released all slaves [ 288.447993][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.471103][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.491598][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.507563][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.532009][ T5145] Bluetooth: hci0: command tx timeout [ 288.538244][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.547960][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.802652][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.827255][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.850131][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.875648][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.894808][ T5145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.915711][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.597617][T12711] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 290.612078][ T5145] Bluetooth: hci0: command tx timeout [ 290.617672][ T5836] Bluetooth: hci1: command tx timeout [ 290.949545][ T8619] hsr_slave_0: left promiscuous mode [ 290.967882][ T8619] hsr_slave_1: left promiscuous mode [ 290.988410][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.997550][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.028705][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.038192][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.076562][ T8619] veth1_macvtap: left promiscuous mode [ 291.093315][ T8619] veth0_macvtap: left promiscuous mode [ 291.099014][ T8619] veth1_vlan: left promiscuous mode [ 291.118722][ T8619] veth0_vlan: left promiscuous mode [ 291.126880][T12735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1323'. [ 291.136295][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 291.652357][ T8619] team0 (unregistering): Port device team_slave_1 removed [ 291.712030][ T8619] team0 (unregistering): Port device team_slave_0 removed [ 291.971987][ T5836] Bluetooth: hci3: command tx timeout [ 292.461804][T12670] chnl_net:caif_netlink_parms(): no params data found [ 292.474067][T12715] chnl_net:caif_netlink_parms(): no params data found [ 292.698124][ T5836] Bluetooth: hci0: command tx timeout [ 292.701639][ T5145] Bluetooth: hci1: command tx timeout [ 292.858146][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.885465][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.899875][T12670] bridge_slave_0: entered allmulticast mode [ 292.917874][T12670] bridge_slave_0: entered promiscuous mode [ 292.932223][T12764] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.933537][T12715] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.957042][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.966026][T12715] bridge_slave_0: entered allmulticast mode [ 292.976931][T12715] bridge_slave_0: entered promiscuous mode [ 292.993204][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.011548][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.018815][T12670] bridge_slave_1: entered allmulticast mode [ 293.033147][T12670] bridge_slave_1: entered promiscuous mode [ 293.046597][T12766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.056966][T12715] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.064583][T12715] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.073555][T12715] bridge_slave_1: entered allmulticast mode [ 293.082300][T12715] bridge_slave_1: entered promiscuous mode [ 293.201573][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.250556][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.273872][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.296826][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.426785][T12670] team0: Port device team_slave_0 added [ 293.445611][T12670] team0: Port device team_slave_1 added [ 293.485791][T12784] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1337'. [ 293.510025][T12715] team0: Port device team_slave_0 added [ 293.530068][T12715] team0: Port device team_slave_1 added [ 293.660904][ T8617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.725695][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.740512][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.787668][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.805339][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.812910][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.842719][T12794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1339'. [ 293.853709][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.882214][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.900468][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.942935][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.968926][ T8617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.985377][T12707] chnl_net:caif_netlink_parms(): no params data found [ 294.047848][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.051986][ T5145] Bluetooth: hci3: command tx timeout [ 294.055926][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.126643][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.181625][ T8617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.265459][T12670] hsr_slave_0: entered promiscuous mode [ 294.273360][T12670] hsr_slave_1: entered promiscuous mode [ 294.279725][T12670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.288066][T12670] Cannot create hsr debugfs directory [ 294.329445][ T8617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.352206][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 294.379703][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 294.418020][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 294.433977][T12715] hsr_slave_0: entered promiscuous mode [ 294.445139][T12715] hsr_slave_1: entered promiscuous mode [ 294.457029][T12715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.465486][T12715] Cannot create hsr debugfs directory [ 294.577732][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.585398][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.593467][T12707] bridge_slave_0: entered allmulticast mode [ 294.600714][T12707] bridge_slave_0: entered promiscuous mode [ 294.659339][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.671702][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.678935][T12707] bridge_slave_1: entered allmulticast mode [ 294.686324][T12707] bridge_slave_1: entered promiscuous mode [ 294.775520][ T5145] Bluetooth: hci1: command tx timeout [ 294.780773][ T5836] Bluetooth: hci0: command tx timeout [ 294.788645][T12816] Bluetooth: MGMT ver 1.23 [ 294.803266][ T8617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.834460][T12707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.844045][T12816] tipc: Started in network mode [ 294.851399][T12816] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 294.863431][T12816] tipc: Enabling of bearer rejected, failed to enable media [ 294.893084][T12707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.954352][T12818] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 294.963540][ T8617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.026286][T12707] team0: Port device team_slave_0 added [ 295.172958][ T8617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.194713][T12707] team0: Port device team_slave_1 added [ 295.296171][ T8617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.346434][T12707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.359362][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.387126][T12707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.430113][T12707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.439281][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.478416][T12707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.676886][ T8617] bridge_slave_1: left allmulticast mode [ 295.683868][ T8617] bridge_slave_1: left promiscuous mode [ 295.689633][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.716106][ T8617] bridge_slave_0: left allmulticast mode [ 295.722787][ T8617] bridge_slave_0: left promiscuous mode [ 295.737295][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.774462][ T8617] bridge_slave_1: left allmulticast mode [ 295.785201][ T8617] bridge_slave_1: left promiscuous mode [ 295.797846][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.818973][ T8617] bridge_slave_0: left allmulticast mode [ 295.843757][ T8617] bridge_slave_0: left promiscuous mode [ 295.849737][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.130298][ T5836] Bluetooth: hci3: command tx timeout [ 296.851081][ T5836] Bluetooth: hci1: command tx timeout [ 296.924871][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.938036][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.949041][ T8617] bond0 (unregistering): Released all slaves [ 297.116033][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.128035][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.139261][ T8617] bond0 (unregistering): Released all slaves [ 297.189585][T12707] hsr_slave_0: entered promiscuous mode [ 297.231364][T12707] hsr_slave_1: entered promiscuous mode [ 297.237768][T12707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.246596][T12707] Cannot create hsr debugfs directory [ 297.603595][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 297.754094][T12897] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 297.814282][T12899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1364'. [ 297.848014][T12897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.103968][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 298.211533][ T5836] Bluetooth: hci3: command tx timeout [ 298.227237][T12715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.243691][ T8617] hsr_slave_0: left promiscuous mode [ 298.249659][ T8617] hsr_slave_1: left promiscuous mode [ 298.257459][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.266605][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.274998][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.284205][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.297737][ T8617] hsr_slave_0: left promiscuous mode [ 298.305888][ T8617] hsr_slave_1: left promiscuous mode [ 298.317515][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.325774][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.334192][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.342893][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.379134][ T8617] veth1_macvtap: left promiscuous mode [ 298.385249][ T8617] veth0_macvtap: left promiscuous mode [ 298.392014][ T8617] veth1_vlan: left promiscuous mode [ 298.397338][ T8617] veth0_vlan: left promiscuous mode [ 298.404168][ T8617] veth1_macvtap: left promiscuous mode [ 298.409693][ T8617] veth0_macvtap: left promiscuous mode [ 298.415809][ T8617] veth1_vlan: left promiscuous mode [ 298.426297][ T8617] veth0_vlan: left promiscuous mode [ 299.067828][ T8617] team0 (unregistering): Port device team_slave_1 removed [ 299.120016][ T8617] team0 (unregistering): Port device team_slave_0 removed [ 299.998436][ T8617] team0 (unregistering): Port device team_slave_1 removed [ 300.058239][ T8617] team0 (unregistering): Port device team_slave_0 removed [ 300.553649][T12715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.612755][T12910] veth1_vlan: left allmulticast mode [ 300.619794][T12910] macvlan0: left promiscuous mode [ 300.626002][T12910] macvlan0: left allmulticast mode [ 300.643201][T12715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.713627][T12715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.931655][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.977294][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.997118][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.004311][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.023789][T12922] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1372'. [ 301.059630][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.066852][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.204986][T12707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.232205][T12707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.268195][T12707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.310670][T12707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.405466][T12670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.441646][T12670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.464002][T12670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.508022][T12670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.651792][T12707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.703820][T12707] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.752651][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.759869][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.794475][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.801682][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.823091][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.839666][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.876653][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.907179][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.914412][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.942378][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.949530][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.374109][T12715] veth0_vlan: entered promiscuous mode [ 302.392752][T12715] veth1_vlan: entered promiscuous mode [ 302.415789][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.449314][T12707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.470408][T12970] Dead loop on virtual device ipvlan1, fix it urgently! [ 302.492742][T12715] veth0_macvtap: entered promiscuous mode [ 302.509491][T12715] veth1_macvtap: entered promiscuous mode [ 302.559749][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.572231][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.598759][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.624419][T12670] veth0_vlan: entered promiscuous mode [ 302.638617][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.657809][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.669974][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.695931][T12707] veth0_vlan: entered promiscuous mode [ 302.713780][T12715] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.739096][T12715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.748998][T12715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.769029][T12715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.812094][T12670] veth1_vlan: entered promiscuous mode [ 302.818981][T12707] veth1_vlan: entered promiscuous mode [ 302.946066][ T7153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.957460][ T7153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.967864][T12707] veth0_macvtap: entered promiscuous mode [ 302.975482][T12670] veth0_macvtap: entered promiscuous mode [ 302.984423][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'. [ 303.033489][T12707] veth1_macvtap: entered promiscuous mode [ 303.050874][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.051831][T12670] veth1_macvtap: entered promiscuous mode [ 303.069958][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.158570][T12707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.173034][T12707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.183928][T12707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.195153][T12707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.207696][T12707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.267509][T12970] syz.3.1380 (12970) used greatest stack depth: 6928 bytes left [ 303.312439][T12707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.341333][T12707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.365253][T12707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.376947][T12707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.389279][T12707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.402587][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.415760][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.445624][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.467176][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.478814][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.491306][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.502721][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.514841][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.543213][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.554328][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.565070][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.583082][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.596006][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.607966][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.643711][T12707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.664462][T12707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.684756][T12707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.704372][T12707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.730663][T12670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.739415][T12670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.779052][T12670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.817665][T12670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.029874][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.044766][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.132102][ T8620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.152368][ T8620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.182728][T13006] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 304.216771][ T2909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.304190][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.324073][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.382845][ T8622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.404925][ T8622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.628557][ T2909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.889499][ T2909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.091549][ T2909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.258731][ T2909] bridge_slave_1: left allmulticast mode [ 305.275211][ T2909] bridge_slave_1: left promiscuous mode [ 305.286440][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.332785][ T2909] bridge_slave_0: left allmulticast mode [ 305.338495][ T2909] bridge_slave_0: left promiscuous mode [ 305.356171][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.482320][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.492952][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.502141][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.513061][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.523950][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.533243][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.936175][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.947668][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.958035][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.981509][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.998131][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.007009][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.138518][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.149747][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.160435][ T2909] bond0 (unregistering): Released all slaves [ 306.792965][T13037] xt_CONNSECMARK: invalid mode: 0 [ 306.885964][T13012] chnl_net:caif_netlink_parms(): no params data found [ 307.068497][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.103548][ T2909] hsr_slave_0: left promiscuous mode [ 307.120519][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.132755][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.144044][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 307.155703][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.163650][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.171968][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.189121][ T2909] hsr_slave_1: left promiscuous mode [ 307.197468][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.211261][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.219193][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.227298][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.249544][ T2909] veth1_macvtap: left promiscuous mode [ 307.258445][ T2909] veth0_macvtap: left promiscuous mode [ 307.264249][ T2909] veth1_vlan: left promiscuous mode [ 307.269601][ T2909] veth0_vlan: left promiscuous mode [ 307.653383][ T5836] Bluetooth: hci0: command tx timeout [ 307.770721][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 307.835514][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 308.137914][ T5836] Bluetooth: hci1: command tx timeout [ 308.552160][T13056] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1403'. [ 308.589172][T13012] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.600444][T13012] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.607864][T13012] bridge_slave_0: entered allmulticast mode [ 308.618755][T13012] bridge_slave_0: entered promiscuous mode [ 308.655040][T13023] chnl_net:caif_netlink_parms(): no params data found [ 308.666190][T13012] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.674098][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.682698][T13012] bridge_slave_1: entered allmulticast mode [ 308.689749][T13012] bridge_slave_1: entered promiscuous mode [ 308.698516][T13061] Cannot find set identified by id 752 to match [ 308.777908][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.819255][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.925134][T13012] team0: Port device team_slave_0 added [ 308.958750][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.967207][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.975369][T13023] bridge_slave_0: entered allmulticast mode [ 308.985316][T13023] bridge_slave_0: entered promiscuous mode [ 308.994680][T13012] team0: Port device team_slave_1 added [ 309.022240][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.029533][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.037963][T13023] bridge_slave_1: entered allmulticast mode [ 309.046788][T13023] bridge_slave_1: entered promiscuous mode [ 309.061524][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.068575][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.095594][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.144621][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.152914][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.189194][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.209278][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.237459][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.255627][ T5836] Bluetooth: hci3: command tx timeout [ 309.304151][ T2909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.386941][T13043] chnl_net:caif_netlink_parms(): no params data found [ 309.429234][ T2909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.449403][T13012] hsr_slave_0: entered promiscuous mode [ 309.458462][T13012] hsr_slave_1: entered promiscuous mode [ 309.467602][T13012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.475934][T13012] Cannot create hsr debugfs directory [ 309.488831][T13023] team0: Port device team_slave_0 added [ 309.498362][T13023] team0: Port device team_slave_1 added [ 309.505981][T13073] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 309.554998][ T2909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.618478][T13072] bond4: entered allmulticast mode [ 309.638812][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.649377][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.681353][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.694776][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.704431][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.731420][ T5836] Bluetooth: hci0: command tx timeout [ 309.738955][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.820060][ T2909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.830303][T13078] Dead loop on virtual device ipvlan1, fix it urgently! [ 310.025530][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.041950][T13043] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.049231][T13043] bridge_slave_0: entered allmulticast mode [ 310.074847][T13043] bridge_slave_0: entered promiscuous mode [ 310.087878][T13043] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.098766][T13043] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.107969][T13043] bridge_slave_1: entered allmulticast mode [ 310.115334][T13043] bridge_slave_1: entered promiscuous mode [ 310.125674][T13023] hsr_slave_0: entered promiscuous mode [ 310.135248][T13023] hsr_slave_1: entered promiscuous mode [ 310.142274][T13023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.149879][T13023] Cannot create hsr debugfs directory [ 310.161983][T13090] openvswitch: netlink: Actions may not be safe on all matching packets [ 310.211636][ T5836] Bluetooth: hci1: command tx timeout [ 310.258913][T13043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.270981][T13089] netlink: 'syz.2.1409': attribute type 1 has an invalid length. [ 310.278771][T13089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1409'. [ 310.345171][T13043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.546504][ T2909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.569552][T13043] team0: Port device team_slave_0 added [ 310.585541][T13099] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1411'. [ 310.603011][T13043] team0: Port device team_slave_1 added [ 310.649725][ T2909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.732463][T13101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.744309][T13043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.756095][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.799909][T13043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.902896][ T2909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.939119][T13043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.953172][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.963902][T13107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.979959][T13043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.055762][ T2909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.102364][T13107] IPv6: sit1: Disabled Multicast RS [ 311.157589][T13043] hsr_slave_0: entered promiscuous mode [ 311.176084][T13043] hsr_slave_1: entered promiscuous mode [ 311.194800][T13043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.207719][T13043] Cannot create hsr debugfs directory [ 311.229056][T13112] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 311.331001][ T5836] Bluetooth: hci3: command tx timeout [ 311.438449][ T2909] bridge_slave_1: left allmulticast mode [ 311.445098][ T2909] bridge_slave_1: left promiscuous mode [ 311.451721][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.462814][ T2909] bridge_slave_0: left allmulticast mode [ 311.468516][ T2909] bridge_slave_0: left promiscuous mode [ 311.474817][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.487739][ T2909] bridge_slave_1: left allmulticast mode [ 311.494045][ T2909] bridge_slave_1: left promiscuous mode [ 311.500691][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.523409][ T2909] bridge_slave_0: left allmulticast mode [ 311.529146][ T2909] bridge_slave_0: left promiscuous mode [ 311.535209][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.637001][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1421'. [ 311.820946][ T5836] Bluetooth: hci0: command tx timeout [ 312.296503][ T5836] Bluetooth: hci1: command tx timeout [ 312.306887][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.320112][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.330481][ T2909] bond0 (unregistering): Released all slaves [ 312.468335][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.479156][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.489507][ T2909] bond0 (unregistering): Released all slaves [ 312.527567][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 312.887519][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 313.264352][T13012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.284049][T13012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.351546][T13012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.380455][T13012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.411340][ T5836] Bluetooth: hci3: command tx timeout [ 313.629499][T13169] IPVS: Unknown mcast interface: dvmrp1 [ 313.732849][ T2909] hsr_slave_0: left promiscuous mode [ 313.759121][ T2909] hsr_slave_1: left promiscuous mode [ 313.798664][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.813087][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.830667][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.838139][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.876299][ T2909] hsr_slave_0: left promiscuous mode [ 313.891473][ T5836] Bluetooth: hci0: command tx timeout [ 313.901457][ T2909] hsr_slave_1: left promiscuous mode [ 313.931144][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.938646][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.969485][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.978888][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.048130][ T2909] veth1_macvtap: left promiscuous mode [ 314.055843][ T2909] veth0_macvtap: left promiscuous mode [ 314.067706][ T2909] veth1_vlan: left promiscuous mode [ 314.075529][ T2909] veth0_vlan: left promiscuous mode [ 314.109539][ T2909] veth1_macvtap: left promiscuous mode [ 314.121261][ T2909] veth0_macvtap: left promiscuous mode [ 314.126910][ T2909] veth1_vlan: left promiscuous mode [ 314.147917][ T2909] veth0_vlan: left promiscuous mode [ 314.168280][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.185357][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.195305][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.204488][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.216017][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.225568][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.235121][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.244300][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.254434][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.263641][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 314.370668][ T5836] Bluetooth: hci1: command tx timeout [ 314.804790][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 314.853082][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 315.490373][ T5836] Bluetooth: hci3: command tx timeout [ 315.774124][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 315.829424][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 316.340061][T13012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.399860][T13012] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.570950][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.578080][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.606273][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.613457][ T8619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.783877][T13043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.798209][T13201] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 316.821557][T13043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.841745][T13043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.898673][T13043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.045776][T13023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.094178][T13023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.144060][T13023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.199231][T13023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.328190][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.464389][T13043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.554968][T13043] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.581860][T13023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.593353][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.600535][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.678621][T13023] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.708500][T13023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.719651][T13023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.744637][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.751837][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.775058][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.782261][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.792652][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.799840][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.837299][T13012] veth0_vlan: entered promiscuous mode [ 317.868176][T13012] veth1_vlan: entered promiscuous mode [ 318.014881][T13012] veth0_macvtap: entered promiscuous mode [ 318.049335][T13012] veth1_macvtap: entered promiscuous mode [ 318.109408][T13023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.124547][T13237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.152075][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.173164][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.196643][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.217916][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.251316][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.264302][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.309296][T13012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.323240][T13012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.336766][T13012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.346265][T13012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.379422][T13043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.558759][T13023] veth0_vlan: entered promiscuous mode [ 318.576881][ T8620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.587371][ T8620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.618771][T13043] veth0_vlan: entered promiscuous mode [ 318.662028][T13023] veth1_vlan: entered promiscuous mode [ 318.697551][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.703950][T13043] veth1_vlan: entered promiscuous mode [ 318.719503][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.734922][T13023] veth0_macvtap: entered promiscuous mode [ 318.769889][T13023] veth1_macvtap: entered promiscuous mode [ 318.818291][T13043] veth0_macvtap: entered promiscuous mode [ 318.830191][T13043] veth1_macvtap: entered promiscuous mode [ 318.884451][T13023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.896265][T13023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.906488][T13023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.918182][T13023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.932864][T13023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.944595][T13023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.955938][T13023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.966543][T13023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.977097][T13023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.989427][T13023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.027956][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.052233][T13251] netlink: zone id is out of range [ 319.057574][T13251] netlink: zone id is out of range [ 319.065939][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.071896][T13251] netlink: zone id is out of range [ 319.092536][T13251] netlink: del zone limit has 8 unknown bytes [ 319.102334][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.119337][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.138433][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.149985][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.162701][T13043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.175027][T13250] __nla_validate_parse: 62 callbacks suppressed [ 319.175045][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 319.224206][T13023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.234316][T13023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.250567][T13023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.266268][T13023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.292115][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.305107][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.315765][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.327960][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.341689][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.352823][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.365195][T13043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.421575][T13043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.439999][T13043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.449445][T13043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.467487][T13043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.666518][ T7153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.707372][ T8622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.732746][ T8622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.788211][ T8622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.810494][ T8622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.827458][ T7153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.869814][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.879454][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.881387][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.912193][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.038285][ T7153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.446179][ T7153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.639858][ T7153] bridge_slave_1: left allmulticast mode [ 320.645886][ T7153] bridge_slave_1: left promiscuous mode [ 320.659708][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.671309][ T7153] bridge_slave_0: left allmulticast mode [ 320.677025][ T7153] bridge_slave_0: left promiscuous mode [ 320.693799][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.007506][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.025377][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.076730][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.087202][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.111490][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.134663][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.329937][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.355664][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.366548][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.396785][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.406144][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.415803][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.562481][ T7153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.577436][ T7153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.587832][ T7153] bond0 (unregistering): Released all slaves [ 321.601312][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 322.059887][ T7153] hsr_slave_0: left promiscuous mode [ 322.066507][ T7153] hsr_slave_1: left promiscuous mode [ 322.080115][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.089454][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.097714][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.105495][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.127773][ T7153] veth1_macvtap: left promiscuous mode [ 322.133821][ T7153] veth0_macvtap: left promiscuous mode [ 322.139460][ T7153] veth1_vlan: left promiscuous mode [ 322.145309][ T7153] veth0_vlan: left promiscuous mode [ 322.781392][ T7153] team0 (unregistering): Port device team_slave_1 removed [ 322.914461][ T7153] team0 (unregistering): Port device team_slave_0 removed [ 322.945992][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.968586][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.981130][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.992094][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.011317][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.018923][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.171610][ T5836] Bluetooth: hci0: command tx timeout [ 323.496129][ T5836] Bluetooth: hci1: command tx timeout [ 323.781091][T13285] lo: MTU too low for tipc bearer [ 323.786287][T13285] tipc: Enabling of bearer rejected, failed to enable media [ 323.996975][T13267] chnl_net:caif_netlink_parms(): no params data found [ 324.380988][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.388252][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.400792][T13267] bridge_slave_0: entered allmulticast mode [ 324.411600][T13267] bridge_slave_0: entered promiscuous mode [ 324.424887][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.440347][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.451702][T13267] bridge_slave_1: entered allmulticast mode [ 324.458799][T13267] bridge_slave_1: entered promiscuous mode [ 324.481410][T13274] chnl_net:caif_netlink_parms(): no params data found [ 324.634198][T13267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.711305][T13267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.735822][T13289] chnl_net:caif_netlink_parms(): no params data found [ 324.738777][T13335] ipt_rpfilter: unknown options [ 324.768033][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.789979][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.801585][T13274] bridge_slave_0: entered allmulticast mode [ 324.809370][T13274] bridge_slave_0: entered promiscuous mode [ 324.875449][ T7153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.923378][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.932403][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.939926][T13274] bridge_slave_1: entered allmulticast mode [ 324.948340][T13274] bridge_slave_1: entered promiscuous mode [ 324.998209][T13267] team0: Port device team_slave_0 added [ 325.023673][T13267] team0: Port device team_slave_1 added [ 325.082090][ T7153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.091481][ T5836] Bluetooth: hci3: command tx timeout [ 325.148650][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 325.184494][T13347] veth0_vlan: left allmulticast mode [ 325.214007][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.228269][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.251342][ T5836] Bluetooth: hci0: command tx timeout [ 325.298637][ T7153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.383838][ T8619] smc: removing ib device syz1 [ 325.437886][T13344] pimreg (unregistering): left allmulticast mode [ 325.444677][T13344] pimreg (unregistering): left promiscuous mode [ 325.457377][T13344] bridge0: port 3(pimreg) entered disabled state [ 325.517762][T13344] bond0: (slave macvlan0): Releasing backup interface [ 325.552414][T13267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.559505][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.571750][ T5836] Bluetooth: hci1: command tx timeout [ 325.596201][T13267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.613516][T13267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.620992][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.648388][T13267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.675664][T13355] netlink: 'syz.3.1476': attribute type 21 has an invalid length. [ 325.684517][T13355] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1476'. [ 325.734951][ T7153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.758099][ T5910] ================================================================== [ 325.766199][ T5910] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 325.775099][ T5910] Read of size 8 at addr ffff88805c0a82e8 by task kworker/0:6/5910 [ 325.783029][ T5910] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.785384][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/0:6 Not tainted 6.13.0-rc2-syzkaller-00183-gce1219c3f76b #0 [ 325.796158][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 325.806238][ T5910] Workqueue: events smc_ib_port_event_work [ 325.812109][ T5910] Call Trace: [ 325.815404][ T5910] [ 325.818342][ T5910] dump_stack_lvl+0x241/0x360 [ 325.823056][ T5910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.828370][ T5910] ? __pfx__printk+0x10/0x10 [ 325.832994][ T5910] ? _printk+0xd5/0x120 [ 325.837187][ T5910] ? __virt_addr_valid+0x183/0x530 [ 325.842326][ T5910] ? __virt_addr_valid+0x183/0x530 [ 325.847476][ T5910] print_report+0x169/0x550 [ 325.852006][ T5910] ? __virt_addr_valid+0x183/0x530 [ 325.857150][ T5910] ? __virt_addr_valid+0x183/0x530 [ 325.862287][ T5910] ? __virt_addr_valid+0x45f/0x530 [ 325.867416][ T5910] ? __phys_addr+0xba/0x170 [ 325.871943][ T5910] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 325.877948][ T5910] kasan_report+0x143/0x180 [ 325.882562][ T5910] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 325.888600][ T5910] __ethtool_get_link_ksettings+0x6e/0x190 [ 325.894422][ T5910] ib_get_eth_speed+0x160/0x800 [ 325.899293][ T5910] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 325.904695][ T5910] ? rxe_query_port+0x4f/0x260 [ 325.909481][ T5910] rxe_query_port+0x76/0x260 [ 325.914095][ T5910] ib_query_port+0x166/0x7d0 [ 325.917730][T13360] nbd: must specify a device to reconfigure [ 325.918706][ T5910] smc_ib_port_event_work+0x14e/0xa50 [ 325.929975][ T5910] ? process_scheduled_works+0x976/0x1840 [ 325.935719][ T5910] process_scheduled_works+0xa66/0x1840 [ 325.941305][ T5910] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.947317][ T5910] ? assign_work+0x364/0x3d0 [ 325.951936][ T5910] worker_thread+0x870/0xd30 [ 325.956567][ T5910] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.962495][ T5910] ? __kthread_parkme+0x169/0x1d0 [ 325.967547][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 325.972694][ T5910] kthread+0x2f0/0x390 [ 325.976816][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 325.982043][ T5910] ? __pfx_kthread+0x10/0x10 [ 325.986658][ T5910] ret_from_fork+0x4b/0x80 [ 325.991090][ T5910] ? __pfx_kthread+0x10/0x10 [ 325.995708][ T5910] ret_from_fork_asm+0x1a/0x30 [ 326.000493][ T5910] [ 326.003531][ T5910] [ 326.005883][ T5910] Allocated by task 5837: [ 326.010212][ T5910] kasan_save_track+0x3f/0x80 [ 326.014905][ T5910] __kasan_kmalloc+0x98/0xb0 [ 326.019487][ T5910] __kmalloc_node_noprof+0x290/0x4d0 [ 326.024778][ T5910] __kvmalloc_node_noprof+0x72/0x190 [ 326.030074][ T5910] alloc_netdev_mqs+0xa4/0x1080 [ 326.034953][ T5910] rtnl_create_link+0x2f9/0xc20 [ 326.039823][ T5910] rtnl_newlink_create+0x210/0xa40 [ 326.044960][ T5910] rtnl_newlink+0x1c7e/0x2210 [ 326.049659][ T5910] rtnetlink_rcv_msg+0x791/0xcf0 [ 326.054597][ T5910] netlink_rcv_skb+0x1e3/0x430 [ 326.059367][ T5910] netlink_unicast+0x7f6/0x990 [ 326.064145][ T5910] netlink_sendmsg+0x8e4/0xcb0 [ 326.068893][ T5910] __sock_sendmsg+0x221/0x270 [ 326.073566][ T5910] __sys_sendto+0x363/0x4c0 [ 326.078055][ T5910] __x64_sys_sendto+0xde/0x100 [ 326.082805][ T5910] do_syscall_64+0xf3/0x230 [ 326.087315][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.093202][ T5910] [ 326.095516][ T5910] Freed by task 13344: [ 326.099585][ T5910] kasan_save_track+0x3f/0x80 [ 326.104260][ T5910] kasan_save_free_info+0x40/0x50 [ 326.109275][ T5910] __kasan_slab_free+0x59/0x70 [ 326.114048][ T5910] kfree+0x196/0x430 [ 326.117932][ T5910] device_release+0x99/0x1c0 [ 326.122548][ T5910] kobject_put+0x22f/0x480 [ 326.126951][ T5910] netdev_run_todo+0xe79/0x1000 [ 326.131806][ T5910] rtnl_dellink+0x760/0x8d0 [ 326.136296][ T5910] rtnetlink_rcv_msg+0x791/0xcf0 [ 326.141219][ T5910] netlink_rcv_skb+0x1e3/0x430 [ 326.146069][ T5910] netlink_unicast+0x7f6/0x990 [ 326.151009][ T5910] netlink_sendmsg+0x8e4/0xcb0 [ 326.155775][ T5910] __sock_sendmsg+0x221/0x270 [ 326.160446][ T5910] ____sys_sendmsg+0x52a/0x7e0 [ 326.165214][ T5910] __sys_sendmsg+0x269/0x350 [ 326.169789][ T5910] do_syscall_64+0xf3/0x230 [ 326.174283][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.180168][ T5910] [ 326.182488][ T5910] The buggy address belongs to the object at ffff88805c0a8000 [ 326.182488][ T5910] which belongs to the cache kmalloc-cg-4k of size 4096 [ 326.196799][ T5910] The buggy address is located 744 bytes inside of [ 326.196799][ T5910] freed 4096-byte region [ffff88805c0a8000, ffff88805c0a9000) [ 326.210685][ T5910] [ 326.213024][ T5910] The buggy address belongs to the physical page: [ 326.219429][ T5910] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c0a8 [ 326.228219][ T5910] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 326.236715][ T5910] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 326.244306][ T5910] page_type: f5(slab) [ 326.248640][ T5910] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 326.257237][ T5910] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 326.265819][ T5910] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 326.274492][ T5910] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 326.283160][ T5910] head: 00fff00000000003 ffffea0001702a01 ffffffffffffffff 0000000000000000 [ 326.291842][ T5910] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 326.300543][ T5910] page dumped because: kasan: bad access detected [ 326.307162][ T5910] page_owner tracks the page as allocated [ 326.312864][ T5910] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5837, tgid 5837 (syz-executor), ts 62068589080, free_ts 17286004580 [ 326.335971][ T5910] post_alloc_hook+0x1f3/0x230 [ 326.340744][ T5910] get_page_from_freelist+0x365c/0x37a0 [ 326.346299][ T5910] __alloc_pages_noprof+0x292/0x710 [ 326.351498][ T5910] alloc_pages_mpol_noprof+0x3e8/0x680 [ 326.356954][ T5910] alloc_slab_page+0x6a/0x110 [ 326.361617][ T5910] allocate_slab+0x5a/0x2b0 [ 326.366137][ T5910] ___slab_alloc+0xc27/0x14a0 [ 326.370827][ T5910] __slab_alloc+0x58/0xa0 [ 326.375193][ T5910] __kmalloc_node_noprof+0x2ee/0x4d0 [ 326.380477][ T5910] __kvmalloc_node_noprof+0x72/0x190 [ 326.385770][ T5910] alloc_netdev_mqs+0xa4/0x1080 [ 326.390613][ T5910] rtnl_create_link+0x2f9/0xc20 [ 326.395464][ T5910] rtnl_newlink_create+0x210/0xa40 [ 326.400581][ T5910] rtnl_newlink+0x1c7e/0x2210 [ 326.405271][ T5910] rtnetlink_rcv_msg+0x791/0xcf0 [ 326.410202][ T5910] netlink_rcv_skb+0x1e3/0x430 [ 326.414970][ T5910] page last free pid 1 tgid 1 stack trace: [ 326.420765][ T5910] free_unref_page+0xd3f/0x1010 [ 326.425641][ T5910] free_contig_range+0x14c/0x430 [ 326.430588][ T5910] destroy_args+0x92/0x910 [ 326.435094][ T5910] debug_vm_pgtable+0x4be/0x550 [ 326.439924][ T5910] do_one_initcall+0x248/0x870 [ 326.444682][ T5910] do_initcall_level+0x157/0x210 [ 326.449613][ T5910] do_initcalls+0x3f/0x80 [ 326.453946][ T5910] kernel_init_freeable+0x435/0x5d0 [ 326.459135][ T5910] kernel_init+0x1d/0x2b0 [ 326.463459][ T5910] ret_from_fork+0x4b/0x80 [ 326.467906][ T5910] ret_from_fork_asm+0x1a/0x30 [ 326.472675][ T5910] [ 326.474997][ T5910] Memory state around the buggy address: [ 326.480634][ T5910] ffff88805c0a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.488705][ T5910] ffff88805c0a8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.496782][ T5910] >ffff88805c0a8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.504840][ T5910] ^ [ 326.512286][ T5910] ffff88805c0a8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.520337][ T5910] ffff88805c0a8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 326.528401][ T5910] ================================================================== [ 326.538675][ T5910] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 326.545912][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/0:6 Not tainted 6.13.0-rc2-syzkaller-00183-gce1219c3f76b #0 [ 326.556694][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 326.566779][ T5910] Workqueue: events smc_ib_port_event_work [ 326.572621][ T5910] Call Trace: [ 326.575919][ T5910] [ 326.578863][ T5910] dump_stack_lvl+0x241/0x360 [ 326.583574][ T5910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.588797][ T5910] ? __pfx__printk+0x10/0x10 [ 326.593415][ T5910] ? preempt_schedule+0xe1/0xf0 [ 326.598281][ T5910] ? vscnprintf+0x5d/0x90 [ 326.602620][ T5910] panic+0x349/0x880 [ 326.606532][ T5910] ? check_panic_on_warn+0x21/0xb0 [ 326.611745][ T5910] ? __pfx_panic+0x10/0x10 [ 326.616183][ T5910] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 326.622185][ T5910] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.628524][ T5910] ? print_report+0x502/0x550 [ 326.633218][ T5910] check_panic_on_warn+0x86/0xb0 [ 326.638175][ T5910] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 326.644254][ T5910] end_report+0x77/0x160 [ 326.648498][ T5910] kasan_report+0x154/0x180 [ 326.653017][ T5910] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 326.659019][ T5910] __ethtool_get_link_ksettings+0x6e/0x190 [ 326.664852][ T5910] ib_get_eth_speed+0x160/0x800 [ 326.669707][ T5910] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 326.675087][ T5910] ? rxe_query_port+0x4f/0x260 [ 326.679858][ T5910] rxe_query_port+0x76/0x260 [ 326.684473][ T5910] ib_query_port+0x166/0x7d0 [ 326.689079][ T5910] smc_ib_port_event_work+0x14e/0xa50 [ 326.694471][ T5910] ? process_scheduled_works+0x976/0x1840 [ 326.700221][ T5910] process_scheduled_works+0xa66/0x1840 [ 326.705804][ T5910] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.711803][ T5910] ? assign_work+0x364/0x3d0 [ 326.716402][ T5910] worker_thread+0x870/0xd30 [ 326.721012][ T5910] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 326.726933][ T5910] ? __kthread_parkme+0x169/0x1d0 [ 326.731966][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 326.737080][ T5910] kthread+0x2f0/0x390 [ 326.741146][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 326.746249][ T5910] ? __pfx_kthread+0x10/0x10 [ 326.750839][ T5910] ret_from_fork+0x4b/0x80 [ 326.755255][ T5910] ? __pfx_kthread+0x10/0x10 [ 326.759840][ T5910] ret_from_fork_asm+0x1a/0x30 [ 326.764613][ T5910] [ 326.767910][ T5910] Kernel Offset: disabled [ 326.772224][ T5910] Rebooting in 86400 seconds..