last executing test programs: 1m2.398220199s ago: executing program 2 (id=1590): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400c3d8f9017d87d1564800d6000000a6000052809c3b809500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffeca50000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000000000000000000000000000000000000000000000000000000000000000000200"/144]}, 0x108) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x4000}, {r8, 0x20}], 0x2, &(0x7f0000000240), 0xfffffffffffffffe, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r9, @ANYBLOB="95820900", @ANYRES32=r10, @ANYBLOB], 0x40}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) (async) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140000002b01010000000000000000000042102cd080"], 0x14}], 0x1}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 64) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r15, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r17, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="be000000dcf906fcf70127d62489ddff7f0000000000007657ad609e64e3592163dd35a588e437d119cff1494aa802449d6f7cfb3564d7c16e77bfb6b26e15044e784c483753296bea4c7a8590498977d83044ea694740de3bf73ecc0f42a5071730626749fb076fb47f4927d0ee0116900eb950b7f452406abe1233b28ee57752d25636ab73b5bf1204cf347a4ca65f04e76a8e2b0eed82dbde701bffc00623fb6b16d9aad5e8c5bc8c44bfb74c1c7c0fe6400fc495270c04392cf0e7976f270bc964f41901edf9e741d4b950bbdf5c8092eab4", @ANYRES16=r12, @ANYBLOB="00022cbd7000fedbdf25060000000c009900070000004a00000005005300000000000800050007000000050053000000000008000500010000000a00e800080211000001000008001780040003001800178004000300040003000400050004000200040003000a00e80008021100000000001c00e70002d45eaf0698a2f91771e2708d8172989aa30ca5051ac7611400178004000100040004000400010004000500100017800400060004000400040006001c00e7008552c2bf2f93e097414ea0e9b5ef404fff7285d2219b9a7c"], 0xd4}}, 0x448d9) 1m1.909231813s ago: executing program 2 (id=1596): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0xff13, 0x4, 0xffff8000, 0xd004, 0x200000}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "fda8"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x173d, 0x101, 0x2, 0x80}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$packet(r0, &(0x7f0000000540)="22ef4da070cceded846817", 0xb, 0x60, &(0x7f0000000580)={0x11, 0x1c, 0x0, 0x1, 0x1}, 0x14) 49.056886576s ago: executing program 2 (id=1596): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0xff13, 0x4, 0xffff8000, 0xd004, 0x200000}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "fda8"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x173d, 0x101, 0x2, 0x80}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$packet(r0, &(0x7f0000000540)="22ef4da070cceded846817", 0xb, 0x60, &(0x7f0000000580)={0x11, 0x1c, 0x0, 0x1, 0x1}, 0x14) 36.045328563s ago: executing program 2 (id=1596): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0xff13, 0x4, 0xffff8000, 0xd004, 0x200000}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "fda8"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x173d, 0x101, 0x2, 0x80}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$packet(r0, &(0x7f0000000540)="22ef4da070cceded846817", 0xb, 0x60, &(0x7f0000000580)={0x11, 0x1c, 0x0, 0x1, 0x1}, 0x14) 20.36659477s ago: executing program 2 (id=1596): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0xff13, 0x4, 0xffff8000, 0xd004, 0x200000}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "fda8"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x173d, 0x101, 0x2, 0x80}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$packet(r0, &(0x7f0000000540)="22ef4da070cceded846817", 0xb, 0x60, &(0x7f0000000580)={0x11, 0x1c, 0x0, 0x1, 0x1}, 0x14) 7.192333344s ago: executing program 2 (id=1596): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0xff13, 0x4, 0xffff8000, 0xd004, 0x200000}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "fda8"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x173d, 0x101, 0x2, 0x80}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$packet(r0, &(0x7f0000000540)="22ef4da070cceded846817", 0xb, 0x60, &(0x7f0000000580)={0x11, 0x1c, 0x0, 0x1, 0x1}, 0x14) 3.845330096s ago: executing program 4 (id=2072): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x100, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xbfff2002}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000800000000000028000480240001800c0001006269747769736500140002800800034000000000080001400000000e0900010073797a305de02cb3ecdb9bee3bcbe1ee63cc000000000900020073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280), 0x20) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb9", 0x6b}], 0x1}}], 0x1, 0x0) 3.640248604s ago: executing program 3 (id=2076): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="010000004724020008"], 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4064005) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd08692"], 0x398}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r7, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:'], 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7, 0x8, 0xa, 0x400, {{0xd, 0x4, 0x1, 0x2c, 0x34, 0x65, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xdf, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xffff}, {@empty, 0xfcf}]}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x58, &(0x7f00000001c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x31, 0xe, 0xde, 0xe6, @empty, @local, 0x8, 0x8000, 0x5, 0xeff2}}) r10 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000000500)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r12}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x40, 0x10, 0x3, 0x8000, {{0x8, 0x4, 0x3, 0x19, 0x20, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@generic={0x89, 0xa, "7730f6feae1af214"}]}}}}}) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000580)={@multicast1, @private}, &(0x7f0000000600)=0xc) 1.810438374s ago: executing program 3 (id=2082): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000a00)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="189c0500080211000000080211000001505050505050daff12008441ffffffffffffffffffffffff0400b0ccf8bb00000802110000010802110000004b00de184e24c806f37281d8b2c0010991f8e326ac92eed847dbc4804fc92600f91d0d72e1a6c0eaab02b093b384878a7451c9a61fb3b7f840fccf54ec567071b7944e47a38b0a740f66c693c30000000802110000000802110000019800bb9369bbd440486d1b0a53c44554b5fd7729455d888910a7068e510879cfebc15240b99484209290dac80130c6fc0781dbb16cc3498c54f0d1221a7831478e4118b334b573ed581de1cf2c34cccc876a1dce6644086696cc8d940ac6c44f637d14ae7cc815efa86db5602d2a5ad49825f8510bb28e0f1c8e98026bc2a54a370998ecee3be261c0c422fe9fc2e0cc729c9de2c390487f9f4b0000ffffffffffff080211000000001035a5bd8f159bbc0435fc51889a9ff0a602971f64c9fe88329397459334530aab6d70e81e89d81a93de33cfc2b7ef4be97e891397fc30cfa4d1aa86d5fbc654f7cfa321ca3d3298f3bc4823e633a4ac0b70dd5ccd5079ee002326fdf8e49f93d5527ee2d7d161da677186909e7b2a7d7da0d7f8269cd916a7f7f25b5598d016580886743a7608d67a07aded7c9c001f5038dfce92509927d0ed232620e231c4ca8bedc41cd1303ac578d54b4eb25cbb219f95ebfc3ccef7f8f0c1bc22a13d591188e971b205e96e374723c33151f6bb9c70e19ed492d2bb3d88a75568f41b51bb4a78f474c25095c7950e5c985337d9b74cf3ffd4d8d005e89656ee5b6a2c210236a965d3c0c5538bf0e0605b2fe4a7a4ec21f04b64ddc6c79b9ad6170151fc031f383383ad75446801ad10370c96f5072952cce3bee7d552e46d800935a7ea24b28efd769627e6eb457daeccac8e86ce5cf6a30e848f233e297fe99d25ed869b11e45a908c193bd479182aaec4dc5b4c18d2c9c0f01f85a26e65f911772deb7f8732cfdc4c496b04803fce20d5e8993d5801a381ac57af9765b3af9d0f5084a7dbad3097386f4ddfc82d1ff574cf88353c4281136474bc4539873b11e276a9ef5f37517f65f8a237415dddc6766583aec685619af76271f748ee2a518359708b873234de8d2657dccf19811e6925e24ec3cc53a5e1859a221b85e07eb2cb6820458d0bb2098e43f341b338bd889ef9ed8aa0c7333904cdba22bd6df566f6a9f60769369ec72df2b56f085036442babd09b4530858e600454858f4613a3cf3c403e33eab8d2f9c93712a8907fa8f887b7964e2cdf3a2770658b911885840957bc731985b9aa4094593b7b08843d169388333048238f144bce6cbeab5f01ce88c9bd00f052990bb364d53d27b000c31769089ac9cc0c1ced3daf0614cae62ae069e07acbe1b7454b6ce08899e341bb5bf584387a811027707005c625039408a4dab31f1a53743edb2ecbc926b73c5ff449c6585eed587b9f992a9cb375968dbe8b343abfd7a3cedd78a4356bc752a3aaa86a56c48478b5f744fff539634f2eef6d3b88e824d61c4a12f767d493db6eed07b631894881018633b5fdd6d9fbe1af81d7fb52cd1ca73b15dde5efbeeb21921ad7a63dc970836a7b5dc570455296e7f64990baf3d624279962e127994a7c8688333e08c389d7e25f8d0104faabc9fabe60fc21eca58eb36045ebed48692bad43de6364ea9670072ff4119209d53919b3c167b4f599d37d4d7c7cf6b7f6f7d6b11b89e4af3a6e5d97d156465d57eae8c9f8061160f4f30733bb5dd3c0586df83c5f84895070d78375ebc925bed0c8576dd9dfc8069a4cfbea882f75eae0f054bcad7ce00a72fae04993c4db9de527df7b7b9534ab36c4801fd9f9bc895e2fcb178cd7bb6c2f5366422b54d27a17d74a85559bedfdf4c594c0721febae32d7632cb0bd9b4c999261849a3278b609845e4d3f07b0ef402339c89192c34c3f7f8f760638964a2f8d9f8303083772185bad1a4c0c85cbefc75f3a94dee3da6a34e4aac29c359b787046431f425fda65b39dcc163ff11151cdca2313c5bf8c99a5b6855e282f5bf17248d51eb3e0533e1321b4ad14022c17892677384448d634810ab5f8f2ec43559d2702ddc2909987323715e40642b6a804a6704062d6ee55dfa17f1825e54c87645992c4d3e257c9b0296c55e53e33910530bff0f44d62d564508b9e2202571be61a67a9338f76b868b912bd9ecf7916265eb687bb74db61fc91e716456241c723012f26eec3a3b33e98ac9158b96fb17bbf46cac437143573cdcfbdcf1cfe2464369986982380b6d6b2164bca10108a74c12c4ec0eab516fdce25a59ef4086bdfbd646544085adafe0bc4b0c61039190c0544b96fcf8a16c20418701190fd80e70c5e2fce42320959a12032abc10cb7c3833eaaf4d53b4953bb53fda0877213d8008021e99fbb6e49268e80b1f54c032c8825bb0d71cc75d02df95bebdd72af8205833ca9899a6c1c775345b2e5c2687d378ae3045cda160dba6b53ecc9cc8e8b633371445c81b8509d027b3a128ada3bc59e7eb11b4c8277f408d0bacfd5a3983424d082fd229cee1712f253179c2b983397e49feb856e8e19d49ca24d09e873bd300ccd18ccc649c689ed28a65634cf56bc8df9af1b10ac7af8301aa82a4635f0aa0ff08307dc8de1a6ae86d6b74a204fbec9fb8203700b9360932bd5830a6bbd54f1295ecfdcf57949bad9492acdebff965d21cd668aa515989c6c333f8c7f4f31998be9e66260485ab45e0e85c315a77f7e1a7c750a6c8552decef75a9f19471d7123aadfbfa8a0fa5aad8fc7954ca09212e436df3bfebf2dc716fc25daa3b08c2ef3808a2822eb7a05e0b6cd3a0ebc9a612083f3ce51c63af07b4e5e33aec057cc43dfc28eb3d9d1ab45fe1b9959af76f931d1f6276fd5fc2bab9603fd2210e3525f045a5fa42ca11cd2e6e75fca106c68195932a4a6a31004df966d3a539a105a743972b7a6a3fedbde58f60d8ee3fe92e2bc6eab68c8deaed3742dba8d611a90705178cc3918cfde6f4e392f76f4e19f5c53586b2d187fc9b1def19e6587f8f259723a6b291e51fe62a4eca9682144106605bfcc6edd8f8f1d1a104ece1b258420c581a42351a7f055dce4bb4bc519f6d0a01f5a2f2f062ad15c33eafaaf2e17a19b334cbd83d11deede82ce604696de5bd9c1dc8dcd45984fb6faa752b106d71a3f10dd46c270f4d7501632e0e76afbfd7d964c2d3b5c8b96de37b4476dec68a4528c4d7071f9e5b1870621b6ed6a4ba27e29154907d67132b711f39ad9d06098ec3f3f4dfd55ad20f799308648cbf1c42b7a2b8d9d878cfa45956a644d4d15f2b3c54e1bfae9c3e9a1feea72dd7e15b64f4f7f7211f7eba5aae78271c25542ef6475be496b4419c05e4e697f2ce0ccacbdd3f0c041e98aae44f2d2639bc5639c7ff047833f0ad3e04d0989d1fc6c97dddee1c985febaf34c6c8d5f67982e122832cb0992f7cab835734fdfa48ba81f343cd52d1e1c82c2997f2219abf6d50a7ad87cac3bd6de8c0088a65339b879299aa40b3fdf1d16fcf372e8ee8cb537bf3c2ab5b655d7881fe27a83e6a6e90e27a480c9b6f3de5edd2716dc95811181f5e4e4dff79587efba9a1ba24c5bc6eb07e5195df9d3c24fc7dd0c261f69d45e8ef6823ed1b644628401fa4d5e942cecb59678273eff7ac46caa45d13de01276be714e549c1608a36842c880a427feaf6d99e682161555ea641147d5adaac9aac2f579dd035944bd3ce9c0444031e8bb8614e58be4944596efafc45c7179637e3fd1061d771c615ebc7096a4bce3d003debdcf2396eb9344e9694e885c24e256e1d04f96876d83da984c42791b43652b11cf97de34d271a69e2c632ddd41bf1c1970ad080e46eefaf210d3ae990e8d95325ed344a9c4ba9f8f6af2260bdb31abd29cd510355d311c79a1df1b510fd1c59dc4fcf62493e566a53af3c85201cc6e2eec2525ec079acfb3b90cd128"], 0x2218) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x90) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(0x0, &(0x7f0000000480)) r9 = socket(0x2b, 0x1, 0x0) bind$unix(r9, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1ffff}) 1.809078142s ago: executing program 4 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x4000, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x45}]}}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.625800711s ago: executing program 4 (id=2085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 1.388833061s ago: executing program 4 (id=2088): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x384a, 0x69, 0x2, 0x2}, 0x10) (async) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00f8ffffffffffff0000000000cdfd76b5c320aaa900000095000000fffffffd"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)=[@in={0x2, 0x0, @private}]}, &(0x7f0000000100)=0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000000f40)={0xb40, 0x0, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x16c}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52051849}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x9, 0x8, 0x6, 0x3401}, {0x4ef, 0x2, 0x8, 0xffff}, {0x8, 0x5, 0xc0, 0x2a}, {0x8, 0xc1, 0xf7, 0x5}, {0x1ff, 0x5, 0x9, 0x1}, {0x4, 0x65, 0xf, 0xffffffff}, {0x1, 0x9, 0x1, 0x8}, {0x0, 0x7f, 0x8, 0xa}, {0x1000, 0x81, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8f7, 0x0, 0xff, 0x5}, {0x5366, 0x80, 0xf6, 0x3}, {0x4, 0xf0, 0xff, 0x5}, {0x1, 0x8, 0x81, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x922}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4b5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1e}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0xb40}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000038000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000740ffff140000001000010000000000000000000000000a000000000000000000"], 0x80}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010003b15000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500170000000000050016"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000feffffff3b00000008000300", @ANYRES32=r8, @ANYBLOB="440033008000000008021100000108021100000108021100000000000000000001000301003c0400000000710700000000000000760600"/68], 0x60}}, 0x0) 1.175295822s ago: executing program 4 (id=2091): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "b9dc05cc9591a0e9", "9d597b8566fb9b1ff9e847ef151545d4", "a483a4b2", "b2e71c7c92421350"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0) 1.069857353s ago: executing program 0 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}}, 0x0) (async) r3 = socket$inet(0x2, 0x2000000000003, 0x2) (async) r4 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r7, @ANYBLOB="08002600760900000800a100ff0f00000800270000000009"], 0x34}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 990.689472ms ago: executing program 3 (id=2094): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x100, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xbfff2002}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000800000000000028000480240001800c0001006269747769736500140002800800034000000000080001400000000e0900010073797a305de02cb3ecdb9bee3bcbe1ee63cc000000000900020073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280), 0x20) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb9", 0x6b}], 0x1}}], 0x1, 0x0) 838.103201ms ago: executing program 0 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x45}]}}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 767.58949ms ago: executing program 3 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='C'}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf800}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000001) r8 = socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f4656000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x2}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='C'}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) (async) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf800}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000001) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(r5) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f4656000000"], 0x44}}, 0x0) (async) 739.572068ms ago: executing program 1 (id=2097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212e7", 0xc}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f9bf670acbc5d7cb3b4c05a", 0x2e}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0xf}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000001c0000001800050094000200766574685f746f5f62726964676500"], 0x2c}}, 0x0) 650.34687ms ago: executing program 0 (id=2098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 580.871878ms ago: executing program 1 (id=2099): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) 525.114755ms ago: executing program 0 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x165}], 0x1}}], 0x1, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000003000300000000000000000040"], 0xb8}}, 0x0) 438.160986ms ago: executing program 3 (id=2101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) sendmsg$sock(r2, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x9}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x9}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301"], 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x600c091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400)=0x8, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050017000000000008000400c6"], 0x44}}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050017000000000008000400c6"], 0x44}}, 0x8000) r5 = socket$key(0xf, 0x3, 0x2) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 427.046317ms ago: executing program 1 (id=2102): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00010000000000"], 0x0) 301.770009ms ago: executing program 1 (id=2103): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x64}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 202.167743ms ago: executing program 0 (id=2104): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x0, 0x0, &(0x7f0000000080)=0x1b00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300fcaff6dd63c0c19400971984efd8e843aeeb858d390844e115d80291321176338a9cd71b16c90de9b5164ea5f75724885b69c0edaf8fab1aceb762ec3065959d641b0db4fc5f896c5f671f2c767b9f640385418129638bf57a59dc7157ba08534d556f6548b37856109fb6f532fc3e17082f8121fc6ad7621169e8406b9fef1b241e07c69301e9", @ANYRES32=r5, @ANYBLOB="1c005a80180001801400030000000000000000000000000500000000"], 0x38}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300eb990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r13, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x2, 0xf, 0x8, 0xa, 0x44, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x80000000, @private2, 0xb}, @in6={0xa, 0x4e21, 0x30, @local, 0x40}}, @sadb_lifetime={0x4, 0x6, 0x401, 0x8, 0x7ff, 0x7}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbe, 0x6, {0x6, 0x0, 0x5, 0x6, 0x0, 0x6, 0x0, @in=@broadcast, @in6=@remote}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x43}, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_x_sec_ctx={0x15, 0x18, 0xf1, 0x9, 0x9e, "4df24cf15c6cbd171fe2118f779baa51f7ec62c345892198c446614a95059e9688d498020a1f3f6a37f6a64328084118ac270dbfe6609b8293b340a38c7cb1ad33007d674bd486ec2375b91d7e878258ed58c2ca74e8112c9182bce85e96c317220566b20e772e94b6081bd95b485a8e8549a41fe95f6d2d9094439d39551a0e9e3589dafe950a9c32b12585ed6c6770f14a2813fbd165a39c4ce9af31c3"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb3, 0x6, {0x6, 0x33, 0x5, 0xf, 0x0, 0x1, 0x0, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0xd}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bb2, 0x2800, {0x6, 0x33, 0x1, 0x59, 0x0, 0x2, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}}]}, 0x220}}, 0x20002000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100009d0a0000008d439744000008000300", @ANYRES32=r15, @ANYBLOB="140004006e696376663000000000000000000000080005"], 0x38}}, 0x0) 201.667962ms ago: executing program 4 (id=2105): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x9}, 0x80, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 177.267422ms ago: executing program 1 (id=2106): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x100, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xbfff2002}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000800000000000028000480240001800c0001006269747769736500140002800800034000000000080001400000000e0900010073797a305de02cb3ecdb9bee3bcbe1ee63cc000000000900020073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280), 0x20) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb9", 0x6b}], 0x1}}], 0x1, 0x0) 35.210855ms ago: executing program 3 (id=2107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0\x00', 0x2}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800c3273ae1d8b33bb8ec26a0d384477653838da943751774ba50825fcecdd9ae2e51aba9db75c90442e0650d16df5080dd3d8ed40cbd4dd81e8e85458f239737d09a6a92ce95ac60b1fa64bb75b9bdec3a4ff27602fd2b0440cedcf552194e0db69f797b2152db5e9f1c4b7f4b619b776c62df72379047c2132e96a758", @ANYRES16=r4, @ANYBLOB="01000000000003000000010000000c00060001000000000000000c0002000000000000000000040007800800010000000000"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xac, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x4844) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000c, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 2.413404ms ago: executing program 0 (id=2108): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000), 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x66}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xc3}]}}]}, 0x44}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0xf401, 0x0, 0x0, 0x0, 0x55}, 0x9c) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="f3c1837c3e366b798e3a850b657658215cbbbe26ac11b044d3e84eceaf37ff81b7bcefe98ef957720913fc8e5edcfec4f94edfbb6e1609f174d456c1c9e2e74a9f4b3f73abfa3e0230ef46a4e42a205a5ced53a7f47d0ba57f878b7e450fc5aa987be913ff399ee61468ead339f7bea14e47efca647b84b7011486a831efacbbfaf463512583fe6b57dddf604aded13a6d74080a46a51ad6d430160ea5f2480359d0cd5bd51a917e84b9838d628b52fe1f92d9f956890dde89888be65fdf94eaa0a337571c"]}, 0xe0}], 0x1}, 0x0) r9 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x6, 0x2, [{}]}]}]}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=2109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x90) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) (rerun: 64) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r6, &(0x7f0000001dc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x80) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000f8ffff1300000000000000290000000b"], 0x30}}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) unshare(0x2a020400) (async) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000002200)=0xc0100100) kernel console output (not intermixed with test programs): c 0x1001 length: 249 > 9 [ 368.843004][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.862957][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.870771][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.181145][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.256574][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.328893][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.417610][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 369.430166][ T12] team0: Port device netdevsim0 removed [ 369.438234][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.676679][T10780] chnl_net:caif_netlink_parms(): no params data found [ 369.741797][T10782] chnl_net:caif_netlink_parms(): no params data found [ 369.879467][T10786] chnl_net:caif_netlink_parms(): no params data found [ 369.924567][ T12] bridge_slave_1: left allmulticast mode [ 369.930833][ T12] bridge_slave_1: left promiscuous mode [ 369.946911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.957378][ T12] bridge_slave_0: left allmulticast mode [ 369.963048][ T12] bridge_slave_0: left promiscuous mode [ 369.968825][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.451009][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.462413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.473823][ T12] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 370.483680][ T12] team0: left allmulticast mode [ 370.489456][ T12] team_slave_0: left allmulticast mode [ 370.495388][ T12] team_slave_0: left promiscuous mode [ 370.513122][ T12] bond0 (unregistering): Released all slaves [ 370.645198][ T4618] Bluetooth: hci0: command tx timeout [ 370.654825][ T54] Bluetooth: hci1: command tx timeout [ 370.661131][T10784] chnl_net:caif_netlink_parms(): no params data found [ 370.672700][ T12] ɶƣ0GC: left promiscuous mode [ 370.726465][ T54] Bluetooth: hci3: command tx timeout [ 370.744456][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.751806][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.761441][T10782] bridge_slave_0: entered allmulticast mode [ 370.769214][T10782] bridge_slave_0: entered promiscuous mode [ 370.780491][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.787734][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.795784][T10782] bridge_slave_1: entered allmulticast mode [ 370.802922][T10782] bridge_slave_1: entered promiscuous mode [ 370.809204][ T54] Bluetooth: hci4: command tx timeout [ 370.835424][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.842612][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.849921][T10780] bridge_slave_0: entered allmulticast mode [ 370.857144][T10780] bridge_slave_0: entered promiscuous mode [ 370.962345][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.970018][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.974854][ T54] Bluetooth: hci2: command tx timeout [ 370.977466][T10786] bridge_slave_0: entered allmulticast mode [ 370.990315][T10786] bridge_slave_0: entered promiscuous mode [ 371.004569][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.014823][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.022088][T10780] bridge_slave_1: entered allmulticast mode [ 371.029698][T10780] bridge_slave_1: entered promiscuous mode [ 371.051546][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.064841][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.085489][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.092734][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.100079][T10786] bridge_slave_1: entered allmulticast mode [ 371.107670][T10786] bridge_slave_1: entered promiscuous mode [ 371.196929][T10782] team0: Port device team_slave_0 added [ 371.250696][T10780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.264396][T10780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.279841][T10782] team0: Port device team_slave_1 added [ 371.316990][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.324251][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.331677][T10784] bridge_slave_0: entered allmulticast mode [ 371.339479][T10784] bridge_slave_0: entered promiscuous mode [ 371.460982][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.468061][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.494232][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.507900][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.515486][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.522779][T10784] bridge_slave_1: entered allmulticast mode [ 371.530804][T10784] bridge_slave_1: entered promiscuous mode [ 371.540762][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.554289][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.581325][T10780] team0: Port device team_slave_0 added [ 371.590570][T10780] team0: Port device team_slave_1 added [ 371.601984][T10778] chnl_net:caif_netlink_parms(): no params data found [ 371.637228][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.644204][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.670728][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.731276][ T12] hsr_slave_0: left promiscuous mode [ 371.737707][ T12] hsr_slave_1: left promiscuous mode [ 371.743732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.752812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.762764][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.770813][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.795155][ T12] veth1_macvtap: left promiscuous mode [ 371.800731][ T12] veth0_macvtap: left promiscuous mode [ 371.806776][ T12] veth1_vlan: left allmulticast mode [ 371.812327][ T12] veth1_vlan: left promiscuous mode [ 371.819106][ T12] veth0_vlan: left promiscuous mode [ 372.498989][ T12] team0 (unregistering): Port device team_slave_0 removed [ 372.730249][ T54] Bluetooth: hci1: command tx timeout [ 372.735916][ T54] Bluetooth: hci0: command tx timeout [ 372.805693][ T54] Bluetooth: hci3: command tx timeout [ 372.894983][ T54] Bluetooth: hci4: command tx timeout [ 373.007269][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.029937][T10786] team0: Port device team_slave_0 added [ 373.045658][ T54] Bluetooth: hci2: command tx timeout [ 373.073580][T10780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.080777][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.106961][T10780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.120279][T10780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.127684][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.155547][T10780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.177659][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.209973][T10786] team0: Port device team_slave_1 added [ 373.368365][T10780] hsr_slave_0: entered promiscuous mode [ 373.376627][T10780] hsr_slave_1: entered promiscuous mode [ 373.383022][T10780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.391051][T10780] Cannot create hsr debugfs directory [ 373.402337][T10784] team0: Port device team_slave_0 added [ 373.413303][T10784] team0: Port device team_slave_1 added [ 373.420311][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.427618][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.453849][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.509676][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.525771][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.533583][T10778] bridge_slave_0: entered allmulticast mode [ 373.548743][T10778] bridge_slave_0: entered promiscuous mode [ 373.592773][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.600358][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.626603][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.649198][T10782] hsr_slave_0: entered promiscuous mode [ 373.656135][T10782] hsr_slave_1: entered promiscuous mode [ 373.662447][T10782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.670364][T10782] Cannot create hsr debugfs directory [ 373.677582][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.686036][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.693345][T10778] bridge_slave_1: entered allmulticast mode [ 373.702105][T10778] bridge_slave_1: entered promiscuous mode [ 373.715387][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.722431][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.748739][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.815553][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.822598][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.850118][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.983497][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.997223][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.047450][T10784] hsr_slave_0: entered promiscuous mode [ 374.054226][T10784] hsr_slave_1: entered promiscuous mode [ 374.061647][T10784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.069652][T10784] Cannot create hsr debugfs directory [ 374.126563][T10786] hsr_slave_0: entered promiscuous mode [ 374.149507][T10786] hsr_slave_1: entered promiscuous mode [ 374.166760][T10786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.174367][T10786] Cannot create hsr debugfs directory [ 374.207186][T10778] team0: Port device team_slave_0 added [ 374.284471][T10778] team0: Port device team_slave_1 added [ 374.374887][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.381908][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.408584][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.480917][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.490477][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.517055][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.656238][T10782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.724343][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.797342][T10782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.809408][ T54] Bluetooth: hci0: command tx timeout [ 374.815897][ T4618] Bluetooth: hci1: command tx timeout [ 374.876552][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.887712][ T54] Bluetooth: hci3: command tx timeout [ 374.917202][T10778] hsr_slave_0: entered promiscuous mode [ 374.924389][T10778] hsr_slave_1: entered promiscuous mode [ 374.931359][T10778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.940576][T10778] Cannot create hsr debugfs directory [ 374.965034][ T54] Bluetooth: hci4: command tx timeout [ 375.017414][T10782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.057250][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.131039][T10782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.135302][ T54] Bluetooth: hci2: command tx timeout [ 375.165086][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.396446][T10782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.432819][T10782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.442954][ T12] bridge_slave_1: left allmulticast mode [ 375.454035][ T12] bridge_slave_1: left promiscuous mode [ 375.460257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.482545][ T12] bridge_slave_0: left allmulticast mode [ 375.488773][ T12] bridge_slave_0: left promiscuous mode [ 375.494502][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.948112][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.960637][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.971971][ T12] bond0 (unregistering): Released all slaves [ 376.079799][ T12] bond1 (unregistering): Released all slaves [ 376.092493][T10782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.121036][T10782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.189693][ T12] tipc: Disabling bearer [ 376.199494][ T12] tipc: Left network mode [ 376.418940][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.449349][T10780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.496956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.504402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.517472][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.525681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.553001][ T12] veth1_macvtap: left promiscuous mode [ 376.559955][ T12] veth0_macvtap: left promiscuous mode [ 376.566227][ T12] veth1_vlan: left promiscuous mode [ 376.571576][ T12] veth0_vlan: left promiscuous mode [ 376.702250][ T12] team0 (unregistering): Port device macvlan2 removed [ 376.884847][ T54] Bluetooth: hci1: command tx timeout [ 376.891335][ T4618] Bluetooth: hci0: command tx timeout [ 376.965253][ T4618] Bluetooth: hci3: command tx timeout [ 377.048493][ T4618] Bluetooth: hci4: command tx timeout [ 377.157840][ T12] team0 (unregistering): Port device team_slave_1 removed [ 377.202627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 377.209968][ T4618] Bluetooth: hci2: command tx timeout [ 377.629304][T10780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.643731][T10780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.673732][T10780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.708712][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.765788][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.772970][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.798497][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.805775][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.001086][T10786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 378.012149][T10786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.127147][T10786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 378.137861][T10786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.181254][ T12] IPVS: stop unused estimator thread 0... [ 378.193590][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.248732][T10786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 378.266335][T10786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.330734][T10780] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.380949][T10786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 378.392112][T10786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.409461][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.416672][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.427650][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.434854][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.462462][T10782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.567882][T10778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.659193][T10778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.680083][T10782] veth0_vlan: entered promiscuous mode [ 378.705450][T10782] veth1_vlan: entered promiscuous mode [ 378.767459][T10778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.896287][T10778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.948242][T10782] veth0_macvtap: entered promiscuous mode [ 378.960660][T10782] veth1_macvtap: entered promiscuous mode [ 378.974609][T10780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.037477][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.048333][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.058942][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.070868][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.080915][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.091395][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.102847][T10782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.118248][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.129988][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.140784][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.151830][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.161998][T10782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.172544][T10782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.183896][T10782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.274993][T10782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.283750][T10782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.293081][T10782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.302029][T10782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.326578][T10784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.337915][T10784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.348146][T10784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.364465][T10780] veth0_vlan: entered promiscuous mode [ 379.373814][T10784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.474708][T10780] veth1_vlan: entered promiscuous mode [ 379.526164][T10786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.553648][T10786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.585077][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.592957][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.615555][T10786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.658676][T10786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.683226][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.700832][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.764225][T10778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.809352][T10780] veth0_macvtap: entered promiscuous mode [ 379.821779][T10778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.839058][T10778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.879823][T10780] veth1_macvtap: entered promiscuous mode [ 379.888791][T10778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.001677][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.019239][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.029481][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.040963][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.051338][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.062745][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.073032][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.083941][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.107175][T10780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.149601][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.175773][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.194718][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.217222][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.227405][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.241683][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.252217][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.263147][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.275325][T10780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.297902][T10780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.317844][T10780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.334826][T10780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.343728][T10780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.391722][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.559836][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.606821][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.614032][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.650106][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.657400][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.680899][T10786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.701288][T10836] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1457'. [ 380.716096][T10836] netlink: 'syz.1.1457': attribute type 2 has an invalid length. [ 380.726842][T10836] IPv6: Can't replace route, no match found [ 380.754539][T10778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.771945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.798142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.824267][T10786] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.877579][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.896120][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.920032][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.927273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.951022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.958341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.047554][T10778] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.148615][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.155863][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.201968][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.209200][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.707339][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.082903][T10778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.129564][T10786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.143677][T10871] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 382.174790][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 382.200145][T10874] ip6gre0: entered promiscuous mode [ 382.206133][T10874] ip6gre0: entered allmulticast mode [ 382.225403][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 382.262973][T10874] ip6gre0: left promiscuous mode [ 382.282253][T10874] ip6gre0: left allmulticast mode [ 382.349143][T10878] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 382.609842][T10784] veth0_vlan: entered promiscuous mode [ 382.628620][T10778] veth0_vlan: entered promiscuous mode [ 382.657251][T10786] veth0_vlan: entered promiscuous mode [ 382.695549][T10778] veth1_vlan: entered promiscuous mode [ 382.752353][T10784] veth1_vlan: entered promiscuous mode [ 382.768756][T10786] veth1_vlan: entered promiscuous mode [ 382.882895][T10778] veth0_macvtap: entered promiscuous mode [ 382.939416][T10778] veth1_macvtap: entered promiscuous mode [ 382.949545][T10786] veth0_macvtap: entered promiscuous mode [ 382.963309][T10786] veth1_macvtap: entered promiscuous mode [ 382.993039][T10784] veth0_macvtap: entered promiscuous mode [ 383.031403][T10784] veth1_macvtap: entered promiscuous mode [ 383.059329][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.072070][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.082353][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.092936][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.103037][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.113658][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.123936][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.137865][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.148793][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.159568][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.171996][T10786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.196474][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.232514][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.261015][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.285515][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.304686][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.324734][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.346526][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.368008][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.384684][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.405454][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.427808][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.445578][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.467470][T10778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.493562][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.504346][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.514276][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.531639][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.552796][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.563384][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.584815][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.610135][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.626006][T10778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.636816][T10778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.662389][T10778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.699979][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.713725][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.734207][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.745828][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.756213][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.770614][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.780745][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.791535][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.803536][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.814231][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.827806][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.838639][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.861493][T10786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.898926][T10778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.910230][T10778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.919031][T10778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.946712][T10778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.967757][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.983226][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.994846][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.006043][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.017059][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.027791][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.037691][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.050739][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.062707][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.073448][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.083315][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.100340][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.110505][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.121229][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.145996][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.191113][T10786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.202628][T10786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.233164][T10786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.242233][T10786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.260607][ T61] bridge_slave_1: left allmulticast mode [ 384.269993][ T61] bridge_slave_1: left promiscuous mode [ 384.286187][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.298167][ T61] bridge_slave_0: left allmulticast mode [ 384.303859][ T61] bridge_slave_0: left promiscuous mode [ 384.319230][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.784749][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.798459][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.815995][ T61] bond0 (unregistering): Released all slaves [ 384.835610][ T61] bond1 (unregistering): Released all slaves [ 384.851120][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.862075][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.875365][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.886544][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.896777][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.907341][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.917391][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.931190][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.950490][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.961263][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.980944][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.991543][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.001535][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.012272][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.024416][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.047765][T10902] bridge0: port 3(vlan2) entered blocking state [ 385.056718][T10902] bridge0: port 3(vlan2) entered disabled state [ 385.063485][T10902] vlan2: entered allmulticast mode [ 385.082468][T10902] vlan2: left allmulticast mode [ 385.118882][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 385.200869][T10784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.224743][T10784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.240843][T10784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.252121][T10784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.273526][ T61] ɶƣ0GC: left promiscuous mode [ 385.467892][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 385.552528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.569840][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.588762][ T61] hsr_slave_0: left promiscuous mode [ 385.608694][ T61] 0: left promiscuous mode [ 385.622939][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.632828][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.641752][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.649329][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.687489][ T61] veth1_macvtap: left promiscuous mode [ 385.694326][ T61] veth1_vlan: left promiscuous mode [ 385.700024][ T61] veth0_vlan: left promiscuous mode [ 385.886635][T10919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1477'. [ 385.907538][T10919] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1477'. [ 385.923550][T10919] netlink: 'syz.1.1477': attribute type 5 has an invalid length. [ 385.933507][T10919] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1477'. [ 386.469761][ T61] team0 (unregistering): Port device team_slave_1 removed [ 386.542663][ T61] team0 (unregistering): Port device team_slave_0 removed [ 386.958779][T10920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1477'. [ 386.986072][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.013917][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.104492][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.121546][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.302256][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.334242][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.389619][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.409503][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.519133][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.548420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.576870][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.616916][T10933] eth0_vlan: renamed from bridge_slave_1 (while UP) [ 387.678251][T10936] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 387.696948][T10936] bridge0: port 2(eth0_vlan) entered disabled state [ 387.704460][T10936] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.764385][T10936] bridge0: port 2(eth0_vlan) entered blocking state [ 387.771449][T10936] bridge0: port 2(eth0_vlan) entered forwarding state [ 387.778707][T10936] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.785954][T10936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.803457][T10936] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 387.893170][T10944] Bluetooth: MGMT ver 1.23 [ 387.907418][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 387.936218][T10944] vlan0: entered promiscuous mode [ 387.952321][T10944] vlan0: entered allmulticast mode [ 387.967445][T10944] veth0_vlan: entered allmulticast mode [ 387.987654][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 388.003061][T10947] veth0_vlan: left allmulticast mode [ 388.017947][T10947] vlan0: left promiscuous mode [ 388.032553][T10947] vlan0: left allmulticast mode [ 388.071197][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 388.469923][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 388.581167][T10969] netlink: 'syz.4.1493': attribute type 7 has an invalid length. [ 388.604265][T10969] netlink: 'syz.4.1493': attribute type 8 has an invalid length. [ 388.624192][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1495'. [ 388.646802][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 388.879172][T10983] sit0: entered promiscuous mode [ 388.893710][T10983] sit0: entered allmulticast mode [ 388.931925][T10983] sit0: left promiscuous mode [ 388.945580][T10983] sit0: left allmulticast mode [ 389.468941][T11007] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.510398][T11007] Bluetooth: MGMT ver 1.23 [ 389.941295][T11024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.081812][T11036] vxcan0: entered promiscuous mode [ 390.097560][T11036] vxcan0: entered allmulticast mode [ 390.118220][T11036] vxcan0: left promiscuous mode [ 390.131862][T11036] vxcan0: left allmulticast mode [ 390.654474][T11054] xt_TCPMSS: Only works on TCP SYN packets [ 391.130861][T11067] __nla_validate_parse: 12 callbacks suppressed [ 391.130885][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 391.234285][T11069] netlink: 'syz.4.1531': attribute type 3 has an invalid length. [ 391.254847][T11069] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1531'. [ 391.398651][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 391.477798][T11086] pimreg: entered allmulticast mode [ 391.492244][T11086] pimreg: left allmulticast mode [ 391.613969][T11093] netlink: 'syz.4.1537': attribute type 3 has an invalid length. [ 391.627395][T11088] netlink: 'syz.2.1525': attribute type 30 has an invalid length. [ 391.641213][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 391.653291][T11088] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 391.665983][T11093] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1537'. [ 391.909657][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 392.170972][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 392.213329][T11122] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1547'. [ 392.380862][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 392.411292][T11130] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.433408][T11130] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.445859][T11130] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.466168][T11130] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.515095][T11130] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.535191][T11130] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.561400][T11130] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.572896][T11130] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.582751][T11130] geneve2: entered promiscuous mode [ 392.592335][T11130] geneve2: entered allmulticast mode [ 392.634173][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 392.673497][T11134] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.684890][T11134] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.704870][T11134] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.725205][T11134] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.738084][T11134] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.768052][T11134] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.784299][T11134] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.797538][T11134] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 392.814567][T11134] geneve2: entered promiscuous mode [ 392.831354][T11134] geneve2: entered allmulticast mode [ 393.046088][T11160] sctp: [Deprecated]: syz.2.1559 (pid 11160) Use of int in max_burst socket option. [ 393.046088][T11160] Use struct sctp_assoc_value instead [ 393.772226][T11197] netlink: 'syz.1.1571': attribute type 1 has an invalid length. [ 393.819586][T11201] sctp: [Deprecated]: syz.0.1573 (pid 11201) Use of int in max_burst socket option deprecated. [ 393.819586][T11201] Use struct sctp_assoc_value instead [ 393.898730][T11207] veth1_to_batadv: entered promiscuous mode [ 393.909494][T11207] veth1_to_batadv: entered allmulticast mode [ 393.926395][T11208] netlink: 'syz.0.1573': attribute type 6 has an invalid length. [ 393.954396][T11207] veth1_to_batadv: left promiscuous mode [ 393.977332][T11207] veth1_to_batadv: left allmulticast mode [ 394.812086][T11251] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 394.875391][T11250] veth0_vlan: entered allmulticast mode [ 394.918756][T11250] veth0_vlan: left allmulticast mode [ 395.526726][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.594893][T11274] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 395.710234][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.866617][T11285] Cannot find add_set index 0 as target [ 395.880629][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.917527][T11283] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 395.979479][T11283] team0: Port device netdevsim0 added [ 396.100754][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.323280][T11300] __nla_validate_parse: 15 callbacks suppressed [ 396.323304][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1604'. [ 396.480556][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.499499][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.508679][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.518156][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.554726][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 396.562325][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.563143][ T61] eth0_vlan: left allmulticast mode [ 396.585419][ T61] eth0_vlan: left promiscuous mode [ 396.591239][ T61] bridge0: port 2(eth0_vlan) entered disabled state [ 396.615617][ T61] bridge_slave_0: left allmulticast mode [ 396.626981][ T61] bridge_slave_0: left promiscuous mode [ 396.639304][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.101496][ T61] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 397.281307][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.297057][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.311596][ T61] bond0 (unregistering): Released all slaves [ 397.330085][T11315] netlink: 'syz.3.1607': attribute type 6 has an invalid length. [ 397.553451][T11335] bond_slave_0: entered promiscuous mode [ 397.559598][T11335] bond_slave_1: entered promiscuous mode [ 397.571641][T11335] macsec1: entered promiscuous mode [ 397.577111][T11335] bond0: entered promiscuous mode [ 397.582696][T11335] macsec1: entered allmulticast mode [ 397.603143][T11335] bond0: entered allmulticast mode [ 397.618929][T11335] bond_slave_0: entered allmulticast mode [ 397.635325][T11335] bond_slave_1: entered allmulticast mode [ 397.687247][T11335] bond0: left allmulticast mode [ 397.702382][T11335] bond_slave_0: left allmulticast mode [ 397.708171][T11335] bond_slave_1: left allmulticast mode [ 397.713728][T11335] bond0: left promiscuous mode [ 397.721703][T11335] bond_slave_0: left promiscuous mode [ 397.727222][T11335] bond_slave_1: left promiscuous mode [ 397.814767][T11346] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 398.188233][ T61] hsr_slave_0: left promiscuous mode [ 398.262858][ T61] hsr_slave_1: left promiscuous mode [ 398.295647][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.303134][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.366190][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.387999][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.466332][ T61] veth1_macvtap: left promiscuous mode [ 398.482571][ T61] veth0_macvtap: left promiscuous mode [ 398.497216][ T61] veth1_vlan: left promiscuous mode [ 398.514451][ T61] veth0_vlan: left promiscuous mode [ 398.656179][ T54] Bluetooth: hci1: command tx timeout [ 399.631658][ T61] team0 (unregistering): Port device team_slave_1 removed [ 399.679830][ T61] team0 (unregistering): Port device team_slave_0 removed [ 400.179600][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 400.192490][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 400.497982][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 400.641537][T11307] chnl_net:caif_netlink_parms(): no params data found [ 400.724952][ T54] Bluetooth: hci1: command tx timeout [ 400.909415][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.927994][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.954987][T11307] bridge_slave_0: entered allmulticast mode [ 400.977346][T11307] bridge_slave_0: entered promiscuous mode [ 400.992354][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'. [ 401.020132][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.030040][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.041718][T11307] bridge_slave_1: entered allmulticast mode [ 401.060079][T11307] bridge_slave_1: entered promiscuous mode [ 401.170324][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.193594][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.312810][T11307] team0: Port device team_slave_0 added [ 401.346406][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 401.368946][T11435] netlink: 'syz.0.1639': attribute type 15 has an invalid length. [ 401.392113][T11307] team0: Port device team_slave_1 added [ 401.412657][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 401.434218][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 401.494121][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.515188][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.553139][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.570683][T11445] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 401.572250][T11440] netlink: 'syz.3.1640': attribute type 2 has an invalid length. [ 401.582414][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.607179][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.659889][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.830001][T11307] hsr_slave_0: entered promiscuous mode [ 401.848872][T11307] hsr_slave_1: entered promiscuous mode [ 402.103306][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1649'. [ 402.260306][T11478] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1650'. [ 402.279906][T11478] netlink: 'syz.1.1650': attribute type 9 has an invalid length. [ 402.805169][ T54] Bluetooth: hci1: command tx timeout [ 403.015675][T11307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.028619][T11307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.049644][T11307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.069488][T11307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.340498][T11528] x_tables: duplicate underflow at hook 2 [ 403.379188][T11307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.528700][T11307] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.554258][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.561490][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.595183][T11533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.650082][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.657366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.897468][T11542] netlink: 'syz.4.1670': attribute type 2 has an invalid length. [ 403.934470][T11547] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.943645][T11548] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 403.971121][T11548] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1672'. [ 404.237411][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.333422][T11307] veth0_vlan: entered promiscuous mode [ 404.372101][T11307] veth1_vlan: entered promiscuous mode [ 404.428094][T11307] veth0_macvtap: entered promiscuous mode [ 404.456470][T11569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1676'. [ 404.490059][T11307] veth1_macvtap: entered promiscuous mode [ 404.539590][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.560475][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.574776][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.591642][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.601895][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.612861][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.623380][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.641118][T11573] syz.4.1677[11573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.641505][T11573] syz.4.1677[11573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.653192][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.676266][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.686842][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.698826][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.711433][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.723066][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.745877][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.772119][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.787219][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 404.792925][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.819065][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.833918][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.850317][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.860408][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.874383][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.885163][ T54] Bluetooth: hci1: command tx timeout [ 404.885419][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.902309][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.912287][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.922829][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.960319][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.017030][T11307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.034784][T11307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.052450][T11307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.070270][T11307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.358074][T11492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.378159][T11492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.595475][T11590] tap0: tun_chr_ioctl cmd 1074025677 [ 405.602987][T11590] tap0: linktype set to 825 [ 405.619329][T11494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.639416][T11494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.697679][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 405.756240][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 406.298397][T11617] team_slave_0: entered promiscuous mode [ 406.304146][T11617] team_slave_1: entered promiscuous mode [ 406.310023][T11617] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 406.335381][T11617] macvtap1: entered promiscuous mode [ 406.355915][T11617] team0: entered promiscuous mode [ 406.369612][T11617] macvtap1: entered allmulticast mode [ 406.386968][T11617] team0: entered allmulticast mode [ 406.392568][T11617] team_slave_0: entered allmulticast mode [ 406.398911][T11617] team_slave_1: entered allmulticast mode [ 406.405725][T11617] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 406.417685][T11617] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 406.438915][T11624] __nla_validate_parse: 1 callbacks suppressed [ 406.438938][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 406.612728][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 406.629407][T11632] dccp_invalid_packet: P.Data Offset(102) too large [ 406.714771][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 406.723694][T11637] netlink: 'syz.1.1691': attribute type 7 has an invalid length. [ 406.744592][T11637] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.754003][T11637] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.763536][T11637] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.772382][T11637] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.781790][T11637] vxlan0: entered promiscuous mode [ 406.844357][T11640] bridge0: entered promiscuous mode [ 406.867171][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1692'. [ 406.949402][T11639] bridge0: left promiscuous mode [ 407.114536][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 407.291070][T11670] netlink: 'syz.0.1699': attribute type 3 has an invalid length. [ 407.317372][T11670] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1699'. [ 407.632567][T11678] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.1704'. [ 407.632819][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 407.644243][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 407.660370][T11678] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.1704'. [ 407.710393][T11675] team_slave_0: entered promiscuous mode [ 407.716194][T11675] team_slave_1: entered promiscuous mode [ 407.733038][T11675] macvtap1: entered promiscuous mode [ 407.746469][T11675] team0: entered promiscuous mode [ 407.753104][T11675] macvtap1: entered allmulticast mode [ 407.772209][T11675] team0: entered allmulticast mode [ 407.787157][T11675] team_slave_0: entered allmulticast mode [ 407.794344][T11675] team_slave_1: entered allmulticast mode [ 407.816034][T11675] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 407.951632][T11686] netlink: 'syz.1.1706': attribute type 13 has an invalid length. [ 408.190339][T11701] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 408.296483][T11492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.572224][T11712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 408.596081][T11719] netlink: 'syz.0.1712': attribute type 7 has an invalid length. [ 408.887857][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 409.036491][T11729] macvtap2: entered promiscuous mode [ 409.068164][T11729] macvtap2: entered allmulticast mode [ 409.081202][ T4618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.093144][ T4618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.102169][ T4618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.106423][T11729] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 409.143723][ T4618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.153103][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.162806][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.743979][T11492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.928720][T11492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.026947][T11771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.131166][T11492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.217902][T11776] tipc: Started in network mode [ 410.237034][T11776] tipc: Node identity 1, cluster identity 4711 [ 410.258699][T11776] tipc: Node number set to 1 [ 410.304477][T11735] chnl_net:caif_netlink_parms(): no params data found [ 410.625157][T11492] bridge_slave_1: left allmulticast mode [ 410.630984][T11492] bridge_slave_1: left promiscuous mode [ 410.637084][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.661727][T11492] bridge_slave_0: left allmulticast mode [ 410.673826][T11492] bridge_slave_0: left promiscuous mode [ 410.681809][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.207972][ T4618] Bluetooth: hci1: command tx timeout [ 411.241029][T11492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.253221][T11492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.268097][T11492] bond0 (unregistering): Released all slaves [ 411.486992][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.514891][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.522279][T11735] bridge_slave_0: entered allmulticast mode [ 411.547919][T11735] bridge_slave_0: entered promiscuous mode [ 411.623117][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.636157][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.649060][T11735] bridge_slave_1: entered allmulticast mode [ 411.666640][T11735] bridge_slave_1: entered promiscuous mode [ 411.673893][T11818] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 411.691375][T11818] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 411.797199][T11823] __nla_validate_parse: 10 callbacks suppressed [ 411.797221][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'. [ 411.981945][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.001488][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.031440][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 412.072999][T11823] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 412.242386][T11492] hsr_slave_0: left promiscuous mode [ 412.252224][T11492] hsr_slave_1: left promiscuous mode [ 412.279501][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.304130][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.340215][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 412.343425][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.394276][T11492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.462862][T11492] veth1_macvtap: left promiscuous mode [ 412.479048][T11492] veth0_macvtap: left promiscuous mode [ 412.489765][T11492] veth1_vlan: left promiscuous mode [ 412.495330][T11492] veth0_vlan: left promiscuous mode [ 412.506381][T11840] netlink: 'syz.1.1747': attribute type 11 has an invalid length. [ 412.517278][T11840] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 413.102077][T11492] team0 (unregistering): Port device team_slave_1 removed [ 413.151763][T11492] team0 (unregistering): Port device team_slave_0 removed [ 413.290035][ T4618] Bluetooth: hci1: command tx timeout [ 413.831527][T11735] team0: Port device team_slave_0 added [ 413.878803][T11735] team0: Port device team_slave_1 added [ 413.984759][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.011830][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.058723][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.093209][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.101985][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.132317][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.172609][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'. [ 414.303806][T11858] tipc: Started in network mode [ 414.315060][T11858] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 414.322550][T11858] tipc: Enabled bearer , priority 0 [ 414.389257][T11735] hsr_slave_0: entered promiscuous mode [ 414.397582][T11735] hsr_slave_1: entered promiscuous mode [ 414.406264][T11858] tipc: Enabled bearer , priority 0 [ 414.801870][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 415.373053][ T4618] Bluetooth: hci1: command tx timeout [ 415.435782][ T5284] tipc: Node number set to 10136234 [ 415.456230][T11735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.480951][T11735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 415.523777][T11735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 415.569352][T11735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.657994][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1766'. [ 415.886733][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.957707][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.018169][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 416.045897][T11492] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.053166][T11492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.075910][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.083151][T11492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.661240][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.778169][T11735] veth0_vlan: entered promiscuous mode [ 416.852771][T11735] veth1_vlan: entered promiscuous mode [ 417.039873][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 417.065512][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 417.086801][T11951] bond_slave_0: entered promiscuous mode [ 417.092583][T11951] bond_slave_1: entered promiscuous mode [ 417.099221][T11951] macvtap3: entered promiscuous mode [ 417.104562][T11951] bond0: entered promiscuous mode [ 417.124366][T11951] macvtap3: entered allmulticast mode [ 417.143122][T11951] bond0: entered allmulticast mode [ 417.154304][T11951] bond_slave_0: entered allmulticast mode [ 417.173852][T11951] bond_slave_1: entered allmulticast mode [ 417.188433][T11951] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 417.289138][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 417.367214][T11735] veth0_macvtap: entered promiscuous mode [ 417.446302][ T4618] Bluetooth: hci1: command tx timeout [ 417.464604][T11735] veth1_macvtap: entered promiscuous mode [ 417.508292][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.521176][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.533829][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.547128][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.557423][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.579516][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.596836][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 417.603438][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.650919][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.684157][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.704675][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.724712][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.764702][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.797257][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.858586][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.880309][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.900782][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.927235][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.938701][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 417.956947][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.971453][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.994818][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.015080][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.027221][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.046400][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.071582][T11735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.092706][T11735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.117293][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.135588][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 418.281830][T11987] netlink: 'syz.3.1790': attribute type 9 has an invalid length. [ 418.369183][T11996] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1792'. [ 418.393685][T11735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.403241][T11735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.414289][T11735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.423714][T11735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.453015][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 418.622712][T11998] netlink: 'syz.3.1793': attribute type 2 has an invalid length. [ 418.671678][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.708970][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.768114][T11491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.778424][T11491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.232745][T12029] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 419.282059][T12029] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 419.306823][T12029] team0: Port device netdevsim0 removed [ 419.788026][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 420.376289][T12069] sctp: [Deprecated]: syz.4.1812 (pid 12069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.376289][T12069] Use struct sctp_sack_info instead [ 420.406450][ T4618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 420.414689][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.669285][T12089] dccp_v4_rcv: dropped packet with invalid checksum [ 420.862744][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 420.882581][T12085] dummy0: entered promiscuous mode [ 420.892426][T12085] dummy0: left promiscuous mode [ 421.263071][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.857393][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.038929][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.162108][T12121] netlink: 'syz.4.1830': attribute type 2 has an invalid length. [ 422.172064][ T4618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.181845][ T4618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.185087][T12121] __nla_validate_parse: 5 callbacks suppressed [ 422.185105][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1830'. [ 422.212147][ T4618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.226637][ T4618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.235295][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 422.242891][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.280093][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.760467][ T35] bridge_slave_1: left allmulticast mode [ 422.767879][ T35] bridge_slave_1: left promiscuous mode [ 422.773818][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.798088][ T35] bridge_slave_0: left allmulticast mode [ 422.803796][ T35] bridge_slave_0: left promiscuous mode [ 422.846049][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.499940][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.516000][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.530506][ T35] bond0 (unregistering): Released all slaves [ 423.541088][T12168] SET target dimension over the limit! [ 423.576081][T12168] IPVS: length: 249 != 8 [ 423.863122][T12172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1843'. [ 423.873381][T12172] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.890842][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 423.912058][T12174] wireguard0: entered promiscuous mode [ 423.918233][T12174] wireguard0: entered allmulticast mode [ 423.926681][T12175] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 424.081694][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 424.154671][ T35] hsr_slave_0: left promiscuous mode [ 424.190299][ T35] hsr_slave_1: left promiscuous mode [ 424.207846][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.220854][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.235797][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.252042][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.282247][ T35] veth1_macvtap: left promiscuous mode [ 424.292320][ T35] veth0_macvtap: left promiscuous mode [ 424.300314][ T35] veth1_vlan: left promiscuous mode [ 424.305885][ T35] veth0_vlan: left promiscuous mode [ 424.335254][ T4618] Bluetooth: hci1: command tx timeout [ 424.932128][ T35] team0 (unregistering): Port device team_slave_1 removed [ 424.980393][ T35] team0 (unregistering): Port device team_slave_0 removed [ 425.075834][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 425.491028][T12184] netlink: 'syz.0.1846': attribute type 4 has an invalid length. [ 425.527153][T12187] netlink: 'syz.0.1846': attribute type 4 has an invalid length. [ 425.552039][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 425.601557][T12124] chnl_net:caif_netlink_parms(): no params data found [ 425.754548][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1850'. [ 425.827978][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1851'. [ 425.906292][T12214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1852'. [ 426.075760][T12124] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.109681][T12124] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.135735][T12124] bridge_slave_0: entered allmulticast mode [ 426.181626][T12124] bridge_slave_0: entered promiscuous mode [ 426.200308][T12124] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.215620][T12124] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.233431][T12124] bridge_slave_1: entered allmulticast mode [ 426.255801][T12124] bridge_slave_1: entered promiscuous mode [ 426.405494][ T4618] Bluetooth: hci1: command tx timeout [ 426.507231][T12124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.606346][T12124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.713257][T12237] netlink: 'syz.4.1859': attribute type 6 has an invalid length. [ 426.729499][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 426.778734][T12124] team0: Port device team_slave_0 added [ 426.864027][T12124] team0: Port device team_slave_1 added [ 426.887276][T12238] macvlan2: entered promiscuous mode [ 426.893353][T12238] macvlan2: entered allmulticast mode [ 426.901820][T12238] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 426.915368][T12238] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 426.946571][T12238] team0: Port device macvlan2 added [ 427.117556][T12231] delete_channel: no stack [ 427.194843][T12124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.201851][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.251423][T12124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.279435][T12249] netlink: 'syz.3.1861': attribute type 1 has an invalid length. [ 427.328318][T12124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.336589][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.389730][T12124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.432864][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 427.444153][T12253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.487143][T12249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.494381][T12249] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 427.506078][T12249] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 427.518384][T12249] bond2: (slave ip6gre1): making interface the new active one [ 427.528664][T12249] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 427.736808][T12124] hsr_slave_0: entered promiscuous mode [ 427.754283][T12124] hsr_slave_1: entered promiscuous mode [ 428.485912][ T4618] Bluetooth: hci1: command tx timeout [ 428.603924][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 428.666952][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 428.739822][ T4618] block nbd0: Receive control failed (result -107) [ 428.748681][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 428.795216][T12290] nbd0: detected capacity change from 0 to 256 [ 428.839821][T12124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.880400][T12124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.918378][T12124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.939435][T12124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.119843][T12309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.221068][T12124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.278576][T12124] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.310220][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.317490][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.329661][T12321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.424507][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.431769][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.572104][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'. [ 429.688222][T12328] netlink: 'syz.4.1889': attribute type 3 has an invalid length. [ 429.710501][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 429.718975][T12328] netlink: 'syz.4.1889': attribute type 3 has an invalid length. [ 430.078477][ T35] bridge_slave_1: left allmulticast mode [ 430.105051][ T35] bridge_slave_1: left promiscuous mode [ 430.110887][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.148576][ T35] bridge_slave_0: left allmulticast mode [ 430.154369][ T35] bridge_slave_0: left promiscuous mode [ 430.166203][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.270985][T12359] openvswitch: netlink: ct_state flags 00008300 unsupported [ 430.565357][ T4618] Bluetooth: hci1: command tx timeout [ 430.732623][ T35]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.747457][ T35]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.759966][ T35]  (unregistering): Released all slaves [ 430.881142][ T35] bond1 (unregistering): Released all slaves [ 430.901716][ T35] bond0 (unregistering): Released all slaves [ 430.916193][ T35] bond2 (unregistering): (slave team_slave_1): Releasing active interface [ 430.924826][ T35] team_slave_1: left promiscuous mode [ 430.932782][ T35] bond2 (unregistering): Released all slaves [ 431.164301][ T35] ɶƣ0GC: left promiscuous mode [ 431.218473][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 431.260539][T12371] bond_slave_0: entered promiscuous mode [ 431.266335][T12371] bond_slave_1: entered promiscuous mode [ 431.293949][T12371] macvtap1: entered promiscuous mode [ 431.319009][T12371] bond0: entered promiscuous mode [ 431.335358][T12371] macvtap1: entered allmulticast mode [ 431.341586][T12371] bond0: entered allmulticast mode [ 431.354981][T12371] bond_slave_0: entered allmulticast mode [ 431.363392][T12371] bond_slave_1: entered allmulticast mode [ 431.383998][T12371] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 431.394926][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 431.427739][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 431.455797][T12381] bond0: left allmulticast mode [ 431.464991][T12381] bond_slave_0: left allmulticast mode [ 431.470530][T12381] bond_slave_1: left allmulticast mode [ 431.486139][T12381] bond0: left promiscuous mode [ 431.492944][T12381] bond_slave_0: left promiscuous mode [ 431.498534][T12381] bond_slave_1: left promiscuous mode [ 431.506909][T12381] macvtap1: left promiscuous mode [ 431.511992][T12381] macvtap1: left allmulticast mode [ 431.549730][ T35] tipc: Disabling bearer [ 431.562115][ T35] tipc: Left network mode [ 431.594775][T12382] tipc: Enabled bearer , priority 10 [ 431.612338][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 431.705304][T12124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.912734][ T35] hsr_slave_0: left promiscuous mode [ 431.951820][ T35] hsr_slave_1: left promiscuous mode [ 431.958332][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.968963][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.989898][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.014938][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.090804][ T35] veth1_macvtap: left promiscuous mode [ 432.106108][ T35] veth0_macvtap: left promiscuous mode [ 432.112090][ T35] veth1_vlan: left promiscuous mode [ 432.117756][ T35] veth0_vlan: left promiscuous mode [ 433.643052][ T35] team0 (unregistering): Port device team_slave_0 removed [ 434.446265][T12407] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 434.538400][T12124] veth0_vlan: entered promiscuous mode [ 434.582732][T12124] veth1_vlan: entered promiscuous mode [ 434.755398][T12124] veth0_macvtap: entered promiscuous mode [ 434.799904][T12124] veth1_macvtap: entered promiscuous mode [ 434.892176][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.925866][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.946208][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.975867][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.004764][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.044837][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.085406][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.113375][T12436] xt_TCPMSS: Only works on TCP SYN packets [ 435.125811][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.157385][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.193891][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.226910][T12124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.262269][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 435.325505][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.369253][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.396780][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.434811][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.464938][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.484681][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.504670][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.525053][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.544729][T12124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.564723][T12124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.602764][T12124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.624375][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 435.756439][T12124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.786917][T12448] sctp: [Deprecated]: syz.0.1922 (pid 12448) Use of int in max_burst socket option deprecated. [ 435.786917][T12448] Use struct sctp_assoc_value instead [ 435.802167][T12124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.828124][T12124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.854823][T12124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.895073][T12448] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 435.915122][T12448] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1922'. [ 435.952586][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1923'. [ 436.129007][T11494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.143910][T11494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.197559][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 436.220896][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.234772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.579090][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 436.601040][T12467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 436.627571][T12467] batman_adv: batadv1: Adding interface: netdevsim0 [ 436.634997][T12467] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.689571][T12467] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 436.995663][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.187953][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.328782][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.524360][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.650667][ T35] bridge_slave_1: left allmulticast mode [ 437.656601][ T35] bridge_slave_1: left promiscuous mode [ 437.662362][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.672552][ T35] bridge_slave_0: left allmulticast mode [ 437.678547][ T35] bridge_slave_0: left promiscuous mode [ 437.684444][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.318258][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 438.319457][T12512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1936'. [ 438.372795][T12512] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1936'. [ 438.390419][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.395944][T12512] netlink: 'syz.0.1936': attribute type 5 has an invalid length. [ 438.414125][T12512] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1936'. [ 438.418749][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.434522][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.446216][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.469755][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 438.484976][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.887351][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.900975][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.914995][ T35] bond0 (unregistering): Released all slaves [ 439.001179][T12520] bond_slave_0: entered promiscuous mode [ 439.007051][T12520] bond_slave_1: entered promiscuous mode [ 439.033925][T12520] macvtap2: entered promiscuous mode [ 439.051477][T12528] IPVS: length: 234 != 8 [ 439.052701][T12520] bond0: entered promiscuous mode [ 439.070922][T12520] macvtap2: entered allmulticast mode [ 439.079025][T12520] bond0: entered allmulticast mode [ 439.084336][T12520] bond_slave_0: entered allmulticast mode [ 439.100430][T12520] bond_slave_1: entered allmulticast mode [ 439.110808][T12520] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 439.126989][T12523] bond0: left allmulticast mode [ 439.131900][T12523] bond_slave_0: left allmulticast mode [ 439.144193][T12523] bond_slave_1: left allmulticast mode [ 439.149839][T12523] bond0: left promiscuous mode [ 439.161112][T12523] bond_slave_0: left promiscuous mode [ 439.166693][T12523] bond_slave_1: left promiscuous mode [ 439.195204][T12523] macvtap2: left promiscuous mode [ 439.207438][T12523] macvtap2: left allmulticast mode [ 439.240970][T12533] xt_HMARK: proto mask must be zero with L3 mode [ 439.783416][T12555] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 439.837422][ T35] hsr_slave_0: left promiscuous mode [ 439.857240][ T35] hsr_slave_1: left promiscuous mode [ 439.871321][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.904711][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.931776][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.947482][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.999042][ T35] veth1_macvtap: left promiscuous mode [ 440.005777][ T35] veth0_macvtap: left promiscuous mode [ 440.011748][ T35] veth1_vlan: left promiscuous mode [ 440.017534][ T35] veth0_vlan: left promiscuous mode [ 440.565646][ T4618] Bluetooth: hci1: command tx timeout [ 440.716387][ T35] team0 (unregistering): Port device team_slave_1 removed [ 440.772785][ T35] team0 (unregistering): Port device team_slave_0 removed [ 441.210008][T12555] __nla_validate_parse: 6 callbacks suppressed [ 441.210028][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'. [ 441.247925][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 441.461845][T12577] netlink: 'syz.0.1959': attribute type 3 has an invalid length. [ 441.485656][T12577] netlink: 'syz.0.1959': attribute type 8 has an invalid length. [ 441.493836][T12577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1959'. [ 441.567522][T12513] chnl_net:caif_netlink_parms(): no params data found [ 441.893848][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.925300][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.932757][T12513] bridge_slave_0: entered allmulticast mode [ 441.940654][T12513] bridge_slave_0: entered promiscuous mode [ 441.953270][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.967105][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.974583][T12513] bridge_slave_1: entered allmulticast mode [ 441.986704][T12513] bridge_slave_1: entered promiscuous mode [ 441.998128][T12606] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1967'. [ 442.043200][T12603] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 442.063354][T12603] macvlan2: entered promiscuous mode [ 442.074734][T12603] macvlan2: entered allmulticast mode [ 442.086234][T12603] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 442.227539][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.246942][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 442.277647][T12613] macvtap4: entered promiscuous mode [ 442.283246][T12613] macvtap4: entered allmulticast mode [ 442.291829][T12613] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 442.302607][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.340486][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 442.366259][T12616] macvtap4: left promiscuous mode [ 442.371361][T12616] macvtap4: left allmulticast mode [ 442.473783][T12513] team0: Port device team_slave_0 added [ 442.500436][T12513] team0: Port device team_slave_1 added [ 442.573901][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.581931][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.608781][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.627230][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.634316][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.660887][ T4618] Bluetooth: hci1: command tx timeout [ 442.669447][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.783150][T12513] hsr_slave_0: entered promiscuous mode [ 442.790917][T12513] hsr_slave_1: entered promiscuous mode [ 442.832612][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 443.186669][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 443.505489][T12657] dccp_v4_rcv: dropped packet with invalid checksum [ 443.551250][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 443.584301][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 443.715016][T12662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.880596][T12513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.908080][T12513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.962020][T12513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.996775][T12513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.253553][T12513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.365198][T12513] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.389708][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.396945][T11494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.480582][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.487828][T11492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.516456][ T29] audit: type=1107 audit(1723740738.283:2): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 444.638048][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.645904][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.669426][T12700] No such timeout policy "syz0" [ 444.745312][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.752557][T12701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.760237][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.767441][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.778780][ T4618] Bluetooth: hci1: command tx timeout [ 444.787011][T12701] bridge0: entered promiscuous mode [ 444.792699][T12701] bridge0: entered allmulticast mode [ 444.803966][T12699] netlink: 'syz.4.1996': attribute type 16 has an invalid length. [ 444.932010][T12712] tipc: Enabling of bearer rejected, failed to enable media [ 445.127557][T12513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.309558][T12513] veth0_vlan: entered promiscuous mode [ 445.377337][T12513] veth1_vlan: entered promiscuous mode [ 445.469458][T12513] veth0_macvtap: entered promiscuous mode [ 445.470331][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.522959][T12513] veth1_macvtap: entered promiscuous mode [ 445.597795][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.634945][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.664680][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.677008][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.703407][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.723233][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.744850][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.763343][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.793605][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.840075][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.909717][T12513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.955079][T12735] sit0: entered promiscuous mode [ 445.984419][T12735] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 446.046408][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.071431][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.083437][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.094459][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.114930][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.132029][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.155303][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.178193][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.200341][T12513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.219712][T12513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.262058][T12513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.304175][T12513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.333229][T12513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.351185][T12513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.363937][T12513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.562509][T12761] syz.1.2011: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 446.612670][T12761] CPU: 1 UID: 0 PID: 12761 Comm: syz.1.2011 Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 446.623515][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 446.633740][T12761] Call Trace: [ 446.637059][T12761] [ 446.640019][T12761] dump_stack_lvl+0x241/0x360 [ 446.644765][T12761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.650015][T12761] ? __pfx__printk+0x10/0x10 [ 446.654662][T12761] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 446.661119][T12761] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 446.667660][T12761] warn_alloc+0x278/0x410 [ 446.672035][T12761] ? stack_depot_save_flags+0x29/0x830 [ 446.677514][T12761] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 446.683596][T12761] ? __pfx_warn_alloc+0x10/0x10 [ 446.688467][T12761] ? kasan_save_track+0x3f/0x80 [ 446.693478][T12761] ? __kasan_kmalloc+0x98/0xb0 [ 446.698280][T12761] ? xsk_setsockopt+0x4ea/0x950 [ 446.703168][T12761] ? do_sock_setsockopt+0x3af/0x720 [ 446.708390][T12761] ? __sys_setsockopt+0x1ae/0x250 [ 446.713432][T12761] ? __x64_sys_setsockopt+0xb5/0xd0 [ 446.718643][T12761] ? do_syscall_64+0xf3/0x230 [ 446.723347][T12761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.729447][T12761] __vmalloc_node_range_noprof+0x130/0x1460 [ 446.735475][T12761] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.741821][T12761] ? __kasan_kmalloc+0x98/0xb0 [ 446.746601][T12761] ? xskq_create+0x54/0x170 [ 446.751137][T12761] vmalloc_user_noprof+0x74/0x80 [ 446.756097][T12761] ? xskq_create+0xb6/0x170 [ 446.760613][T12761] xskq_create+0xb6/0x170 [ 446.764958][T12761] xsk_init_queue+0xa1/0x100 [ 446.769566][T12761] xsk_setsockopt+0x4ea/0x950 [ 446.774257][T12761] ? __pfx_xsk_setsockopt+0x10/0x10 [ 446.779474][T12761] ? __pfx_lock_acquire+0x10/0x10 [ 446.784516][T12761] ? aa_sock_opt_perm+0x79/0x120 [ 446.789470][T12761] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 446.795049][T12761] ? security_socket_setsockopt+0x87/0xb0 [ 446.800801][T12761] ? __pfx_xsk_setsockopt+0x10/0x10 [ 446.806019][T12761] do_sock_setsockopt+0x3af/0x720 [ 446.811068][T12761] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 446.816632][T12761] ? __fget_files+0x29/0x470 [ 446.821248][T12761] ? __fget_files+0x3f6/0x470 [ 446.825963][T12761] __sys_setsockopt+0x1ae/0x250 [ 446.830840][T12761] __x64_sys_setsockopt+0xb5/0xd0 [ 446.835881][T12761] do_syscall_64+0xf3/0x230 [ 446.840390][T12761] ? clear_bhb_loop+0x35/0x90 [ 446.845083][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.850994][T12761] RIP: 0033:0x7f55445799b9 [ 446.855422][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.875055][T12761] RSP: 002b:00007f5543fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 446.883485][T12761] RAX: ffffffffffffffda RBX: 00007f5544716130 RCX: 00007f55445799b9 [ 446.891468][T12761] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 446.899450][T12761] RBP: 00007f55445e78d8 R08: 0000000000000004 R09: 0000000000000000 [ 446.907429][T12761] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.915421][T12761] R13: 0000000000000000 R14: 00007f5544716130 R15: 00007ffc5e5ae198 [ 446.923435][T12761] [ 446.940350][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.965320][ T4618] Bluetooth: hci1: command tx timeout [ 446.978292][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.991319][T12761] Mem-Info: [ 446.994505][T12761] active_anon:5442 inactive_anon:0 isolated_anon:0 [ 446.994505][T12761] active_file:1987 inactive_file:38311 isolated_file:0 [ 446.994505][T12761] unevictable:768 dirty:224 writeback:0 [ 446.994505][T12761] slab_reclaimable:9673 slab_unreclaimable:101929 [ 446.994505][T12761] mapped:21748 shmem:3534 pagetables:651 [ 446.994505][T12761] sec_pagetables:0 bounce:0 [ 446.994505][T12761] kernel_misc_reclaimable:0 [ 446.994505][T12761] free:1380398 free_pcp:592 free_cma:0 [ 447.041722][T12761] Node 0 active_anon:21668kB inactive_anon:0kB active_file:7948kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86992kB dirty:892kB writeback:0kB shmem:12500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10244kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no [ 447.055211][T12766] __nla_validate_parse: 5 callbacks suppressed [ 447.055235][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 447.096547][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.115328][T12765] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 447.123200][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.187551][T12761] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 447.279570][T12761] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.374810][T12761] lowmem_reserve[]: 0 2561 2562 0 0 [ 447.400963][T12761] Node 0 DMA32 free:1561528kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:12500kB inactive_anon:0kB active_file:7948kB inactive_file:151864kB unevictable:1536kB writepending:892kB present:3129332kB managed:2651256kB mlocked:0kB bounce:0kB free_pcp:7472kB local_pcp:4520kB free_cma:0kB [ 447.504467][T12761] lowmem_reserve[]: 0 0 1 0 0 [ 447.514596][T12761] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 447.566154][T12761] lowmem_reserve[]: 0 0 0 0 0 [ 447.571061][T12761] Node 1 Normal free:3949408kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.601094][T12761] lowmem_reserve[]: 0 0 0 0 0 [ 447.621714][T12761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.635416][T12761] Node 0 DMA32: 102*4kB (ME) 74*8kB (ME) 225*16kB (UME) 625*32kB (UME) 342*64kB (UME) 158*128kB (UM) 111*256kB (UME) 71*512kB (UME) 38*1024kB (UM) 23*2048kB (UM) 328*4096kB (UM) = 1560984kB [ 447.669515][T12761] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 447.702308][T12761] Node 1 Normal: 2*4kB (UM) 11*8kB (UM) 6*16kB (UM) 13*32kB (UM) 10*64kB (U) 5*128kB (U) 4*256kB (UM) 2*512kB (UM) 3*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3949408kB [ 447.723377][T12761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.734000][T12761] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.745941][T12761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.755891][T12761] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.766136][T12761] 41585 total pagecache pages [ 447.780434][T12761] 0 pages in swap cache [ 447.789302][T12761] Free swap = 124996kB [ 447.798224][T12761] Total swap = 124996kB [ 447.805476][T12794] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2020'. [ 447.807288][T12761] 2097051 pages RAM [ 447.824215][T12761] 0 pages HighMem/MovableOnly [ 447.836852][T12761] 402771 pages reserved [ 447.841245][T12761] 0 pages cma reserved [ 447.900422][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 447.993469][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 448.002800][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 448.096352][T12798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2022'. [ 448.407937][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.790873][T12832] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 448.825695][T12832] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 448.835253][T12832] team0: Failed to send options change via netlink (err -105) [ 448.843041][T12832] team0: Port device netdevsim0 added [ 449.050022][T11494] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 449.074446][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'. [ 449.228737][T12841] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.2035'. [ 449.238163][T12841] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 449.731416][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 449.768503][T12867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2044'. [ 450.032946][T12881] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 450.064993][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.167233][T12881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.263010][T12881] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 450.399425][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.922145][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.012776][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.330999][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.485585][T12906] netlink: 'syz.3.2055': attribute type 2 has an invalid length. [ 451.664304][ T35] bridge_slave_1: left allmulticast mode [ 451.687811][ T35] bridge_slave_1: left promiscuous mode [ 451.693669][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.747082][ T35] bridge_slave_0: left allmulticast mode [ 451.766844][ T35] bridge_slave_0: left promiscuous mode [ 451.772660][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.914513][T12924] netlink: 'syz.1.2061': attribute type 3 has an invalid length. [ 451.953355][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.972801][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.982883][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.005443][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.014555][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.032076][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.165229][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.165587][ T4618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 452.555584][T12914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.660833][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.677194][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.692849][ T35] bond0 (unregistering): Released all slaves [ 452.709222][T12909] __nla_validate_parse: 3 callbacks suppressed [ 452.709247][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 452.734333][T12909] team_slave_0: entered promiscuous mode [ 452.740182][T12909] team_slave_1: entered promiscuous mode [ 452.746002][T12909] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 452.754041][T12909] macvtap1: entered promiscuous mode [ 452.759695][T12909] team0: entered promiscuous mode [ 452.767285][T12909] macvtap1: entered allmulticast mode [ 452.772707][T12909] team0: entered allmulticast mode [ 452.778125][T12909] team_slave_0: entered allmulticast mode [ 452.783884][T12909] team_slave_1: entered allmulticast mode [ 452.789866][T12909] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 452.798921][T12909] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 452.818965][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 452.837787][T12917] team0: left allmulticast mode [ 452.843080][T12917] team_slave_0: left allmulticast mode [ 452.849396][T12917] team_slave_1: left allmulticast mode [ 452.855521][T12917] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 452.862698][T12917] team0: left promiscuous mode [ 452.870067][T12917] team_slave_0: left promiscuous mode [ 452.875622][T12917] team_slave_1: left promiscuous mode [ 452.881174][T12917] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 452.890417][T12917] macvtap1: left promiscuous mode [ 452.896793][T12917] macvtap1: left allmulticast mode [ 453.215527][T12948] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2069'. [ 453.305134][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 453.337606][T12954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2071'. [ 453.395686][ T35] hsr_slave_0: left promiscuous mode [ 453.423628][ T35] hsr_slave_1: left promiscuous mode [ 453.434563][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.442094][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.510945][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.527075][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.600505][ T35] veth1_macvtap: left promiscuous mode [ 453.607963][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'. [ 453.616350][ T35] veth0_macvtap: left promiscuous mode [ 453.622756][ T35] veth1_vlan: left promiscuous mode [ 453.628719][ T35] veth0_vlan: left promiscuous mode [ 453.650942][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 454.084912][ T4618] Bluetooth: hci1: command tx timeout [ 454.721410][ T35] team0 (unregistering): Port device team_slave_1 removed [ 454.770191][ T35] team0 (unregistering): Port device team_slave_0 removed [ 455.530390][ T11] tipc: Subscription rejected, illegal request [ 455.557601][T12989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.560701][T12925] chnl_net:caif_netlink_parms(): no params data found [ 455.723270][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'. [ 455.977549][T12925] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.009046][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.036092][T12925] bridge_slave_0: entered allmulticast mode [ 456.058712][T12925] bridge_slave_0: entered promiscuous mode [ 456.073460][T12925] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.091849][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.099537][T12925] bridge_slave_1: entered allmulticast mode [ 456.118240][T12925] bridge_slave_1: entered promiscuous mode [ 456.164876][ T4618] Bluetooth: hci1: command tx timeout [ 456.277205][T12925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.310382][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 456.318223][T12925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.512982][T12925] team0: Port device team_slave_0 added [ 456.534107][T12925] team0: Port device team_slave_1 added [ 456.698797][T12925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.715346][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.754027][T12925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.771117][T12925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.778334][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.805753][T12925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.003185][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'. [ 457.063347][T12925] hsr_slave_0: entered promiscuous mode [ 457.070582][T12925] hsr_slave_1: entered promiscuous mode [ 457.325996][T13085] IPVS: stopping backup sync thread 11445 ... [ 457.346599][T13085] [ 457.348981][T13085] ====================================================== [ 457.356020][T13085] WARNING: possible circular locking dependency detected [ 457.363071][T13085] 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 Not tainted [ 457.370203][T13085] ------------------------------------------------------ [ 457.377237][T13085] syz.3.2107/13085 is trying to acquire lock: [ 457.383306][T13085] ffffffff8fc81f48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mc_drop_socket+0x81/0x280 [ 457.392213][T13085] [ 457.392213][T13085] but task is already holding lock: [ 457.399581][T13085] ffff88801f3d5750 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 457.409714][T13085] [ 457.409714][T13085] which lock already depends on the new lock. [ 457.409714][T13085] [ 457.420138][T13085] [ 457.420138][T13085] the existing dependency chain (in reverse order) is: [ 457.429150][T13085] [ 457.429150][T13085] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 457.437761][T13085] lock_acquire+0x1ed/0x550 [ 457.442800][T13085] __mutex_lock+0x136/0xd70 [ 457.447836][T13085] smc_switch_to_fallback+0x35/0xdb0 [ 457.453652][T13085] smc_sendmsg+0x11f/0x530 [ 457.458594][T13085] __sock_sendmsg+0x221/0x270 [ 457.463803][T13085] __sys_sendto+0x3a4/0x4f0 [ 457.468936][T13085] __x64_sys_sendto+0xde/0x100 [ 457.474229][T13085] do_syscall_64+0xf3/0x230 [ 457.479260][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.485682][T13085] [ 457.485682][T13085] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 457.493340][T13085] lock_acquire+0x1ed/0x550 [ 457.498398][T13085] lock_sock_nested+0x48/0x100 [ 457.503696][T13085] do_ip_setsockopt+0x1a2d/0x3cd0 [ 457.509257][T13085] ip_setsockopt+0x63/0x100 [ 457.514292][T13085] do_sock_setsockopt+0x3af/0x720 [ 457.519845][T13085] __sys_setsockopt+0x1ae/0x250 [ 457.525224][T13085] __x64_sys_setsockopt+0xb5/0xd0 [ 457.530797][T13085] do_syscall_64+0xf3/0x230 [ 457.535842][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.542276][T13085] [ 457.542276][T13085] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 457.549500][T13085] validate_chain+0x18e0/0x5900 [ 457.555227][T13085] __lock_acquire+0x137a/0x2040 [ 457.560618][T13085] lock_acquire+0x1ed/0x550 [ 457.565660][T13085] __mutex_lock+0x136/0xd70 [ 457.570713][T13085] ip_mc_drop_socket+0x81/0x280 [ 457.576096][T13085] inet_release+0x96/0x200 [ 457.581053][T13085] sock_release+0x82/0x150 [ 457.586028][T13085] stop_sync_thread+0x4e6/0x5e0 [ 457.591410][T13085] do_ip_vs_set_ctl+0x47b/0x13d0 [ 457.596880][T13085] nf_setsockopt+0x295/0x2c0 [ 457.602113][T13085] smc_setsockopt+0x275/0xe50 [ 457.607333][T13085] do_sock_setsockopt+0x3af/0x720 [ 457.612994][T13085] __sys_setsockopt+0x1ae/0x250 [ 457.618391][T13085] __x64_sys_setsockopt+0xb5/0xd0 [ 457.623957][T13085] do_syscall_64+0xf3/0x230 [ 457.628997][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.635419][T13085] [ 457.635419][T13085] other info that might help us debug this: [ 457.635419][T13085] [ 457.645743][T13085] Chain exists of: [ 457.645743][T13085] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 457.645743][T13085] [ 457.659326][T13085] Possible unsafe locking scenario: [ 457.659326][T13085] [ 457.666782][T13085] CPU0 CPU1 [ 457.672146][T13085] ---- ---- [ 457.677514][T13085] lock(&smc->clcsock_release_lock); [ 457.682893][T13085] lock(sk_lock-AF_INET); [ 457.689847][T13085] lock(&smc->clcsock_release_lock); [ 457.697747][T13085] lock(rtnl_mutex); [ 457.701737][T13085] [ 457.701737][T13085] *** DEADLOCK *** [ 457.701737][T13085] [ 457.709891][T13085] 1 lock held by syz.3.2107/13085: [ 457.715026][T13085] #0: ffff88801f3d5750 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 457.725664][T13085] [ 457.725664][T13085] stack backtrace: [ 457.731638][T13085] CPU: 0 UID: 0 PID: 13085 Comm: syz.3.2107 Not tainted 6.11.0-rc2-syzkaller-00393-ga9c60712d71f #0 [ 457.742397][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 457.752451][T13085] Call Trace: [ 457.755736][T13085] [ 457.758679][T13085] dump_stack_lvl+0x241/0x360 [ 457.763400][T13085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.768625][T13085] ? print_circular_bug+0x130/0x1a0 [ 457.773828][T13085] check_noncircular+0x36a/0x4a0 [ 457.778768][T13085] ? __pfx_check_noncircular+0x10/0x10 [ 457.784238][T13085] ? __pfx_check_noncircular+0x10/0x10 [ 457.789709][T13085] ? lockdep_lock+0x123/0x2b0 [ 457.794402][T13085] ? validate_chain+0x15b1/0x5900 [ 457.799429][T13085] ? _find_first_zero_bit+0xd3/0x100 [ 457.804729][T13085] validate_chain+0x18e0/0x5900 [ 457.809597][T13085] ? __pfx_validate_chain+0x10/0x10 [ 457.814813][T13085] ? mark_lock+0x9a/0x350 [ 457.819160][T13085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 457.825504][T13085] ? finish_task_switch+0x1e5/0x870 [ 457.830703][T13085] ? lockdep_hardirqs_on+0x99/0x150 [ 457.835914][T13085] ? mark_lock+0x9a/0x350 [ 457.840275][T13085] __lock_acquire+0x137a/0x2040 [ 457.845144][T13085] lock_acquire+0x1ed/0x550 [ 457.849672][T13085] ? ip_mc_drop_socket+0x81/0x280 [ 457.854710][T13085] ? __pfx_lock_acquire+0x10/0x10 [ 457.859747][T13085] ? __pfx___might_resched+0x10/0x10 [ 457.865053][T13085] __mutex_lock+0x136/0xd70 [ 457.869572][T13085] ? ip_mc_drop_socket+0x81/0x280 [ 457.874631][T13085] ? _raw_spin_unlock_irq+0x2e/0x50 [ 457.879854][T13085] ? wait_for_completion+0x555/0x620 [ 457.885159][T13085] ? ip_mc_drop_socket+0x81/0x280 [ 457.890198][T13085] ? __pfx___mutex_lock+0x10/0x10 [ 457.895238][T13085] ? __mutex_unlock_slowpath+0x21d/0x750 [ 457.900893][T13085] ? __pfx_try_to_wake_up+0x10/0x10 [ 457.906119][T13085] ip_mc_drop_socket+0x81/0x280 [ 457.910984][T13085] inet_release+0x96/0x200 [ 457.915410][T13085] sock_release+0x82/0x150 [ 457.919841][T13085] stop_sync_thread+0x4e6/0x5e0 [ 457.924708][T13085] do_ip_vs_set_ctl+0x47b/0x13d0 [ 457.929666][T13085] ? __pfx___might_resched+0x10/0x10 [ 457.934969][T13085] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 457.940358][T13085] ? rcu_is_watching+0x15/0xb0 [ 457.945138][T13085] ? __mutex_unlock_slowpath+0x21d/0x750 [ 457.950873][T13085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.956874][T13085] ? __pfx___mutex_lock+0x10/0x10 [ 457.961903][T13085] ? module_put+0x13a/0x2d0 [ 457.966414][T13085] nf_setsockopt+0x295/0x2c0 [ 457.971019][T13085] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 457.977011][T13085] smc_setsockopt+0x275/0xe50 [ 457.981694][T13085] ? __pfx_smc_setsockopt+0x10/0x10 [ 457.986906][T13085] ? aa_sock_opt_perm+0x79/0x120 [ 457.991853][T13085] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 457.997411][T13085] ? security_socket_setsockopt+0x87/0xb0 [ 458.003144][T13085] ? __pfx_smc_setsockopt+0x10/0x10 [ 458.008347][T13085] do_sock_setsockopt+0x3af/0x720 [ 458.013382][T13085] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 458.018935][T13085] ? __fget_files+0x29/0x470 [ 458.023540][T13085] ? __fget_files+0x3f6/0x470 [ 458.028233][T13085] __sys_setsockopt+0x1ae/0x250 [ 458.033093][T13085] __x64_sys_setsockopt+0xb5/0xd0 [ 458.038125][T13085] do_syscall_64+0xf3/0x230 [ 458.042629][T13085] ? clear_bhb_loop+0x35/0x90 [ 458.047315][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.053213][T13085] RIP: 0033:0x7f77c39799b9 [ 458.057632][T13085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.077245][T13085] RSP: 002b:00007f77c33ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.085685][T13085] RAX: ffffffffffffffda RBX: 00007f77c3b16058 RCX: 00007f77c39799b9 [ 458.093677][T13085] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000006 [ 458.101654][T13085] RBP: 00007f77c39e78d8 R08: 0000000000000018 R09: 0000000000000000 [ 458.109628][T13085] R10: 00000000200011c0 R11: 0000000000000246 R12: 0000000000000000 [ 458.117602][T13085] R13: 0000000000000000 R14: 00007f77c3b16058 R15: 00007ffccb920e68 [ 458.125590][T13085] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 458.205757][T13089] block nbd3: not configured, cannot reconfigure [ 458.247443][ T4618] Bluetooth: hci1: command tx timeout [ 458.899201][ T35] bridge_slave_1: left allmulticast mode [ 458.905206][ T35] bridge_slave_1: left promiscuous mode [ 458.911575][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.920304][ T35] bridge_slave_0: left allmulticast mode [ 458.926010][ T35] bridge_slave_0: left promiscuous mode [ 458.931711][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.049072][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.060724][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.071087][ T35] bond0 (unregistering): Released all slaves [ 459.141348][ T35] hsr_slave_0: left promiscuous mode [ 459.150527][ T35] hsr_slave_1: left promiscuous mode [ 459.160203][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.169821][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.252062][ T35] team0 (unregistering): Port device team_slave_1 removed [ 459.279206][ T35] team0 (unregistering): Port device team_slave_0 removed [ 459.763522][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.840497][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.902918][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.940638][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.025612][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.091021][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.140562][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.198017][ T35] team0: Port device netdevsim0 removed [ 460.205372][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.281775][ T35] bridge_slave_1: left allmulticast mode [ 460.287502][ T35] bridge_slave_1: left promiscuous mode [ 460.293196][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.302502][ T35] bridge_slave_0: left allmulticast mode [ 460.308327][ T35] bridge_slave_0: left promiscuous mode [ 460.314019][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.326449][ T35] bridge_slave_1: left allmulticast mode [ 460.332124][ T35] bridge_slave_1: left promiscuous mode [ 460.338877][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.348501][ T35] bridge_slave_0: left allmulticast mode [ 460.354185][ T35] bridge_slave_0: left promiscuous mode [ 460.360070][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.762230][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.772696][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.784106][ T35] bond0 (unregistering): Released all slaves [ 460.799585][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.810097][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.820548][ T35] bond0 (unregistering): Released all slaves [ 460.879202][ T35] tipc: Disabling bearer [ 460.885037][ T35] tipc: Left network mode [ 461.098926][ T35] mac80211_hwsim hwsim40 wlan0 (unregistering): left allmulticast mode [ 461.146997][ T35] hsr_slave_0: left promiscuous mode [ 461.152822][ T35] hsr_slave_1: left promiscuous mode [ 461.158946][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.166405][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.174147][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.183131][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.194325][ T35] hsr_slave_0: left promiscuous mode [ 461.201355][ T35] hsr_slave_1: left promiscuous mode [ 461.207710][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.215249][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.223066][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.231091][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.245141][ T35] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 461.252196][ T35] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 461.259618][ T35] team0: left allmulticast mode [ 461.264482][ T35] team_slave_0: left allmulticast mode [ 461.270101][ T35] team_slave_1: left allmulticast mode [ 461.275737][ T35] team0: left promiscuous mode [ 461.280951][ T35] team_slave_0: left promiscuous mode [ 461.286422][ T35] team_slave_1: left promiscuous mode [ 461.292149][ T35] veth1_macvtap: left promiscuous mode [ 461.297703][ T35] veth0_macvtap: left promiscuous mode [ 461.303260][ T35] veth1_vlan: left promiscuous mode [ 461.309582][ T35] veth0_vlan: left promiscuous mode [ 461.316273][ T35] veth1_macvtap: left promiscuous mode [ 461.321831][ T35] veth0_macvtap: left promiscuous mode [ 461.327560][ T35] veth1_vlan: left promiscuous mode [ 461.464157][ T35] team0 (unregistering): Port device macvlan2 removed [ 461.661257][ T35] team0 (unregistering): Port device team_slave_1 removed [ 461.686926][ T35] team0 (unregistering): Port device team_slave_0 removed [ 461.977507][ T35] team0 (unregistering): Port device team_slave_1 removed [ 462.009146][ T35] team0 (unregistering): Port device team_slave_0 removed [ 462.692385][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.702729][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.750563][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.761433][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.822261][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.832705][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.894403][ T35] batman_adv: batadv1: Removing interface: netdevsim0 [ 462.902177][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.912506][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.970520][ T35] bridge_slave_1: left allmulticast mode [ 462.976376][ T35] bridge_slave_1: left promiscuous mode [ 462.982079][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.991214][ T35] bridge_slave_0: left allmulticast mode [ 462.996937][ T35] bridge_slave_0: left promiscuous mode [ 463.002939][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.341581][ T35] bond0 (unregistering): left allmulticast mode [ 463.348097][ T35] bond_slave_0: left allmulticast mode [ 463.353594][ T35] bond_slave_1: left allmulticast mode [ 463.359093][ T35] bond0 (unregistering): left promiscuous mode [ 463.365430][ T35] bond_slave_0: left promiscuous mode [ 463.371012][ T35] bond_slave_1: left promiscuous mode [ 463.393022][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.403290][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.413423][ T35] bond0 (unregistering): Released all slaves [ 463.462667][ T35] tipc: Disabling bearer [ 463.469703][ T35] tipc: Disabling bearer [ 463.475965][ T35] tipc: Left network mode [ 463.623375][ T35] hsr_slave_0: left promiscuous mode [ 463.629277][ T35] hsr_slave_1: left promiscuous mode [ 463.636290][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.643688][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.651737][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.661551][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.676965][ T35] team0: left allmulticast mode [ 463.681941][ T35] team_slave_0: left allmulticast mode [ 463.687612][ T35] team_slave_1: left allmulticast mode [ 463.693080][ T35] team0: left promiscuous mode [ 463.698226][ T35] team_slave_0: left promiscuous mode [ 463.703625][ T35] team_slave_1: left promiscuous mode [ 463.709108][ T35] veth1_macvtap: left promiscuous mode [ 463.715102][ T35] veth0_macvtap: left promiscuous mode [ 463.720836][ T35] veth1_vlan: left promiscuous mode [ 463.726099][ T35] veth0_vlan: left promiscuous mode [ 463.952399][ T35] team0 (unregistering): Port device team_slave_1 removed [ 463.982825][ T35] team0 (unregistering): Port device team_slave_0 removed