last executing test programs: 1m52.443309332s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 1m51.659533611s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m36.608388091s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m34.412076202s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 1m19.899033934s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m19.100889695s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 1m15.288077595s ago: executing program 4 (id=712): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f00000006c0)={0x23, 0x22, 0xf1, 0xf}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 1m15.119264712s ago: executing program 4 (id=715): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x73) 1m14.663869658s ago: executing program 4 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'sha256-avx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async) socket(0x25, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54110000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) 1m4.401312042s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 1m3.391624178s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m0.979458811s ago: executing program 4 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'sha256-avx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async) socket(0x25, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54110000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) 45.393419725s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 44.042595113s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 42.591731019s ago: executing program 4 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'sha256-avx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async) socket(0x25, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54110000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) 36.700722827s ago: executing program 0 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f4}]}, 0x24}}, 0x0) 36.520215562s ago: executing program 0 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x13, 0x2, 0x1, 0x4, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 36.252111911s ago: executing program 0 (id=852): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) 36.110204383s ago: executing program 0 (id=854): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 35.940847827s ago: executing program 0 (id=856): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x200}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x1a, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) 34.733463564s ago: executing program 0 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) unshare(0x68040200) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async) close(r7) openat$cgroup_ro(r7, &(0x7f0000001280)='memory.swap.events\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000071da11d52de75082000500"/120], 0x78) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 16.005178587s ago: executing program 32 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) unshare(0x68040200) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async) close(r7) openat$cgroup_ro(r7, &(0x7f0000001280)='memory.swap.events\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000071da11d52de75082000500"/120], 0x78) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 7.514578406s ago: executing program 1 (id=134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="44b1af9b7e4dcac5306ee67568b407521e2eb74de5a564a96fe7", 0x1a}], 0x1, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x10}, 0x4000001) (async, rerun: 64) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="66b641", 0x3}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x9, 0xa1b8, 0x5, 0x3, 0x2}, 0x14) (rerun: 32) 6.580242657s ago: executing program 3 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016000000000000000000ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f0000004580)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.970554343s ago: executing program 4 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, 'sha256-avx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async) socket(0x25, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54110000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2517000000a40004803c00078008000200ff0700000800020002000000080003000700000008000100150000000800030002000000080001000d00000008000300040000000900010073797a31000000000900010073797a30000000004c0007800800030007000000080003008100000008000300060000000800020002000000080001000a00000008000400020000000800040002000000080002000900000008000400010000009c0001800800030027060000080003000100000038000400200001000a004e210000000920010000000000000000000000000001000000001400020002000d2ce000000200000000000000000d0001007564703a73797a320000000038000400200001000a004e2400000060ff020000000000000000000000000001090000001400020002000009ac14143400000000000000000800030084080000"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) 1.227414469s ago: executing program 2 (id=893): r0 = socket(0x25, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x69, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x2, 0x8001, 0x80000001, 0x1}, {0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x3, 0x1, 0xb, 0xad}]}}]}}]}, 0x94}}, 0x4000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast2, 0x2, 0xffff, 0x8001, 0x100, 0x6, 0x3000080}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.039386481s ago: executing program 2 (id=894): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x335) write$cgroup_int(r2, &(0x7f0000000040), 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x86, 0x40, 0x9, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 515.064126ms ago: executing program 2 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) 482.731756ms ago: executing program 2 (id=896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) (async) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8}, 0x40) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket(0x200000100000011, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x66c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x630, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x600, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c2, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0x15, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2a, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd0, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa2, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x7c, 0x2, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x66c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x630, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x600, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c2, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xfc, 0x15, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2a, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd0, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa2, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x7c, 0x2, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r5, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000008c0)) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x8000, 0x3, 0x5}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) accept4$tipc(r9, &(0x7f0000000080)=@id, &(0x7f0000000200)=0x10, 0x800) (async) r10 = accept4$tipc(r9, &(0x7f0000000080)=@id, &(0x7f0000000200)=0x10, 0x800) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="5c1375b6ae8b240d9d47b9001473c972cdd081d3b625a7bc462f6a78cd2019eef688a91033d0a43d27f6400c872f42b642373fb8e2f20610e02de8b20ae1d303e630605e6220bd24d51f81c9819ab8fb9726d7397442391ac3609e218c440fd8de4e7d28444d7afdd2ba8192e72a8f5a8959fc16be3fe9f9d6df793d5ab6b0749bb8ecb4"}, {&(0x7f0000000300)="e4dd56567430500de2f5559acc654dfe5f98bd94427b3e2c091a9c0c51b056c948cd6e857b54099ef90fecd9fc2f14e84f8d2e0caa6aefc5ec7e8ee771c20d7d781722bec8ef2c31bd3186dfd3351708214889d3098f9c938042dc85029f9fe981c4dc78ce9aeb828823051230f0"}, {&(0x7f0000000380)="db87"}, {&(0x7f00000003c0)="8319fadce3838e2d90cc4f27c9fa060ee7025c1421ad6eb7e81fe38794e543586d3cd89b10bfff228f"}, {&(0x7f0000000540)="354d5167558ad24a6fa7ec541309c8fb2140cace469507b8b839c3eab9710684dd4545a98b4d658d27f063f250125880e07d89e912ebd302a89713d4c14ea3c59b62a276cf1958badee4e8941594200f8bc04954eef51365088e438e43bc2a7162e96b8ff13982b3040b8b17d405a681598dd307c4e30a3d1521e3db7d5d98cf959da5640277d8ae7854a2ace9de3fc5a5fa9f4c50e9c3747a929e9e8724871e2271ab1a2fcc1055304c0e0d3a344a6fe592f3615d3de3deadf7186add51c8281243849d36b6632f35b6d653a4107f37306817ef73c159c8b77fa845e0ff5f5a164a778ca4c48d1462ac"}, {&(0x7f0000000780)="be9c41af986d2c2ad32a3731ebd66ade6277e836c8e791bc19e62dd162956ea8f8fb593383ab925e83313b0012b6a7cfa9280ebbd34fa3e24b149e7f43bfbc72697712570a7ffd5f0fa97802dd9eef175db09f3ae192fcb384b9a3847c4e387b7e95d230132fc290be10e063ee18b93952bb165097487896a5384aa5c1713694539d575a14f34c62f51fb314626eabd4f9dac603220f6ebfc07b31144f9626159720f96eb629ea74da55262ba098ef26e6b0fa4637e1c9dbaa721c719051"}, {&(0x7f0000000440)="fa669860cb62cba368c842e585087b1e12a1c55ac2436f3f333878795c66693cea85bc55bec2c940d1ff3c86662d1deddeedbcabbc208e6dd045a2b4aebc2e308c8d66c0b4675291421bfcd36fe63937d6bf007788995de804b0170420ed7200aa01bc405884253d5cc3b2d402345729bcd7d2011e9714e7a7374e30020a4dd2"}, {&(0x7f0000000640)="79fcd3bddc27f7210d715088c290410d5d1966ffbc24cb267194870efbe545857d3aff398b20c963839fdd674f68ca20817b844d62097f8850422bc2014ddd571a668e0e9e5ef08369ab2ba79ad87a9ca0be7f99c88347a47755bebe2c79bb448d0c215a92c224"}], 0x34}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="5c1375b6ae8b240d9d47b9001473c972cdd081d3b625a7bc462f6a78cd2019eef688a91033d0a43d27f6400c872f42b642373fb8e2f20610e02de8b20ae1d303e630605e6220bd24d51f81c9819ab8fb9726d7397442391ac3609e218c440fd8de4e7d28444d7afdd2ba8192e72a8f5a8959fc16be3fe9f9d6df793d5ab6b0749bb8ecb4"}, {&(0x7f0000000300)="e4dd56567430500de2f5559acc654dfe5f98bd94427b3e2c091a9c0c51b056c948cd6e857b54099ef90fecd9fc2f14e84f8d2e0caa6aefc5ec7e8ee771c20d7d781722bec8ef2c31bd3186dfd3351708214889d3098f9c938042dc85029f9fe981c4dc78ce9aeb828823051230f0"}, {&(0x7f0000000380)="db87"}, {&(0x7f00000003c0)="8319fadce3838e2d90cc4f27c9fa060ee7025c1421ad6eb7e81fe38794e543586d3cd89b10bfff228f"}, {&(0x7f0000000540)="354d5167558ad24a6fa7ec541309c8fb2140cace469507b8b839c3eab9710684dd4545a98b4d658d27f063f250125880e07d89e912ebd302a89713d4c14ea3c59b62a276cf1958badee4e8941594200f8bc04954eef51365088e438e43bc2a7162e96b8ff13982b3040b8b17d405a681598dd307c4e30a3d1521e3db7d5d98cf959da5640277d8ae7854a2ace9de3fc5a5fa9f4c50e9c3747a929e9e8724871e2271ab1a2fcc1055304c0e0d3a344a6fe592f3615d3de3deadf7186add51c8281243849d36b6632f35b6d653a4107f37306817ef73c159c8b77fa845e0ff5f5a164a778ca4c48d1462ac"}, {&(0x7f0000000780)="be9c41af986d2c2ad32a3731ebd66ade6277e836c8e791bc19e62dd162956ea8f8fb593383ab925e83313b0012b6a7cfa9280ebbd34fa3e24b149e7f43bfbc72697712570a7ffd5f0fa97802dd9eef175db09f3ae192fcb384b9a3847c4e387b7e95d230132fc290be10e063ee18b93952bb165097487896a5384aa5c1713694539d575a14f34c62f51fb314626eabd4f9dac603220f6ebfc07b31144f9626159720f96eb629ea74da55262ba098ef26e6b0fa4637e1c9dbaa721c719051"}, {&(0x7f0000000440)="fa669860cb62cba368c842e585087b1e12a1c55ac2436f3f333878795c66693cea85bc55bec2c940d1ff3c86662d1deddeedbcabbc208e6dd045a2b4aebc2e308c8d66c0b4675291421bfcd36fe63937d6bf007788995de804b0170420ed7200aa01bc405884253d5cc3b2d402345729bcd7d2011e9714e7a7374e30020a4dd2"}, {&(0x7f0000000640)="79fcd3bddc27f7210d715088c290410d5d1966ffbc24cb267194870efbe545857d3aff398b20c963839fdd674f68ca20817b844d62097f8850422bc2014ddd571a668e0e9e5ef08369ab2ba79ad87a9ca0be7f99c88347a47755bebe2c79bb448d0c215a92c224"}], 0x34}, 0x0) 123.942256ms ago: executing program 2 (id=897): pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x4041) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffe, 0x1c, 0x0, 0x0, 0xffffffffffffff94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x37, 0xb, 0x78bd2d, 0x0, {0xa}}, 0x14}}, 0x20000080) 0s ago: executing program 2 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00l\t'], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) kernel console output (not intermixed with test programs): s mode [ 138.671559][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.693099][ T8029] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 138.701678][ T8029] netlink: 'syz.0.504': attribute type 2 has an invalid length. [ 138.982279][ T8039] netlink: 'syz.0.505': attribute type 3 has an invalid length. [ 139.151626][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.166245][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.193100][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.203389][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.213122][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.222260][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.262971][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.275425][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.299089][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.313722][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.323080][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.332591][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.635420][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.656464][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.667610][ T12] bond0 (unregistering): Released all slaves [ 140.054051][ T8069] bond0: (slave macvlan3): Opening slave failed [ 140.636797][ T12] hsr_slave_0: left promiscuous mode [ 140.728888][ T12] hsr_slave_1: left promiscuous mode [ 140.745675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.772990][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.801611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.821580][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 140.828444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.830929][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 140.898121][ T12] veth1_macvtap: left promiscuous mode [ 140.903761][ T12] veth0_macvtap: left promiscuous mode [ 140.924715][ T12] veth1_vlan: left promiscuous mode [ 140.939232][ T12] veth0_vlan: left promiscuous mode [ 141.111636][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 141.312690][ T54] Bluetooth: hci1: command tx timeout [ 141.375863][ T54] Bluetooth: hci2: command tx timeout [ 141.423859][ T12] team0 (unregistering): Port device team_slave_1 removed [ 141.464312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 141.891237][ T8101] veth0_to_batadv: mtu less than device minimum [ 142.158625][ T8119] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 142.177446][ T8119] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 142.255819][ T8127] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 142.293671][ T8127] IPVS: set_ctl: invalid protocol: 8 172.20.20.10:20003 [ 142.329349][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 142.475379][ T8121] syzkaller0: entered promiscuous mode [ 142.489438][ T8121] syzkaller0: entered allmulticast mode [ 142.773579][ T8147] netlink: 'syz.2.522': attribute type 7 has an invalid length. [ 142.786204][ T8147] netlink: 'syz.2.522': attribute type 8 has an invalid length. [ 143.388425][ T54] Bluetooth: hci1: command tx timeout [ 143.467460][ T54] Bluetooth: hci2: command tx timeout [ 144.188919][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 144.484993][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.500395][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.520584][ T8044] bridge_slave_0: entered allmulticast mode [ 144.545714][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 144.546863][ T8044] bridge_slave_0: entered promiscuous mode [ 144.625159][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.634623][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.645791][ T8044] bridge_slave_1: entered allmulticast mode [ 144.652369][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 144.653038][ T8044] bridge_slave_1: entered promiscuous mode [ 144.669973][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.529'. [ 144.695920][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.703380][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.715137][ T8042] bridge_slave_0: entered allmulticast mode [ 144.723363][ T8042] bridge_slave_0: entered promiscuous mode [ 144.738161][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.774467][ T8179] netlink: 'syz.2.530': attribute type 3 has an invalid length. [ 144.788535][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.809406][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.819832][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.830249][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.837926][ T8042] bridge_slave_1: entered allmulticast mode [ 144.844864][ T8042] bridge_slave_1: entered promiscuous mode [ 144.893212][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.953080][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.971881][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.010662][ T8044] team0: Port device team_slave_0 added [ 145.028629][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.052319][ T8183] netlink: 'syz.4.531': attribute type 11 has an invalid length. [ 145.060429][ T8183] netlink: 224 bytes leftover after parsing attributes in process `syz.4.531'. [ 145.080824][ T8042] team0: Port device team_slave_0 added [ 145.093704][ T8044] team0: Port device team_slave_1 added [ 145.107837][ T8042] team0: Port device team_slave_1 added [ 145.130256][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.426084][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.446501][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.456295][ T54] Bluetooth: hci1: command tx timeout [ 145.533487][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.536506][ T54] Bluetooth: hci2: command tx timeout [ 145.652047][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.661196][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.688241][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.691212][ T8199] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.534'. [ 145.727242][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.778001][ T8201] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 145.818738][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.856281][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.921557][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.952760][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.995662][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.092909][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.153281][ T8044] hsr_slave_0: entered promiscuous mode [ 146.217643][ T8044] hsr_slave_1: entered promiscuous mode [ 146.339868][ T8230] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 146.430663][ T8042] hsr_slave_0: entered promiscuous mode [ 146.446383][ T8042] hsr_slave_1: entered promiscuous mode [ 146.453157][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.453192][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.541'. [ 146.466094][ T8042] Cannot create hsr debugfs directory [ 146.503410][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 146.524951][ T12] bridge_slave_1: left allmulticast mode [ 146.537094][ T12] bridge_slave_1: left promiscuous mode [ 146.561555][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.583771][ T12] bridge_slave_0: left allmulticast mode [ 146.604154][ T12] bridge_slave_0: left promiscuous mode [ 146.610795][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 146.620093][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 146.629187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.089800][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.104380][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.116189][ T12] bond0 (unregistering): Released all slaves [ 147.536745][ T54] Bluetooth: hci1: command tx timeout [ 147.617476][ T54] Bluetooth: hci2: command tx timeout [ 147.672498][ T12] hsr_slave_0: left promiscuous mode [ 147.692677][ T12] hsr_slave_1: left promiscuous mode [ 147.705266][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.723131][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.742679][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.751094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.793456][ T12] veth1_macvtap: left promiscuous mode [ 147.804888][ T12] veth0_macvtap: left promiscuous mode [ 147.812381][ T12] veth1_vlan: left promiscuous mode [ 147.822719][ T12] veth0_vlan: left promiscuous mode [ 148.415800][ T54] Bluetooth: hci0: command tx timeout [ 148.470738][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.571324][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.571699][ T8304] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 149.607967][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'. [ 149.624442][ T8304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.013067][ T8044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.215410][ T8044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.228903][ T8044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.253706][ T8044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.508442][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.535083][ T8042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.551879][ T8042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.567754][ T8042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.581387][ T8042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.613068][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.634272][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.641457][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.674438][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.681676][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.841610][ T8044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.870769][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.930733][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.957051][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.964222][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.978547][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.570'. [ 150.993666][ T8366] netlink: 'syz.4.570': attribute type 7 has an invalid length. [ 151.012631][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.019866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.036514][ T8366] netlink: 'syz.4.570': attribute type 8 has an invalid length. [ 151.044655][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 151.104034][ T8366] erspan0: entered promiscuous mode [ 151.112407][ T8366] batadv_slave_1: entered promiscuous mode [ 151.147117][ T8366] erspan0: left promiscuous mode [ 151.188020][ T8366] batadv_slave_1: left promiscuous mode [ 151.471249][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.610444][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 151.623931][ T8044] veth0_vlan: entered promiscuous mode [ 151.679471][ T8044] veth1_vlan: entered promiscuous mode [ 151.774144][ T8044] veth0_macvtap: entered promiscuous mode [ 151.797952][ T8044] veth1_macvtap: entered promiscuous mode [ 151.815014][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.825717][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.836911][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.847044][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.857803][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.868934][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.881274][ T8044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.890238][ T8044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.899406][ T8044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.908468][ T8044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.952761][ T8403] batman_adv: batadv0: Adding interface: ip6gretap1 [ 151.965859][ T8403] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 151.987303][ T8403] batman_adv: batadv0: Interface activated: ip6gretap1 [ 152.111361][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.171071][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.200855][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.245246][ T8413] netlink: 'syz.0.579': attribute type 4 has an invalid length. [ 152.262388][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.280134][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.490531][ T8424] macsec0: entered allmulticast mode [ 152.543060][ T8042] veth0_vlan: entered promiscuous mode [ 152.611031][ T8428] veth1_macvtap: entered promiscuous mode [ 152.643284][ T8428] veth1_macvtap: entered allmulticast mode [ 152.670409][ T8428] macsec0: left allmulticast mode [ 152.693715][ T8428] veth1_macvtap: left allmulticast mode [ 152.780606][ T8042] veth1_vlan: entered promiscuous mode [ 152.994470][ T8042] veth0_macvtap: entered promiscuous mode [ 153.022311][ T8042] veth1_macvtap: entered promiscuous mode [ 153.092992][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.110192][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.129924][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.144887][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.166408][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.228947][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.251718][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.279088][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.322717][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.358118][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.421504][ T2909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.478313][ T8042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.502226][ T8042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.523018][ T8042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.543521][ T8042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.607918][ T2909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.720305][ T2909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.858791][ T8467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.897334][ T2909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.944714][ T8467] tipc: Enabled bearer , priority 0 [ 154.001551][ T8466] syzkaller0: entered promiscuous mode [ 154.010556][ T8466] syzkaller0: entered allmulticast mode [ 154.050830][ T8466] tipc: Resetting bearer [ 154.106898][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.114794][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.197114][ T8479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.595'. [ 154.210997][ T8464] tipc: Resetting bearer [ 154.291398][ T8464] tipc: Disabling bearer [ 154.408517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.409207][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.435855][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.445676][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.454171][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.468032][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.476108][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.484116][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.646645][ T8493] tipc: New replicast peer: 100.1.1.1 [ 154.665172][ T2909] bridge_slave_1: left allmulticast mode [ 154.693178][ T2909] bridge_slave_1: left promiscuous mode [ 154.720789][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.752844][ T2909] bridge_slave_0: left allmulticast mode [ 154.774137][ T2909] bridge_slave_0: left promiscuous mode [ 154.800867][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.370864][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.384815][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.401914][ T2909] bond0 (unregistering): Released all slaves [ 155.671302][ T8525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.083399][ T2909] hsr_slave_0: left promiscuous mode [ 156.090172][ T2909] hsr_slave_1: left promiscuous mode [ 156.101174][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.109519][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.118156][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.126094][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.150777][ T2909] veth1_macvtap: left promiscuous mode [ 156.156491][ T2909] veth0_macvtap: left promiscuous mode [ 156.162124][ T2909] veth1_vlan: left promiscuous mode [ 156.168069][ T2909] veth0_vlan: left promiscuous mode [ 156.578099][ T54] Bluetooth: hci2: command tx timeout [ 156.654143][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 156.735860][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 156.864638][ T8555] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 156.948708][ T8557] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 157.092966][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.108463][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.119233][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.133859][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.148578][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.158160][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.555323][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 157.722542][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'. [ 157.742037][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'. [ 157.972294][ T8590] netlink: 'syz.4.610': attribute type 4 has an invalid length. [ 158.152658][ T8559] chnl_net:caif_netlink_parms(): no params data found [ 158.202168][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.209567][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.226870][ T8486] bridge_slave_0: entered allmulticast mode [ 158.244671][ T8486] bridge_slave_0: entered promiscuous mode [ 158.285224][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.308182][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.332285][ T8486] bridge_slave_1: entered allmulticast mode [ 158.347292][ T8486] bridge_slave_1: entered promiscuous mode [ 158.609798][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.655756][ T5852] Bluetooth: hci2: command tx timeout [ 158.674202][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.780809][ T8486] team0: Port device team_slave_0 added [ 158.807679][ T8486] team0: Port device team_slave_1 added [ 158.949567][ T8645] xt_l2tp: v2 doesn't support IP mode [ 159.065408][ T8650] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 159.077929][ T2909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.093521][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.102244][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.136725][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.171440][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.178836][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.249263][ T5852] Bluetooth: hci1: command tx timeout [ 159.257694][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.269206][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.297018][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.343278][ T2909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.360017][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.367892][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.376465][ T8559] bridge_slave_0: entered allmulticast mode [ 159.383977][ T8559] bridge_slave_0: entered promiscuous mode [ 159.396251][ T8658] bridge1: entered promiscuous mode [ 159.401495][ T8658] bridge1: entered allmulticast mode [ 159.494639][ T8486] hsr_slave_0: entered promiscuous mode [ 159.512412][ T8486] hsr_slave_1: entered promiscuous mode [ 159.525199][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.544358][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.552237][ T8559] bridge_slave_1: entered allmulticast mode [ 159.567836][ T8559] bridge_slave_1: entered promiscuous mode [ 159.579198][ T8663] can: request_module (can-proto-3) failed. [ 159.586661][ T8663] netlink: 104 bytes leftover after parsing attributes in process `syz.4.626'. [ 159.635816][ T2909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.707509][ T35] bond0: (slave bridge0): link status definitely down, disabling slave [ 159.733398][ T35] bond0: (slave wlan1): link status definitely down, disabling slave [ 159.895421][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.000496][ T2909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.075060][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.103936][ T8689] x_tables: duplicate underflow at hook 3 [ 160.153577][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.228817][ T8559] team0: Port device team_slave_0 added [ 160.337478][ T8559] team0: Port device team_slave_1 added [ 160.414357][ T8704] netlink: 'syz.0.632': attribute type 9 has an invalid length. [ 160.535918][ T2909] bridge_slave_1: left allmulticast mode [ 160.545859][ T2909] bridge_slave_1: left promiscuous mode [ 160.562104][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.595236][ T2909] bridge_slave_0: left allmulticast mode [ 160.614929][ T2909] bridge_slave_0: left promiscuous mode [ 160.636598][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.735604][ T5852] Bluetooth: hci2: command tx timeout [ 161.103217][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.115281][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.132840][ T2909] bond0 (unregistering): Released all slaves [ 161.150572][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.165519][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.219847][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.286874][ T8718] bond_slave_0: entered promiscuous mode [ 161.292849][ T8718] bond_slave_1: entered promiscuous mode [ 161.299940][ T5852] Bluetooth: hci1: command tx timeout [ 161.310232][ T8718] macvtap1: entered promiscuous mode [ 161.316785][ T8718] bond0: entered promiscuous mode [ 161.323379][ T8718] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 161.333331][ T8718] bond0: left promiscuous mode [ 161.338833][ T8718] bond_slave_0: left promiscuous mode [ 161.344365][ T8718] bond_slave_1: left promiscuous mode [ 161.402017][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.409281][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.440184][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.544611][ T8726] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 161.640440][ T8726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.638'. [ 161.651617][ T8726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.638'. [ 161.799927][ T8559] hsr_slave_0: entered promiscuous mode [ 161.826380][ T8559] hsr_slave_1: entered promiscuous mode [ 161.833377][ T8559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.842377][ T8559] Cannot create hsr debugfs directory [ 161.919636][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'. [ 161.944211][ T2909] hsr_slave_0: left promiscuous mode [ 161.962725][ T2909] hsr_slave_1: left promiscuous mode [ 161.980026][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.995715][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.013466][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.033759][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.097780][ T2909] veth1_macvtap: left promiscuous mode [ 162.124269][ T2909] veth0_macvtap: left promiscuous mode [ 162.130039][ T2909] veth1_vlan: left promiscuous mode [ 162.142746][ T2909] veth0_vlan: left promiscuous mode [ 162.386163][ T8763] netlink: 84 bytes leftover after parsing attributes in process `syz.0.645'. [ 162.815716][ T5852] Bluetooth: hci2: command tx timeout [ 162.963048][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 163.017863][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 163.108533][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 163.375820][ T5852] Bluetooth: hci1: command tx timeout [ 163.843403][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 163.870915][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 164.004148][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.655'. [ 165.455675][ T5852] Bluetooth: hci1: command tx timeout [ 166.155335][ T8833] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 166.171971][ T8836] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 166.181574][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 166.196408][ T8836] netlink: 'syz.4.663': attribute type 3 has an invalid length. [ 166.236143][ T8836] netlink: 224 bytes leftover after parsing attributes in process `syz.4.663'. [ 166.270187][ T8486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.325942][ T8486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.396188][ T8836] tipc: Enabling of bearer rejected, failed to enable media [ 166.409696][ T8486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.438879][ T8486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.812586][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.897307][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.930664][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.937924][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.962595][ T8559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.041528][ T8559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.061693][ T8559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.104322][ T8559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.122141][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.129390][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.382129][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.400332][ T8559] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.428024][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.435279][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.454460][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.461717][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.471415][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 167.534953][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 167.564444][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 167.594610][ T8879] netlink: 'syz.0.670': attribute type 25 has an invalid length. [ 167.745112][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.828866][ T8486] veth0_vlan: entered promiscuous mode [ 167.904812][ T8486] veth1_vlan: entered promiscuous mode [ 168.000719][ T8486] veth0_macvtap: entered promiscuous mode [ 168.035358][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.071438][ T8486] veth1_macvtap: entered promiscuous mode [ 168.071490][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 168.131408][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.156405][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.173220][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.239710][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.260646][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.292306][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.333345][ T8559] veth0_vlan: entered promiscuous mode [ 168.379070][ T8486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.408093][ T8486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.432146][ T8486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.455896][ T8486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.503211][ T8559] veth1_vlan: entered promiscuous mode [ 168.671004][ T8559] veth0_macvtap: entered promiscuous mode [ 168.748926][ T8559] veth1_macvtap: entered promiscuous mode [ 168.768615][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.790187][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.840016][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.850963][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.885504][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.910201][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.921896][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.964503][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.980932][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.998116][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.020159][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.046098][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.065576][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.080325][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.108672][ T8559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.124349][ T8559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.134268][ T8559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.148396][ T8559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.358631][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.360766][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.374407][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.429663][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.022135][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 170.036621][ T8981] syzkaller1: entered promiscuous mode [ 170.042753][ T8981] syzkaller1: entered allmulticast mode [ 170.172460][ T8994] raw_sendmsg: syz.0.692 forgot to set AF_INET. Fix it! [ 170.303501][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.620213][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.779588][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.918871][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.178550][ T12] bridge_slave_1: left allmulticast mode [ 171.184283][ T12] bridge_slave_1: left promiscuous mode [ 171.216955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.237571][ T12] bridge_slave_0: left allmulticast mode [ 171.243299][ T12] bridge_slave_0: left promiscuous mode [ 171.269618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.470002][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.481981][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.494360][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.515884][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.542382][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.572744][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.146853][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.159916][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.169732][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.178709][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.189042][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.198203][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.425078][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.438738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.450437][ T12] bond0 (unregistering): Released all slaves [ 172.473351][ T9060] geneve3: entered promiscuous mode [ 172.481813][ T9060] geneve3: entered allmulticast mode [ 172.862388][ T9068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.023932][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 173.045087][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 173.357046][ T12] hsr_slave_0: left promiscuous mode [ 173.394196][ T12] hsr_slave_1: left promiscuous mode [ 173.411753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.419845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.432697][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.449995][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.490144][ T12] veth1_macvtap: left promiscuous mode [ 173.495944][ T12] veth0_macvtap: left promiscuous mode [ 173.502484][ T12] veth1_vlan: left promiscuous mode [ 173.508078][ T12] veth0_vlan: left promiscuous mode [ 173.699710][ T54] Bluetooth: hci1: command tx timeout [ 173.723546][ T9112] openvswitch: netlink: Message has 1219 unknown bytes. [ 173.737934][ T9112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.961767][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.003294][ T12] team0 (unregistering): Port device team_slave_0 removed [ 174.255665][ T54] Bluetooth: hci2: command tx timeout [ 174.567514][ T9027] chnl_net:caif_netlink_parms(): no params data found [ 174.617258][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.699473][ T9048] chnl_net:caif_netlink_parms(): no params data found [ 174.960349][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.970659][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.978351][ T9027] bridge_slave_0: entered allmulticast mode [ 174.985190][ T9027] bridge_slave_0: entered promiscuous mode [ 175.020310][ T9130] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 175.030130][ T9130] netlink: 'syz.0.713': attribute type 2 has an invalid length. [ 175.056576][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.063965][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.072191][ T9027] bridge_slave_1: entered allmulticast mode [ 175.086871][ T9027] bridge_slave_1: entered promiscuous mode [ 175.218718][ T9146] rdma_op ffff88806178d9f0 conn xmit_rdma 0000000000000000 [ 175.262118][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.276870][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.447223][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.463419][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.503782][ T9048] bridge_slave_0: entered allmulticast mode [ 175.525376][ T9048] bridge_slave_0: entered promiscuous mode [ 175.599158][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.626028][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.641668][ T9048] bridge_slave_1: entered allmulticast mode [ 175.650548][ T9048] bridge_slave_1: entered promiscuous mode [ 175.671404][ T9156] bridge2: entered promiscuous mode [ 175.705592][ T9156] bridge2: entered allmulticast mode [ 175.727832][ T9027] team0: Port device team_slave_0 added [ 175.745641][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 175.776640][ T54] Bluetooth: hci1: command tx timeout [ 175.833954][ T9027] team0: Port device team_slave_1 added [ 175.867932][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.881377][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.892856][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.901491][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.911933][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.932296][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.943474][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.952477][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.100885][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.116001][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.143922][ T9027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.160634][ T9048] team0: Port device team_slave_0 added [ 176.214213][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.235580][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.242949][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.271118][ T9027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.291874][ T9048] team0: Port device team_slave_1 added [ 176.339673][ T54] Bluetooth: hci2: command tx timeout [ 176.354665][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.399585][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.408867][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.436861][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.491903][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.523445][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.531168][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.559014][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.637241][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.689233][ T9048] hsr_slave_0: entered promiscuous mode [ 176.711322][ T9048] hsr_slave_1: entered promiscuous mode [ 176.790118][ T9027] hsr_slave_0: entered promiscuous mode [ 176.801723][ T9027] hsr_slave_1: entered promiscuous mode [ 176.808931][ T9027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.818769][ T9027] Cannot create hsr debugfs directory [ 177.134727][ T9183] syzkaller0: entered promiscuous mode [ 177.140647][ T9183] syzkaller0: entered allmulticast mode [ 177.211332][ T9183] netlink: 'syz.0.727': attribute type 33 has an invalid length. [ 177.230596][ T9183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.727'. [ 177.282725][ T9160] chnl_net:caif_netlink_parms(): no params data found [ 177.318901][ T12] bridge_slave_1: left allmulticast mode [ 177.325078][ T12] bridge_slave_1: left promiscuous mode [ 177.331079][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.343100][ T12] bridge_slave_0: left allmulticast mode [ 177.349342][ T12] bridge_slave_0: left promiscuous mode [ 177.355319][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.720237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.734502][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.746471][ T12] bond0 (unregistering): Released all slaves [ 177.776787][ T9198] wg1: entered promiscuous mode [ 177.856424][ T54] Bluetooth: hci1: command tx timeout [ 178.015645][ T54] Bluetooth: hci0: command tx timeout [ 178.415659][ T54] Bluetooth: hci2: command tx timeout [ 179.876355][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.883931][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.898318][ T9160] bridge_slave_0: entered allmulticast mode [ 179.925968][ T9160] bridge_slave_0: entered promiscuous mode [ 179.955361][ T54] Bluetooth: hci1: command tx timeout [ 179.965206][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.981999][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.991184][ T9160] bridge_slave_1: entered allmulticast mode [ 180.000128][ T9160] bridge_slave_1: entered promiscuous mode [ 180.095670][ T54] Bluetooth: hci0: command tx timeout [ 180.150668][ T9215] pimreg3: entered allmulticast mode [ 180.226455][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.253658][ T12] hsr_slave_0: left promiscuous mode [ 180.264803][ T12] hsr_slave_1: left promiscuous mode [ 180.279780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.302207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.329002][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.345744][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.378913][ T12] veth1_macvtap: left promiscuous mode [ 180.384629][ T12] veth0_macvtap: left promiscuous mode [ 180.390753][ T12] veth1_vlan: left promiscuous mode [ 180.401232][ T12] veth0_vlan: left promiscuous mode [ 180.497169][ T54] Bluetooth: hci2: command tx timeout [ 180.873563][ T12] team0 (unregistering): Port device team_slave_1 removed [ 180.917102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 181.321550][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.349288][ T9224] netlink: 'syz.2.735': attribute type 3 has an invalid length. [ 181.362440][ T9224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.735'. [ 181.414829][ T9160] team0: Port device team_slave_0 added [ 181.463604][ T9160] team0: Port device team_slave_1 added [ 181.561050][ T9233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.737'. [ 181.650130][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.657541][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.683815][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.697511][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.704541][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.730642][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.828143][ T9048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.842745][ T9048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.931129][ T9160] hsr_slave_0: entered promiscuous mode [ 181.950866][ T9160] hsr_slave_1: entered promiscuous mode [ 181.962937][ T9160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.971884][ T9160] Cannot create hsr debugfs directory [ 181.977871][ T9048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.036826][ T9048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.175910][ T54] Bluetooth: hci0: command tx timeout [ 182.578779][ T9160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.597942][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.612145][ T9048] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.620092][ T9027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.651685][ T9160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.671994][ T9027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.692542][ T9027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.712369][ T9027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.750710][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.758010][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.802314][ T9160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.831472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.838840][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.937390][ T9160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.133384][ T9266] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 183.146033][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.164034][ T9027] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.176803][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.183966][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.231430][ T9266] syz_tun: entered promiscuous mode [ 183.243648][ T9266] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 183.268677][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.275952][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.285310][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 183.356802][ T9269] x_tables: unsorted underflow at hook 3 [ 183.407994][ T9160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.450050][ T9160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.509083][ T9160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.532401][ T9160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.566989][ T9276] Bluetooth: MGMT ver 1.23 [ 183.577027][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.733723][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 183.840517][ T9048] veth0_vlan: entered promiscuous mode [ 183.893480][ T9048] veth1_vlan: entered promiscuous mode [ 183.964589][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.014294][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.074584][ T9048] veth0_macvtap: entered promiscuous mode [ 184.101177][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.108437][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.130006][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.137209][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.156129][ T9048] veth1_macvtap: entered promiscuous mode [ 184.236869][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.255750][ T54] Bluetooth: hci0: command tx timeout [ 184.256781][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.296728][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.318974][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.356889][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.375859][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.397126][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.416429][ T9048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.425195][ T9048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.440350][ T9048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.450509][ T9048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.470173][ T9160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.657063][ T9027] veth0_vlan: entered promiscuous mode [ 184.702228][ T9027] veth1_vlan: entered promiscuous mode [ 184.718185][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.739786][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.793781][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.816890][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.874914][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.921447][ T9027] veth0_macvtap: entered promiscuous mode [ 184.961651][ T9027] veth1_macvtap: entered promiscuous mode [ 185.137826][ T9027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.171956][ T9027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.211662][ T9027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.243331][ T9027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.263432][ T9027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.287413][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.367900][ T9027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.401548][ T9027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.414525][ T9027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.431752][ T9027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.467093][ T9027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.494733][ T9027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.506472][ T9027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.515258][ T9027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.526859][ T9027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.753014][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.834408][ T9160] veth0_vlan: entered promiscuous mode [ 185.918938][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.969391][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.981792][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.990667][ T9160] veth1_vlan: entered promiscuous mode [ 186.039336][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.048677][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.078057][ T9160] veth0_macvtap: entered promiscuous mode [ 186.098870][ T9160] veth1_macvtap: entered promiscuous mode [ 186.172097][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.262552][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.279787][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.291132][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.303771][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.313798][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.324671][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.336634][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.354518][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.385524][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.405770][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.417045][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.427032][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.438473][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.449448][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.469483][ T9160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.485584][ T9160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.494572][ T9160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.529176][ T9160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.559930][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.826920][ T9336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.890845][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.943978][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.142869][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.164981][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.432331][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.442603][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.453511][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.476829][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.509169][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.518675][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.905895][ T82] bridge_slave_1: left allmulticast mode [ 187.911609][ T82] bridge_slave_1: left promiscuous mode [ 187.975895][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.076687][ T82] bridge_slave_0: left allmulticast mode [ 188.082415][ T82] bridge_slave_0: left promiscuous mode [ 188.163249][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.465081][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.489249][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.506458][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.524548][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.542009][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.551014][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.700608][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.712017][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.722834][ T82] bond0 (unregistering): Released all slaves [ 189.079933][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 189.120693][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 189.379624][ T82] hsr_slave_0: left promiscuous mode [ 189.404744][ T82] hsr_slave_1: left promiscuous mode [ 189.420215][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.427980][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.436847][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.444465][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.471529][ T82] veth1_macvtap: left promiscuous mode [ 189.477698][ T82] veth0_macvtap: left promiscuous mode [ 189.483434][ T82] veth1_vlan: left promiscuous mode [ 189.489177][ T82] veth0_vlan: left promiscuous mode [ 189.615680][ T5852] Bluetooth: hci1: command tx timeout [ 189.757371][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.772557][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.782321][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.798435][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.807860][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.820935][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.137765][ T82] team0 (unregistering): Port device team_slave_1 removed [ 190.179718][ T82] team0 (unregistering): Port device team_slave_0 removed [ 190.585700][ T54] Bluetooth: hci0: command tx timeout [ 190.606737][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 190.779301][ T9383] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 190.803659][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 190.853601][ T9388] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 190.872812][ T9388] xt_limit: Overflow, try lower: 0/0 [ 190.918916][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 191.098300][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 191.310652][ T9374] chnl_net:caif_netlink_parms(): no params data found [ 191.333321][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.345319][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.365741][ T9339] bridge_slave_0: entered allmulticast mode [ 191.372945][ T9339] bridge_slave_0: entered promiscuous mode [ 191.449870][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.470926][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.488592][ T9339] bridge_slave_1: entered allmulticast mode [ 191.497026][ T9339] bridge_slave_1: entered promiscuous mode [ 191.622797][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.696426][ T54] Bluetooth: hci1: command tx timeout [ 191.708681][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.793355][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.808009][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.817193][ T9354] bridge_slave_0: entered allmulticast mode [ 191.824801][ T9354] bridge_slave_0: entered promiscuous mode [ 191.855564][ T54] Bluetooth: hci2: command tx timeout [ 191.887700][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.904163][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.912742][ T9354] bridge_slave_1: entered allmulticast mode [ 191.930732][ T9354] bridge_slave_1: entered promiscuous mode [ 191.945408][ T9339] team0: Port device team_slave_0 added [ 191.971173][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.979935][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.987554][ T9374] bridge_slave_0: entered allmulticast mode [ 191.995073][ T9374] bridge_slave_0: entered promiscuous mode [ 192.039605][ T9339] team0: Port device team_slave_1 added [ 192.087292][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.094477][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.137224][ T9374] bridge_slave_1: entered allmulticast mode [ 192.164881][ T9374] bridge_slave_1: entered promiscuous mode [ 192.189156][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.265288][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.279723][ T9440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.779'. [ 192.293198][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.310493][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.318916][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.346570][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.389950][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.412999][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.422800][ T9440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.779'. [ 192.496890][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.504007][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.559779][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.618075][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.653383][ T9354] team0: Port device team_slave_0 added [ 192.663350][ T54] Bluetooth: hci0: command tx timeout [ 192.672167][ T9354] team0: Port device team_slave_1 added [ 192.713590][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.720773][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.721773][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'. [ 192.748940][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.806824][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.834604][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.842826][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.885620][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.925233][ T9374] team0: Port device team_slave_0 added [ 193.078426][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.127833][ T9374] team0: Port device team_slave_1 added [ 193.184804][ T9339] hsr_slave_0: entered promiscuous mode [ 193.204032][ T9339] hsr_slave_1: entered promiscuous mode [ 193.252465][ T9354] hsr_slave_0: entered promiscuous mode [ 193.264726][ T9354] hsr_slave_1: entered promiscuous mode [ 193.273529][ T9354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.282643][ T9354] Cannot create hsr debugfs directory [ 193.351351][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.367161][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.397666][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.436211][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.453464][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.496096][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.696920][ T9374] hsr_slave_0: entered promiscuous mode [ 193.712264][ T9374] hsr_slave_1: entered promiscuous mode [ 193.721248][ T9374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.732784][ T9374] Cannot create hsr debugfs directory [ 193.743425][ T9476] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 193.775586][ T5852] Bluetooth: hci1: command tx timeout [ 193.945620][ T5852] Bluetooth: hci2: command tx timeout [ 194.054417][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.221560][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.440415][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.552137][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.579394][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.651005][ T9503] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 194.714554][ T9503] team0: Cannot enslave team device to itself [ 194.735751][ T5852] Bluetooth: hci0: command tx timeout [ 194.948888][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 194.975158][ T82] bridge_slave_1: left allmulticast mode [ 194.990061][ T82] bridge_slave_1: left promiscuous mode [ 195.016259][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.048027][ T82] bridge_slave_0: left allmulticast mode [ 195.053766][ T82] bridge_slave_0: left promiscuous mode [ 195.077539][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.104287][ T82] bridge_slave_1: left allmulticast mode [ 195.117800][ T82] bridge_slave_1: left promiscuous mode [ 195.133123][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.143957][ T82] bridge_slave_0: left allmulticast mode [ 195.162111][ T82] bridge_slave_0: left promiscuous mode [ 195.172046][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.856595][ T5852] Bluetooth: hci1: command tx timeout [ 196.015949][ T5852] Bluetooth: hci2: command 0x040f tx timeout [ 196.069797][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.081966][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.092990][ T82] bond0 (unregistering): Released all slaves [ 196.220158][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.235828][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.246806][ T82] bond0 (unregistering): Released all slaves [ 196.380095][ T9339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.429353][ T9339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.485722][ T9540] openvswitch: netlink: IP tunnel dst address not specified [ 196.546499][ T9339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.554011][ T9524] infiniband syz1: set down [ 196.561206][ T9524] infiniband syz1: added ipvlan1 [ 196.569639][ T9524] syz1: rxe_create_cq: returned err = -12 [ 196.577112][ T9524] infiniband syz1: Couldn't create ib_mad CQ [ 196.583415][ T9524] infiniband syz1: Couldn't open port 1 [ 196.586133][ T9339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.701508][ T9524] RDS/IB: syz1: added [ 196.720098][ T9524] smc: adding ib device syz1 with port count 1 [ 196.741097][ T9524] smc: ib device syz1 port 1 has pnetid [ 196.816449][ T54] Bluetooth: hci0: command tx timeout [ 197.282575][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.629275][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.689738][ T9354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.710458][ T9354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.739595][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.746826][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.838664][ T9354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.857344][ T9354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.874618][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.882058][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.165965][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 198.183886][ T9339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.196231][ T9339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.616553][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.748958][ T9374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.809769][ T9374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.862553][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.892468][ T9588] geneve2: entered promiscuous mode [ 198.905686][ T9588] geneve2: entered allmulticast mode [ 198.926564][ T9374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.958429][ T9374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.018177][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.025357][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.067240][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.074447][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.197943][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.340138][ T9354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.535381][ T9339] veth0_vlan: entered promiscuous mode [ 199.609210][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.639335][ T9339] veth1_vlan: entered promiscuous mode [ 199.767602][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.833314][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.840506][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.908874][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.938969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.946191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.985005][ T9339] veth0_macvtap: entered promiscuous mode [ 200.024861][ T9339] veth1_macvtap: entered promiscuous mode [ 200.102915][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.117831][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.128603][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.139629][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.155522][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.168797][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.182112][ T5844] Bluetooth: hci2: command 0x040f tx timeout [ 200.190586][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.270900][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 200.290625][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.325773][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.342493][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.356254][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.375853][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.392139][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.405348][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.423308][ T9374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.471050][ T9374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.578401][ T82] hsr_slave_0: left promiscuous mode [ 200.584589][ T82] hsr_slave_1: left promiscuous mode [ 200.646277][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.653857][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.697480][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.706620][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.721039][ T82] hsr_slave_0: left promiscuous mode [ 200.727424][ T82] hsr_slave_1: left promiscuous mode [ 200.734262][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.743479][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.752447][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.761266][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.917773][ T9650] xt_l2tp: invalid flags combination: 4 [ 200.920253][ T82] veth1_macvtap: left promiscuous mode [ 200.936582][ T82] veth0_macvtap: left promiscuous mode [ 200.942278][ T82] veth1_vlan: left promiscuous mode [ 200.955811][ T82] veth0_vlan: left promiscuous mode [ 200.981398][ T82] veth1_macvtap: left promiscuous mode [ 200.996208][ T82] veth0_macvtap: left promiscuous mode [ 201.002528][ T82] veth1_vlan: left promiscuous mode [ 201.027025][ T82] veth0_vlan: left promiscuous mode [ 201.751104][ T82] team0 (unregistering): Port device team_slave_1 removed [ 201.777751][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 201.783898][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 201.824636][ T82] team0 (unregistering): Port device team_slave_0 removed [ 202.632749][ T82] team0 (unregistering): Port device team_slave_1 removed [ 202.674188][ T82] team0 (unregistering): Port device team_slave_0 removed [ 203.166965][ T9339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.185109][ T9339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.204607][ T9339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.214253][ T9339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.233896][ T9643] syzkaller1: entered promiscuous mode [ 203.240800][ T9643] syzkaller1: entered allmulticast mode [ 203.277098][ T9354] veth0_vlan: entered promiscuous mode [ 203.468488][ T9354] veth1_vlan: entered promiscuous mode [ 203.737700][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.758127][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.807984][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.852607][ T9354] veth0_macvtap: entered promiscuous mode [ 203.877206][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.885096][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.957728][ T9354] veth1_macvtap: entered promiscuous mode [ 204.048856][ T9691] syz.0.815[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.048974][ T9691] syz.0.815[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.075807][ T9691] syz.0.815[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.078146][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.128699][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.138948][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.155552][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.174294][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.197969][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.239294][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.264986][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.295964][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.317168][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.378537][ T9691] –eth0_vlan: renamed from bridge_slave_1 [ 204.601714][ T9354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.645079][ T9354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.664282][ T9354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.685915][ T9354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.937362][ T9374] veth0_vlan: entered promiscuous mode [ 204.961761][ T9374] veth1_vlan: entered promiscuous mode [ 205.054953][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.084506][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.205740][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.258620][ T9374] veth0_macvtap: entered promiscuous mode [ 205.283546][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.294366][ T9374] veth1_macvtap: entered promiscuous mode [ 205.324494][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.351496][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.401770][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.418130][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.428347][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.439145][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.449618][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.471062][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.487380][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.537851][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.592224][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.603166][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.614291][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.625121][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.635385][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.646341][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.657870][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.683877][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.703153][ T9374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.712271][ T9374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.721417][ T9374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.730250][ T9374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.868010][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.900848][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.934651][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.995741][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.166984][ T82] bridge_slave_1: left allmulticast mode [ 206.187491][ T82] bridge_slave_1: left promiscuous mode [ 206.207341][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.272478][ T82] bridge_slave_0: left allmulticast mode [ 206.295627][ T82] bridge_slave_0: left promiscuous mode [ 206.301495][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.667236][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.686587][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.696257][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.705017][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.751384][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.758921][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.085967][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.108188][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.137672][ T82] bond0 (unregistering): Released all slaves [ 207.372013][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.384525][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.405755][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.425806][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.439640][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.459166][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.585247][ T9754] tipc: Enabling of bearer rejected, already enabled [ 207.686293][ T9765] netlink: 'syz.2.822': attribute type 4 has an invalid length. [ 207.709976][ T9765] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.077515][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 208.327390][ T82] hsr_slave_0: left promiscuous mode [ 208.392613][ T82] hsr_slave_1: left promiscuous mode [ 208.464528][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.472976][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.496719][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.504309][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.546776][ T82] veth1_macvtap: left promiscuous mode [ 208.559317][ T82] veth0_macvtap: left promiscuous mode [ 208.565276][ T82] veth1_vlan: left promiscuous mode [ 208.592888][ T82] veth0_vlan: left promiscuous mode [ 208.669226][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.680111][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.688894][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.699236][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.713623][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.721243][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.815841][ T5852] Bluetooth: hci0: command tx timeout [ 209.162836][ T82] team0 (unregistering): Port device team_slave_1 removed [ 209.207318][ T82] team0 (unregistering): Port device team_slave_0 removed [ 209.538837][ T5852] Bluetooth: hci1: command tx timeout [ 210.276346][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 210.442335][ T9812] netlink: 104 bytes leftover after parsing attributes in process `syz.0.833'. [ 210.531448][ T9751] chnl_net:caif_netlink_parms(): no params data found [ 210.820896][ T5852] Bluetooth: hci2: command tx timeout [ 210.898988][ T5852] Bluetooth: hci0: command tx timeout [ 210.919734][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.952813][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.981504][ T9739] bridge_slave_0: entered allmulticast mode [ 210.997239][ T9739] bridge_slave_0: entered promiscuous mode [ 211.068764][ T9847] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 211.077165][ T9847] netlink: 228 bytes leftover after parsing attributes in process `syz.0.837'. [ 211.089593][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 211.158235][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.183911][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.199903][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.211668][ T9739] bridge_slave_1: entered allmulticast mode [ 211.227939][ T9739] bridge_slave_1: entered promiscuous mode [ 211.358060][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.464980][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.482025][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.492783][ T9751] bridge_slave_0: entered allmulticast mode [ 211.508389][ T9751] bridge_slave_0: entered promiscuous mode [ 211.551589][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.581312][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.605828][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.615221][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.622982][ T5852] Bluetooth: hci1: command tx timeout [ 211.643926][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.652072][ T9751] bridge_slave_1: entered allmulticast mode [ 211.660777][ T9751] bridge_slave_1: entered promiscuous mode [ 211.767430][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.929849][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.991109][ T9739] team0: Port device team_slave_0 added [ 212.022343][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.145590][ T9739] team0: Port device team_slave_1 added [ 212.224558][ T9751] team0: Port device team_slave_0 added [ 212.244595][ T9751] team0: Port device team_slave_1 added [ 212.304368][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.312735][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.343928][ T9739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.443938][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.451273][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.477714][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.490364][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.500407][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.527651][ T9739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.604114][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.612786][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.651143][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.798819][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.870255][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 212.896214][ T5852] Bluetooth: hci2: command tx timeout [ 212.930418][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.949665][ T9739] hsr_slave_0: entered promiscuous mode [ 212.957028][ T9739] hsr_slave_1: entered promiscuous mode [ 212.975924][ T5852] Bluetooth: hci0: command tx timeout [ 212.985119][ T9911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.847'. [ 213.031668][ T9751] hsr_slave_0: entered promiscuous mode [ 213.043817][ T9751] hsr_slave_1: entered promiscuous mode [ 213.051998][ T9751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.060849][ T9751] Cannot create hsr debugfs directory [ 213.072282][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 213.092611][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 213.096154][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.214184][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.268599][ T9920] netlink: 92 bytes leftover after parsing attributes in process `syz.0.849'. [ 213.366263][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.385238][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.401415][ T9792] bridge_slave_0: entered allmulticast mode [ 213.411730][ T9792] bridge_slave_0: entered promiscuous mode [ 213.456533][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.465249][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.474149][ T9792] bridge_slave_1: entered allmulticast mode [ 213.482246][ T9792] bridge_slave_1: entered promiscuous mode [ 213.624439][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.649015][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.695712][ T5852] Bluetooth: hci1: command tx timeout [ 213.827444][ T9792] team0: Port device team_slave_0 added [ 214.144616][ T9792] team0: Port device team_slave_1 added [ 214.184853][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 214.224383][ T82] bridge_slave_1: left allmulticast mode [ 214.234032][ T82] bridge_slave_1: left promiscuous mode [ 214.242969][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.268451][ T82] bridge_slave_0: left allmulticast mode [ 214.274167][ T82] bridge_slave_0: left promiscuous mode [ 214.292578][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.305054][ T82] bridge_slave_1: left allmulticast mode [ 214.311465][ T82] bridge_slave_1: left promiscuous mode [ 214.317403][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.327054][ T82] bridge_slave_0: left allmulticast mode [ 214.332841][ T82] bridge_slave_0: left promiscuous mode [ 214.340407][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.977122][ T5852] Bluetooth: hci2: command tx timeout [ 215.003425][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.019636][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.032621][ T82] bond0 (unregistering): Released all slaves [ 215.061130][ T5852] Bluetooth: hci0: command tx timeout [ 215.183649][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.194921][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.208192][ T82] bond0 (unregistering): Released all slaves [ 215.426329][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.433550][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.495171][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.835129][ T5852] Bluetooth: hci1: command tx timeout [ 221.699865][ T5852] Bluetooth: hci2: command tx timeout [ 222.037986][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.126852][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.456217][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.996973][ T9985] xt_CT: No such helper "snmp" [ 223.537499][ T9792] hsr_slave_0: entered promiscuous mode [ 223.626476][ T9792] hsr_slave_1: entered promiscuous mode [ 223.794700][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.855576][ T9792] Cannot create hsr debugfs directory [ 224.778341][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'. [ 225.164066][T10002] netlink: 'syz.2.862': attribute type 11 has an invalid length. [ 234.985269][ T82] hsr_slave_0: left promiscuous mode [ 235.024455][ T82] hsr_slave_1: left promiscuous mode [ 235.068459][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.095710][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.116751][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.140634][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.144750][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.162974][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.171589][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.200876][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.218373][ T5852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.228455][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.236836][ T82] hsr_slave_0: left promiscuous mode [ 235.274559][ T82] hsr_slave_1: left promiscuous mode [ 235.289498][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.298144][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.308815][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.317033][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.357771][ T82] veth1_macvtap: left promiscuous mode [ 235.363341][ T82] veth0_macvtap: left promiscuous mode [ 235.369413][ T82] veth1_vlan: left promiscuous mode [ 235.374755][ T82] veth0_vlan: left promiscuous mode [ 235.383916][ T82] veth1_macvtap: left promiscuous mode [ 235.389724][ T82] veth0_macvtap: left promiscuous mode [ 235.395324][ T82] veth1_vlan: left promiscuous mode [ 235.400780][ T82] veth0_vlan: left promiscuous mode [ 236.019398][ T82] team0 (unregistering): Port device team_slave_1 removed [ 236.063050][ T82] team0 (unregistering): Port device team_slave_0 removed [ 236.852664][ T82] team0 (unregistering): Port device team_slave_1 removed [ 236.901818][ T82] team0 (unregistering): Port device team_slave_0 removed [ 237.295735][ T54] Bluetooth: hci5: command tx timeout [ 237.360093][ T9739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.447712][ T9739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.538487][ T9739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.553524][ T9739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.909621][ T9739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.056236][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.136652][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.144009][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.181843][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.189094][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.301533][ T9751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.315066][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 238.319258][ T9751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.331054][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 238.369393][T10034] openvswitch: netlink: Duplicate key (type 32). [ 238.413081][ T9751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.434970][ T9751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.829745][T10014] chnl_net:caif_netlink_parms(): no params data found [ 238.970932][ T9751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.110951][ T9792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.156232][T10051] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 239.164237][ T9792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.179124][ T9792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.192110][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.199642][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.207286][T10014] bridge_slave_0: entered allmulticast mode [ 239.214210][T10014] bridge_slave_0: entered promiscuous mode [ 239.231421][T10051] tipc: Enabling of bearer rejected, failed to enable media [ 239.243578][ T9751] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.257122][ T9792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.295145][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.302692][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.315812][T10014] bridge_slave_1: entered allmulticast mode [ 239.323026][T10014] bridge_slave_1: entered promiscuous mode [ 239.354248][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.361459][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.375795][ T54] Bluetooth: hci5: command tx timeout [ 239.386823][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'. [ 239.399249][T10056] netlink: 188 bytes leftover after parsing attributes in process `syz.2.873'. [ 239.412316][T10056] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 239.414426][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.436620][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.457660][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.464789][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.518748][T10014] team0: Port device team_slave_0 added [ 239.544855][T10014] team0: Port device team_slave_1 added [ 239.559769][ T9739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.618777][T10014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.627113][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.654791][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.686593][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.693817][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.721739][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.794125][T10014] hsr_slave_0: entered promiscuous mode [ 239.801266][T10014] hsr_slave_1: entered promiscuous mode [ 239.821553][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.830653][T10014] Cannot create hsr debugfs directory [ 239.883579][ T9739] veth0_vlan: entered promiscuous mode [ 239.979552][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.027888][ T9739] veth1_vlan: entered promiscuous mode [ 240.136646][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.174124][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.181330][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.226235][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.233373][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.281679][T10062] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 240.350575][ T9751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.376655][T10064] x_tables: duplicate underflow at hook 2 [ 240.447863][ T9739] veth0_macvtap: entered promiscuous mode [ 240.454778][T10014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.497762][T10014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.560629][T10014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.601876][ T9739] veth1_macvtap: entered promiscuous mode [ 240.612467][ T9751] veth0_vlan: entered promiscuous mode [ 240.619385][T10014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.650399][ T9751] veth1_vlan: entered promiscuous mode [ 240.687952][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.701472][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.714145][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.762364][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.781182][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.806809][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.871307][ T9739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.886701][ T9739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.919357][ T9739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.939725][ T9739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.024297][ T9751] veth0_macvtap: entered promiscuous mode [ 241.104238][ T9751] veth1_macvtap: entered promiscuous mode [ 241.146402][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.164187][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.196820][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.215725][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.227875][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.240455][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.300209][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.329112][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.352289][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.378286][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.404085][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.444344][T10092] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 241.455875][ T54] Bluetooth: hci5: command tx timeout [ 241.476805][T10092] netlink: 'syz.2.879': attribute type 2 has an invalid length. [ 241.507468][ T9751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.535108][ T9751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.544586][ T9751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.553717][ T9751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.657567][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.698087][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.735128][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.795126][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.885879][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.893054][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.957316][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.976279][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.002248][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.009466][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.110627][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.136602][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.249163][ T9792] veth0_vlan: entered promiscuous mode [ 242.275285][T10111] netlink: 'syz.2.881': attribute type 8 has an invalid length. [ 242.284223][T10111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.881'. [ 242.331623][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.343024][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.384492][ T9792] veth1_vlan: entered promiscuous mode [ 242.480029][ T9792] veth0_macvtap: entered promiscuous mode [ 242.510449][ T9792] veth1_macvtap: entered promiscuous mode [ 242.699756][ T3448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.932039][ T3448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.981800][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.005197][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.027811][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.059716][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.080281][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.094347][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.106712][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.180100][ T3448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.215189][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.238142][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.251677][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.272653][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.294594][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.319199][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.344539][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.431591][ T3448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.474830][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.488764][ T9792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.511510][ T9792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.524299][ T9792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.535915][ T54] Bluetooth: hci5: command tx timeout [ 243.555574][ T9792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.834680][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.849323][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.858047][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.874685][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.894039][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.903817][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.086922][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.094816][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.186135][ T3448] bridge_slave_1: left allmulticast mode [ 244.191871][ T3448] bridge_slave_1: left promiscuous mode [ 244.235704][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.285229][ T3448] bridge_slave_0: left allmulticast mode [ 244.302605][ T3448] bridge_slave_0: left promiscuous mode [ 244.325977][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.668960][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.683680][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.694016][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.702396][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.716353][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.726577][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.955123][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.971422][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.983302][ T3448] bond0 (unregistering): Released all slaves [ 245.242841][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.268770][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.465325][T10176] x_tables: duplicate underflow at hook 2 [ 245.546295][T10014] veth0_vlan: entered promiscuous mode [ 245.553097][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 245.588292][T10176] bridge_slave_1: left allmulticast mode [ 245.594697][T10176] bridge_slave_1: left promiscuous mode [ 245.625987][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.638321][T10176] bridge_slave_0: left allmulticast mode [ 245.644056][T10176] bridge_slave_0: left promiscuous mode [ 245.676336][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.741692][T10176] bond0: (slave bridge0): Releasing backup interface [ 245.901560][ T3448] hsr_slave_0: left promiscuous mode [ 245.921584][ T3448] hsr_slave_1: left promiscuous mode [ 245.928169][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.939686][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.947891][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.955370][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.980374][ T3448] veth1_macvtap: left promiscuous mode [ 245.986296][ T3448] veth0_macvtap: left promiscuous mode [ 245.991887][ T3448] veth1_vlan: left promiscuous mode [ 245.997388][ T3448] veth0_vlan: left promiscuous mode [ 246.015776][ T5852] Bluetooth: hci0: command tx timeout [ 246.617374][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 246.667173][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 246.816910][ T5852] Bluetooth: hci1: command tx timeout [ 247.131804][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.144539][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.168528][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.200419][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.218405][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.226484][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.435183][T10014] veth1_vlan: entered promiscuous mode [ 247.595827][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'. [ 247.686601][T10014] veth0_macvtap: entered promiscuous mode [ 247.746476][T10192] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 247.820831][T10014] veth1_macvtap: entered promiscuous mode [ 247.972514][T10143] chnl_net:caif_netlink_parms(): no params data found [ 248.001644][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.012909][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.023964][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.035172][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.045463][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.057014][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.069672][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.096909][ T5852] Bluetooth: hci0: command tx timeout [ 248.221350][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.237282][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.264668][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.285813][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.305707][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.325071][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.346779][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.442953][T10161] chnl_net:caif_netlink_parms(): no params data found [ 248.463445][T10014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.490613][T10014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.502606][T10014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.512264][T10014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.563583][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 248.572890][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 248.584459][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.592693][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.601674][T10143] bridge_slave_0: entered allmulticast mode [ 248.608912][T10143] bridge_slave_0: entered promiscuous mode [ 248.688838][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.702003][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.709623][T10143] bridge_slave_1: entered allmulticast mode [ 248.717524][T10143] bridge_slave_1: entered promiscuous mode [ 248.836039][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.885004][T10234] netlink: 61 bytes leftover after parsing attributes in process `syz.2.893'. [ 248.888527][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.894999][T10234] netlink: 61 bytes leftover after parsing attributes in process `syz.2.893'. [ 248.912991][ T5852] Bluetooth: hci1: command tx timeout [ 249.020719][ T3448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.069922][T10143] team0: Port device team_slave_0 added [ 249.097045][ T3448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.123099][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.134424][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.142418][T10161] bridge_slave_0: entered allmulticast mode [ 249.153894][T10161] bridge_slave_0: entered promiscuous mode [ 249.191987][T10143] team0: Port device team_slave_1 added [ 249.198154][T10237] netlink: 'syz.2.894': attribute type 21 has an invalid length. [ 249.206620][T10237] netlink: 156 bytes leftover after parsing attributes in process `syz.2.894'. [ 249.229603][ T3448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.242064][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.249929][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.259019][T10161] bridge_slave_1: entered allmulticast mode [ 249.271256][T10161] bridge_slave_1: entered promiscuous mode [ 249.296537][ T5852] Bluetooth: hci2: command tx timeout [ 249.339553][ T3448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.387770][T10161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.428627][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.452356][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.483358][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.514761][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.566339][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.579939][T10246] xt_nat: multiple ranges no longer supported [ 249.597688][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.612140][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.645163][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.661454][T10161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.893604][T10143] hsr_slave_0: entered promiscuous mode [ 249.917304][T10143] hsr_slave_1: entered promiscuous mode [ 249.977455][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.985352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.013778][T10188] chnl_net:caif_netlink_parms(): no params data found [ 250.053311][T10161] team0: Port device team_slave_0 added [ 250.111293][T10161] team0: Port device team_slave_1 added [ 250.138905][ T52] [ 250.141398][ T52] ============================= [ 250.146560][ T52] WARNING: suspicious RCU usage [ 250.151504][ T52] 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.158823][ T52] ----------------------------- [ 250.163722][ T52] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 250.172619][ T52] [ 250.172619][ T52] other info that might help us debug this: [ 250.172619][ T52] [ 250.183205][ T52] [ 250.183205][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 250.186547][ T5852] Bluetooth: hci0: command tx timeout [ 250.191932][ T52] 3 locks held by kworker/u8:3/52: [ 250.202688][ T52] #0: ffff888061c0c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 250.214107][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 250.227847][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 250.237785][ T52] [ 250.237785][ T52] stack backtrace: [ 250.243737][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 250.254451][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.264535][ T52] Workqueue: bond0 bond_mii_monitor [ 250.269867][ T52] Call Trace: [ 250.273244][ T52] [ 250.276190][ T52] dump_stack_lvl+0x241/0x360 [ 250.280889][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.286107][ T52] ? __pfx__printk+0x10/0x10 [ 250.290729][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 250.296122][ T52] dev_activate+0xf8/0x1240 [ 250.300644][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 250.306593][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 250.311823][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.317733][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.324078][ T52] ? __pfx_dev_activate+0x10/0x10 [ 250.329203][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.335126][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.341479][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 250.346434][ T52] linkwatch_do_dev+0xfb/0x170 [ 250.351221][ T52] ethtool_op_get_link+0x15/0x60 [ 250.356201][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 250.361848][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 250.367073][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 250.372828][ T52] bond_mii_monitor+0x49a/0x3170 [ 250.377806][ T52] ? __lock_acquire+0x1397/0x2100 [ 250.382856][ T52] ? bond_mii_monitor+0x174/0x3170 [ 250.388083][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 250.393486][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 250.398628][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.404642][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.411007][ T52] ? process_scheduled_works+0x976/0x1840 [ 250.416752][ T52] process_scheduled_works+0xa66/0x1840 [ 250.422430][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.428446][ T52] ? assign_work+0x364/0x3d0 [ 250.433054][ T52] worker_thread+0x870/0xd30 [ 250.437672][ T52] ? __kthread_parkme+0x169/0x1d0 [ 250.442724][ T52] ? __pfx_worker_thread+0x10/0x10 [ 250.447858][ T52] kthread+0x2f0/0x390 [ 250.452031][ T52] ? __pfx_worker_thread+0x10/0x10 [ 250.457155][ T52] ? __pfx_kthread+0x10/0x10 [ 250.461763][ T52] ret_from_fork+0x4b/0x80 [ 250.466195][ T52] ? __pfx_kthread+0x10/0x10 [ 250.470807][ T52] ret_from_fork_asm+0x1a/0x30 [ 250.475610][ T52] [ 250.514187][ T52] [ 250.516804][ T52] ============================= [ 250.521696][ T52] WARNING: suspicious RCU usage [ 250.526654][ T52] 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 Not tainted [ 250.533805][ T52] ----------------------------- [ 250.538883][ T52] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 250.547790][ T52] [ 250.547790][ T52] other info that might help us debug this: [ 250.547790][ T52] [ 250.558147][ T52] [ 250.558147][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 250.566307][ T52] 3 locks held by kworker/u8:3/52: [ 250.571461][ T52] #0: ffff888061c0c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 250.582998][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 250.596120][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 250.606048][ T52] [ 250.606048][ T52] stack backtrace: [ 250.612499][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 250.623221][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.633321][ T52] Workqueue: bond0 bond_mii_monitor [ 250.638593][ T52] Call Trace: [ 250.642006][ T52] [ 250.645064][ T52] dump_stack_lvl+0x241/0x360 [ 250.649804][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.655062][ T52] ? __pfx__printk+0x10/0x10 [ 250.659770][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 250.665181][ T52] transition_one_qdisc+0x8e/0x1c0 [ 250.670343][ T52] dev_activate+0x838/0x1240 [ 250.674995][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.681380][ T52] ? __pfx_dev_activate+0x10/0x10 [ 250.686574][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.692566][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.699037][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 250.703931][ T52] linkwatch_do_dev+0xfb/0x170 [ 250.708765][ T52] ethtool_op_get_link+0x15/0x60 [ 250.713761][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 250.719529][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 250.724688][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 250.730366][ T52] bond_mii_monitor+0x49a/0x3170 [ 250.735341][ T52] ? __lock_acquire+0x1397/0x2100 [ 250.740395][ T52] ? bond_mii_monitor+0x174/0x3170 [ 250.745560][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 250.751085][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 250.756153][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.762174][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.768634][ T52] ? process_scheduled_works+0x976/0x1840 [ 250.774372][ T52] process_scheduled_works+0xa66/0x1840 [ 250.779969][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.786149][ T52] ? assign_work+0x364/0x3d0 [ 250.790771][ T52] worker_thread+0x870/0xd30 [ 250.795388][ T52] ? __kthread_parkme+0x169/0x1d0 [ 250.800494][ T52] ? __pfx_worker_thread+0x10/0x10 [ 250.805635][ T52] kthread+0x2f0/0x390 [ 250.809816][ T52] ? __pfx_worker_thread+0x10/0x10 [ 250.814953][ T52] ? __pfx_kthread+0x10/0x10 [ 250.819582][ T52] ret_from_fork+0x4b/0x80 [ 250.824017][ T52] ? __pfx_kthread+0x10/0x10 [ 250.828625][ T52] ret_from_fork_asm+0x1a/0x30 [ 250.833413][ T52] [ 250.851160][ T52] [ 250.853557][ T52] ============================= [ 250.858587][ T52] WARNING: suspicious RCU usage [ 250.863466][ T52] 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 Not tainted [ 250.870699][ T52] ----------------------------- [ 250.875655][ T52] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 250.884699][ T52] [ 250.884699][ T52] other info that might help us debug this: [ 250.884699][ T52] [ 250.895009][ T52] [ 250.895009][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 250.903212][ T52] 3 locks held by kworker/u8:3/52: [ 250.908427][ T52] #0: ffff888061c0c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 250.919985][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 250.933454][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 250.943354][ T52] [ 250.943354][ T52] stack backtrace: [ 250.949483][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 250.960202][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.970280][ T52] Workqueue: bond0 bond_mii_monitor [ 250.975523][ T52] Call Trace: [ 250.978828][ T52] [ 250.981770][ T52] dump_stack_lvl+0x241/0x360 [ 250.986478][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.991700][ T52] ? __pfx__printk+0x10/0x10 [ 250.996319][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 251.001734][ T52] dev_activate+0x925/0x1240 [ 251.006352][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.012705][ T52] ? __pfx_dev_activate+0x10/0x10 [ 251.017772][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 251.023683][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.030037][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 251.034904][ T52] linkwatch_do_dev+0xfb/0x170 [ 251.039680][ T52] ethtool_op_get_link+0x15/0x60 [ 251.044637][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 251.050284][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 251.055427][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 251.061136][ T52] bond_mii_monitor+0x49a/0x3170 [ 251.066162][ T52] ? __lock_acquire+0x1397/0x2100 [ 251.071223][ T52] ? bond_mii_monitor+0x174/0x3170 [ 251.076378][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 251.081786][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 251.086845][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.092868][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.099220][ T52] ? process_scheduled_works+0x976/0x1840 [ 251.104954][ T52] process_scheduled_works+0xa66/0x1840 [ 251.110625][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.116627][ T52] ? assign_work+0x364/0x3d0 [ 251.121470][ T52] worker_thread+0x870/0xd30 [ 251.126090][ T52] ? __kthread_parkme+0x169/0x1d0 [ 251.131136][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.136263][ T52] kthread+0x2f0/0x390 [ 251.140354][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.145489][ T52] ? __pfx_kthread+0x10/0x10 [ 251.150183][ T52] ret_from_fork+0x4b/0x80 [ 251.154608][ T52] ? __pfx_kthread+0x10/0x10 [ 251.159317][ T52] ret_from_fork_asm+0x1a/0x30 [ 251.164198][ T52] [ 251.172817][ T5852] Bluetooth: hci1: command tx timeout [ 251.181167][ T52] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 251.193743][ T52] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 52, name: kworker/u8:3 [ 251.203225][ T52] preempt_count: 0, expected: 0 [ 251.208696][ T52] RCU nest depth: 1, expected: 0 [ 251.213672][ T52] 3 locks held by kworker/u8:3/52: [ 251.219047][ T52] #0: ffff888061c0c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 251.231140][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 251.244464][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 251.254809][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 251.265530][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.275637][ T52] Workqueue: bond0 bond_mii_monitor [ 251.280902][ T52] Call Trace: [ 251.284206][ T52] [ 251.287156][ T52] dump_stack_lvl+0x241/0x360 [ 251.291888][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.297118][ T52] ? __pfx__printk+0x10/0x10 [ 251.301738][ T52] ? __schedule+0x1858/0x4c30 [ 251.306461][ T52] __might_resched+0x5d4/0x780 [ 251.311253][ T52] ? preempt_schedule_notrace+0xf6/0x140 [ 251.316912][ T52] ? __pfx___might_resched+0x10/0x10 [ 251.322221][ T52] ? __pfx___schedule+0x10/0x10 [ 251.327101][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 251.332356][ T52] down_read+0x8e/0xa40 [ 251.336563][ T52] ? dump_stack_lvl+0x2f9/0x360 [ 251.341633][ T52] ? preempt_schedule_notrace+0x100/0x140 [ 251.347394][ T52] ? __pfx_down_read+0x10/0x10 [ 251.352216][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.357537][ T52] ? __pfx__printk+0x10/0x10 [ 251.362202][ T52] ? dev_get_flags+0x147/0x1d0 [ 251.366996][ T52] wext_netdev_notifier_call+0x1f/0x120 [ 251.372589][ T52] notifier_call_chain+0x1a5/0x3f0 [ 251.377741][ T52] netdev_state_change+0x11f/0x1a0 [ 251.380485][ T5852] Bluetooth: hci2: command tx timeout [ 251.382881][ T52] ? __pfx_netdev_state_change+0x10/0x10 [ 251.394021][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 251.400055][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.406444][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 251.411448][ T52] linkwatch_do_dev+0x112/0x170 [ 251.416325][ T52] ethtool_op_get_link+0x15/0x60 [ 251.421305][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 251.426979][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 251.432152][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 251.437836][ T52] bond_mii_monitor+0x49a/0x3170 [ 251.442820][ T52] ? __lock_acquire+0x1397/0x2100 [ 251.447877][ T52] ? bond_mii_monitor+0x174/0x3170 [ 251.453037][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 251.458463][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 251.463539][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.469565][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.475964][ T52] ? process_scheduled_works+0x976/0x1840 [ 251.481992][ T52] process_scheduled_works+0xa66/0x1840 [ 251.487605][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.493636][ T52] ? assign_work+0x364/0x3d0 [ 251.498282][ T52] worker_thread+0x870/0xd30 [ 251.503026][ T52] ? __kthread_parkme+0x169/0x1d0 [ 251.508108][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.513250][ T52] kthread+0x2f0/0x390 [ 251.517344][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.522515][ T52] ? __pfx_kthread+0x10/0x10 [ 251.527132][ T52] ret_from_fork+0x4b/0x80 [ 251.531579][ T52] ? __pfx_kthread+0x10/0x10 [ 251.536197][ T52] ret_from_fork_asm+0x1a/0x30 [ 251.541045][ T52] [ 251.548235][ T52] [ 251.551034][ T52] ============================= [ 251.555900][ T52] [ BUG: Invalid wait context ] [ 251.560757][ T52] 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 Tainted: G W [ 251.569336][ T52] ----------------------------- [ 251.574523][ T52] kworker/u8:3/52 is trying to lock: [ 251.579818][ T52] ffffffff8fca6510 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 251.589356][ T52] other info that might help us debug this: [ 251.595252][ T52] context-{5:5} [ 251.598883][ T52] 3 locks held by kworker/u8:3/52: [ 251.604002][ T52] #0: ffff888061c0c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 251.615093][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 251.628005][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 251.637733][ T52] stack backtrace: [ 251.641449][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 251.653869][ T52] Tainted: [W]=WARN [ 251.657678][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.667752][ T52] Workqueue: bond0 bond_mii_monitor [ 251.672979][ T52] Call Trace: [ 251.676352][ T52] [ 251.679328][ T52] dump_stack_lvl+0x241/0x360 [ 251.684145][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.689546][ T52] ? __pfx__printk+0x10/0x10 [ 251.694250][ T52] __lock_acquire+0x15a8/0x2100 [ 251.699123][ T52] lock_acquire+0x1ed/0x550 [ 251.703639][ T52] ? wext_netdev_notifier_call+0x1f/0x120 [ 251.709435][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 251.714472][ T52] ? preempt_schedule_notrace+0xf6/0x140 [ 251.720123][ T52] ? __pfx___might_resched+0x10/0x10 [ 251.725419][ T52] ? __pfx___schedule+0x10/0x10 [ 251.730296][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 251.735678][ T52] down_read+0xb1/0xa40 [ 251.739862][ T52] ? wext_netdev_notifier_call+0x1f/0x120 [ 251.745617][ T52] ? dump_stack_lvl+0x2f9/0x360 [ 251.750503][ T52] ? preempt_schedule_notrace+0x100/0x140 [ 251.756271][ T52] ? __pfx_down_read+0x10/0x10 [ 251.761073][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.766304][ T52] ? __pfx__printk+0x10/0x10 [ 251.770909][ T52] ? dev_get_flags+0x147/0x1d0 [ 251.775684][ T52] wext_netdev_notifier_call+0x1f/0x120 [ 251.781338][ T52] notifier_call_chain+0x1a5/0x3f0 [ 251.786475][ T52] netdev_state_change+0x11f/0x1a0 [ 251.791805][ T52] ? __pfx_netdev_state_change+0x10/0x10 [ 251.797477][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 251.803482][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.809831][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 251.815061][ T52] linkwatch_do_dev+0x112/0x170 [ 251.820033][ T52] ethtool_op_get_link+0x15/0x60 [ 251.824986][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 251.830677][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 251.835813][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 251.841472][ T52] bond_mii_monitor+0x49a/0x3170 [ 251.846435][ T52] ? __lock_acquire+0x1397/0x2100 [ 251.851500][ T52] ? bond_mii_monitor+0x174/0x3170 [ 251.856636][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 251.862120][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 251.867168][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.873260][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.879876][ T52] ? process_scheduled_works+0x976/0x1840 [ 251.885616][ T52] process_scheduled_works+0xa66/0x1840 [ 251.891207][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.897198][ T52] ? assign_work+0x364/0x3d0 [ 251.901892][ T52] worker_thread+0x870/0xd30 [ 251.906497][ T52] ? __kthread_parkme+0x169/0x1d0 [ 251.911538][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.916656][ T52] kthread+0x2f0/0x390 [ 251.920737][ T52] ? __pfx_worker_thread+0x10/0x10 [ 251.925856][ T52] ? __pfx_kthread+0x10/0x10 [ 251.930489][ T52] ret_from_fork+0x4b/0x80 [ 251.934929][ T52] ? __pfx_kthread+0x10/0x10 [ 251.939564][ T52] ret_from_fork_asm+0x1a/0x30 [ 251.944358][ T52] [ 251.958784][ T3448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.037644][ T52] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 252.119535][ T3448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.255957][ T5852] Bluetooth: hci0: command tx timeout [ 252.408004][ T3448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.482136][T10268] bond0: (slave syz_tun): Releasing backup interface [ 252.591545][ T3448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.714921][ T3448] bridge_slave_1: left allmulticast mode [ 252.721163][ T3448] bridge_slave_1: left promiscuous mode [ 252.728630][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.738319][ T3448] bridge_slave_0: left allmulticast mode [ 252.744013][ T3448] bridge_slave_0: left promiscuous mode [ 252.750243][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.760028][ T3448] bridge_slave_1: left allmulticast mode [ 252.766024][ T3448] bridge_slave_1: left promiscuous mode [ 252.771775][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.780266][ T3448] bridge_slave_0: left allmulticast mode [ 252.787956][ T3448] bridge_slave_0: left promiscuous mode [ 252.793640][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.033494][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.043781][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.054322][ T3448] bond0 (unregistering): Released all slaves [ 253.071989][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.084001][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.096668][ T3448] bond0 (unregistering): Released all slaves [ 253.562843][ T3448] hsr_slave_0: left promiscuous mode [ 253.568786][ T3448] hsr_slave_1: left promiscuous mode [ 253.574775][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.583179][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.602500][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.616211][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.629501][ T3448] hsr_slave_0: left promiscuous mode [ 253.636791][ T3448] hsr_slave_1: left promiscuous mode [ 253.644835][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.653230][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.661486][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.669285][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.684163][ T3448] veth1_macvtap: left promiscuous mode [ 253.690178][ T3448] veth0_macvtap: left promiscuous mode [ 253.697207][ T3448] veth1_vlan: left promiscuous mode [ 253.702543][ T3448] veth0_vlan: left promiscuous mode [ 253.709106][ T3448] veth1_macvtap: left promiscuous mode [ 253.714648][ T3448] veth0_macvtap: left promiscuous mode [ 253.721106][ T3448] veth1_vlan: left promiscuous mode [ 253.726577][ T3448] veth0_vlan: left promiscuous mode [ 253.939629][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 253.965155][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 254.173161][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 254.197440][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 254.774069][ T3448] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.820182][ T3448] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.871120][ T3448] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.932896][ T3448] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.027195][ T3448] bridge_slave_1: left allmulticast mode [ 255.033682][ T3448] bridge_slave_1: left promiscuous mode [ 255.040197][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.049303][ T3448] bridge_slave_0: left allmulticast mode [ 255.054963][ T3448] bridge_slave_0: left promiscuous mode [ 255.061051][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.070895][ T3448] bridge_slave_1: left allmulticast mode [ 255.076877][ T3448] bridge_slave_1: left promiscuous mode [ 255.082666][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.090926][ T3448] bridge_slave_0: left allmulticast mode [ 255.097163][ T3448] bridge_slave_0: left promiscuous mode [ 255.102827][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.111643][ T3448] bridge_slave_1: left allmulticast mode [ 255.117946][ T3448] bridge_slave_1: left promiscuous mode [ 255.123639][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.131883][ T3448] bridge_slave_0: left allmulticast mode [ 255.138604][ T3448] bridge_slave_0: left promiscuous mode [ 255.144319][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.421868][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.433223][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.444199][ T3448] bond0 (unregistering): Released all slaves [ 255.453931][ T3448] bond0 (unregistering): Released all slaves [ 255.464657][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.474937][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.486870][ T3448] bond0 (unregistering): Released all slaves [ 255.498054][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.508483][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.522012][ T3448] bond0 (unregistering): Released all slaves [ 255.992832][ T3448] hsr_slave_0: left promiscuous mode [ 256.007510][ T3448] hsr_slave_1: left promiscuous mode [ 256.013489][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.022998][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.023031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.040280][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.049434][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.059386][ T3448] hsr_slave_0: left promiscuous mode [ 256.065376][ T3448] hsr_slave_1: left promiscuous mode [ 256.071359][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.079547][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.089116][ T3448] veth1_macvtap: left promiscuous mode [ 256.094640][ T3448] veth0_macvtap: left promiscuous mode [ 256.100442][ T3448] veth1_vlan: left promiscuous mode [ 256.109313][ T3448] veth0_vlan: left promiscuous mode [ 256.270343][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 256.303900][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 256.424257][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 256.443054][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 256.593841][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 256.620382][ T3448] team0 (unregistering): Port device team_slave_0 removed