last executing test programs: 1m26.954372413s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m20.313069708s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m10.295188837s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m9.011872422s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 56.32588536s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 55.72439271s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 42.51767129s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 41.682112968s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 26.966187746s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 25.708033796s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 12.133042813s ago: executing program 2 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.073526515s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000040)) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010003b150000000000000000000000002ee3248144564d54321cbc3326177ea43a8b9f13be3dfa38c1a8f02efcc41bc5e86895735b826898707f9468ad9031a625f9c9a2fa1b33c7b62d266f602628f615556b4dcad261a3afd790d13b0be2c4b1203c026e6d4da64cd78c5381e61fb442cef788d17e723103c3a41acd33d22d38407043539b2707956f4ec53328075cc54c56959fccaed441baa8f115aa3c3748e497c8455eb36eca080000447c2dd2000000000073d91d6f0710b3762419bbb6603d0ab4ca073d726403b0eceec353d27b", @ANYRES32=0x0, @ANYBLOB="9001000000000000080023005f6d00000a000100aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.388350371s ago: executing program 1 (id=1770): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00%'], 0x24}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) (rerun: 32) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9d3f5c46000000", @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800800010067726500100002800400120008000700e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.028766619s ago: executing program 0 (id=1774): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 1.028220621s ago: executing program 3 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd9540429144b3a323725902000008", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4c050}, 0x20008000) 1.027044288s ago: executing program 1 (id=1776): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000240)="5825be57aff9352b35d100000000000000e6caa7", 0x14}], 0x1}}], 0x2, 0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 968.713753ms ago: executing program 3 (id=1777): socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000002c0)="32acc1b09694c1d066b8151015205a6c528eeb97e31cc6965cc55828ca129a46437c6b909a2c568ed058ff5024f8a3861252d664695c66efd05a325a48670fd4093e03c758691613582843caca4860e9ef624a9336ce4e9fc637b24a8d301a45bae5176598b6294b84da5ac87016221b4294a51a2af16272635959882a7e8537a32fda9046b5a0b9938fa5873ede854a3ff037d5b6d0d1cf67d9087e36045aaf3e3c273e155c52c2b45155f472b4f1669ced44c814af4e9d29344dec7200a5e1c60a0a2b6854d3a8467d4e26c6de0102c74c7c044a5f21c8db6af8f6ea1a1624b29ea1984194c619d79b", 0xea, 0x4000040, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x101, 0x0, 0x39) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) close(r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xc}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0xf3}], 0x1}, 0x142) recvmmsg(r4, 0x0, 0x0, 0x140, &(0x7f0000002e80)) 898.980898ms ago: executing program 1 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@getchain={0x5c, 0x66, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x2}, {0x1ffc0, 0xfff1}, {0xffff, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}]}, 0x5c}}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r4, 0x0, 0x1, 0x10000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0c0023800800140051", @ANYRES64=r6, @ANYRESOCT, @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 891.240288ms ago: executing program 0 (id=1779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0x0, 0x5, 0x4, 0x5, 0xfff7, 0x4]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20000840) 672.61944ms ago: executing program 1 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000180)="d7387407153a82b7f52653a417990e8bd48ca776d10bea133bd893b79d01f6e6de1d9b36448afbdeaa9c846cd252c48de37f6274c733281aa233654c", &(0x7f0000000380)=""/39}, 0x20) splice(r0, &(0x7f0000000000)=0xe, r0, &(0x7f0000000040)=0x400, 0x400, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="28005080080003000bac0f0011000100caffffffffffffff7f162471f40000000500020004000000e74147b12445a6791f4ccfbd6e487b669b061a5e7a62be8820aec6a19745aa33bab9a15c3c95967653cf0809cd05a7da000dd37bd9215b14262774b746d77ef6018a94e54bda8af9640203c1796d165a844732eb63686c471c1c713fb1423403ae57cba4483fed05ddf5dc2565a460716668b744228a7b3ed1415bc9d52b7f49dfae4505f6eb479879bf4adfd03cd0a9bd862e3f83c26e4d0a541da6d4bd5f0ae778fe1eaf0dd81dc800fdabb87699fc77931e5f4ecf268a70325635af3e21a363d568bf3c47139cb008a67aee9b6317cf6223df348fc6b6a4c2"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r3, 0x29, 0x5, 0x2, 0x2, 0x22, @loopback, @mcast1, 0x1, 0x8000, 0x4, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001d00000428bd7000fddbdf251c000000", @ANYRES32=r7, @ANYBLOB="1000910014000300834d000092b1924925b800000700000008000700ae3a0000140003000500000008000000020000000800000008000b00050000000a000200aaaaaaaaaa1f000008000100000000000a000100ffffffffffff00001e80c2ec32285af19537a1017c304617b2fb5e013860b9af2851932ea1c9f57f0a01af528caef665fa1d3c1a1d2c7b9c652649c443c170bc1b8f58873c"], 0x74}, 0x1, 0x0, 0x0, 0x50005}, 0x0) 670.822572ms ago: executing program 0 (id=1781): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) getsockopt$inet_int(r3, 0x10d, 0xe4, &(0x7f0000000080), &(0x7f0000000000)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="7501001a", @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800c300741300000800c400010000000400c500"], 0x3c}}, 0x0) 568.473806ms ago: executing program 3 (id=1782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) 532.649693ms ago: executing program 1 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000f6ffffffffffff1100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001"], 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x205}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1923}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xecc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 440.802394ms ago: executing program 0 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x23, 0x6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 439.038971ms ago: executing program 3 (id=1785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) socket(0x23, 0x6, 0x401) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x41) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) (async) socket(0x23, 0x6, 0x401) (async) 336.419275ms ago: executing program 0 (id=1786): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, &(0x7f0000000a80)}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) 308.260565ms ago: executing program 1 (id=1787): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x8004) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f00000001c0)=""/139, 0x8b}], 0x2, &(0x7f0000001580)=""/92, 0x5c}, 0x20) 144.192402ms ago: executing program 3 (id=1788): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8000, 0x7, 0x9, 0x1, {{0x29, 0x4, 0x3, 0x6, 0xa4, 0x65, 0x0, 0x9, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, {[@ssrr={0x89, 0xf, 0x4a, [@local, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x23, 0xcb, [@remote, @broadcast, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @remote]}, @rr={0x7, 0x1b, 0xaf, [@empty, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}, @cipso={0x86, 0x40, 0x3, [{0x6, 0xe, "ebd9e93934edc4a42c4019f6"}, {0x5, 0x9, "ae0369f2099ef4"}, {0x7, 0xc, "8935be1c4e84bef76a61"}, {0x6, 0x6, "98f24ec2"}, {0xc0c3d5a5824f415f, 0x6, "b0fb69c4"}, {0x1, 0x6, "11dca39a"}, {0x1, 0x5, "442a9b"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@dev, @private, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x0, 0x73, 0x9, @loopback, @local, 0x1, 0x40, 0x5, 0xfffff001}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x13, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @dev, @broadcast}, &(0x7f0000000780)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000007c0)={@multicast1, @dev, 0x0}, &(0x7f0000000800)=0xc) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={@empty, 0x33, r10}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x7800, 0xf, 0x1, 0x7fffffff, {{0x26, 0x4, 0x2, 0x2, 0x98, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x86, 0xf, "a44d41c933228a6921d3f5833f"}, @noop, @rr={0x7, 0xf, 0x52, [@multicast1, @remote, @broadcast]}, @cipso={0x86, 0x49, 0x3, [{0x4, 0x3, "d1"}, {0x2, 0xe, "659eb4f06fcc56b01dfa7177"}, {0x1, 0xb, "03c0525a2397d10955"}, {0x1, 0x11, "11bd47a8c86e3a3330df5489403565"}, {0x0, 0x3, '2'}, {0x2, 0x3, "c2"}, {0x0, 0x6, "ca0769e6"}, {0x5, 0x8, "356fed96d718"}, {0x6, 0x2}]}, @end, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0xc, [{@multicast1, 0x1}]}, @ssrr={0x89, 0x7, 0x2a, [@loopback]}, @generic={0x82, 0x7, "2c7ab40c30"}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000ac0)={@broadcast, @multicast2, 0x0}, &(0x7f0000000b00)=0xc) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r17, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r19 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r21 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r21, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r20, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}]}}]}, 0xa0}, 0x1, 0x7a00}, 0x0) r22 = socket(0x10, 0x3, 0x0) r23 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r24, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x230, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r24}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x10040804) 79.292752ms ago: executing program 0 (id=1789): r0 = socket$inet_sctp(0x2, 0xb, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x80008000}}]}, 0x3c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000040)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0xd0, r7, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x30000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaca}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9ba2, @ipv4={'\x00', '\xff\xff', @local}, 0x70}}}}]}]}, 0xd0}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @remote}, {0x306}, 0x3a, {0x2, 0x4e20, @local}, 'bond_slave_1\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 0s ago: executing program 3 (id=1790): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) write(r0, &(0x7f0000000340)="4e944543b998f706a584a65b37cfa3922865d945bc11e733a059df6e5b325956804bd1c62aaf3fb29db571329b4a86edb1aa21b6bacc653b6d792a551fceb5fa603bcbf295c8f9d6a26fb2722a478e8d17aba7d86c1352e54ad6a029721bf31b344b680650bfad847b87dcf7a211e1e2784a76674251a5269765489ee1a5e18c03008631b9545d08f71b87d0c3e00212b5a9735f77c359932ff244b5f777a486e1a8b7b3562f77a8de37d38fb89f75faade5ce9adc6bc2a2074af83e9dbf896e0451d1a5cc4fdd", 0xc7) (async) write(r0, &(0x7f0000000340)="4e944543b998f706a584a65b37cfa3922865d945bc11e733a059df6e5b325956804bd1c62aaf3fb29db571329b4a86edb1aa21b6bacc653b6d792a551fceb5fa603bcbf295c8f9d6a26fb2722a478e8d17aba7d86c1352e54ad6a029721bf31b344b680650bfad847b87dcf7a211e1e2784a76674251a5269765489ee1a5e18c03008631b9545d08f71b87d0c3e00212b5a9735f77c359932ff244b5f777a486e1a8b7b3562f77a8de37d38fb89f75faade5ce9adc6bc2a2074af83e9dbf896e0451d1a5cc4fdd", 0xc7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="bc206dd7701aab6f3290c122e688995e21a6e6a4", @ANYRESHEX=0x0, @ANYBLOB="88df8e54b77db9aba8099dcb16d840ffd1482fda2da7fdf330427a26cf8494d787bd4aa3d9ccd98c14fbabd3b4432eafbea7c815a3717d3e4a73db888dd5de80d66ab9e2c1abb72856520f1f27c5151786192b3f94d60fa635932a154529ceb0a477cd501eb8ea621ed13192655aaa74a73125faa368a79af2decd49192fea2bd5f2c70648b38b25e3b3933f67b530fc0cb2b6e2c92eb8d995158ff48ade02ebbe03be14265db06a51ec8cb7508252e747c33e7fbbc92d629c3bcc026e05a726e829fb80d8cedfe7", @ANYRES16=r0, @ANYRES8=r2, @ANYRESDEC=r0], 0x94}}, 0x4004000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="bc206dd7701aab6f3290c122e688995e21a6e6a4", @ANYRESHEX=0x0, @ANYBLOB="88df8e54b77db9aba8099dcb16d840ffd1482fda2da7fdf330427a26cf8494d787bd4aa3d9ccd98c14fbabd3b4432eafbea7c815a3717d3e4a73db888dd5de80d66ab9e2c1abb72856520f1f27c5151786192b3f94d60fa635932a154529ceb0a477cd501eb8ea621ed13192655aaa74a73125faa368a79af2decd49192fea2bd5f2c70648b38b25e3b3933f67b530fc0cb2b6e2c92eb8d995158ff48ade02ebbe03be14265db06a51ec8cb7508252e747c33e7fbbc92d629c3bcc026e05a726e829fb80d8cedfe7", @ANYRES16=r0, @ANYRES8=r2, @ANYRESDEC=r0], 0x94}}, 0x4004000) kernel console output (not intermixed with test programs): tlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 173.027683][T10013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1150'. [ 173.086181][T10015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.174657][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 173.297915][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.319456][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.330933][ T36] bond0 (unregistering): Released all slaves [ 173.664503][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.677693][ T9964] chnl_net:caif_netlink_parms(): no params data found [ 173.845471][ T9811] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.895220][T10036] netlink: 'syz.0.1157': attribute type 26 has an invalid length. [ 173.941185][ T5148] Bluetooth: hci1: command tx timeout [ 173.991974][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 174.005815][ T36] hsr_slave_0: left promiscuous mode [ 174.013771][ T36] hsr_slave_1: left promiscuous mode [ 174.025919][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.043971][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.057561][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.071858][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.095537][ T36] veth1_macvtap: left promiscuous mode [ 174.098278][ T5148] Bluetooth: hci3: command tx timeout [ 174.102980][ T36] veth0_macvtap: left promiscuous mode [ 174.116866][ T36] veth1_vlan: left promiscuous mode [ 174.124100][ T36] veth0_vlan: left promiscuous mode [ 174.660124][ T36] team0 (unregistering): Port device team_slave_1 removed [ 174.716209][ T36] team0 (unregistering): Port device team_slave_0 removed [ 175.152832][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.160059][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.397258][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.404426][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.441523][T10059] xt_bpf: check failed: parse error [ 175.459520][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.482015][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.525259][ T9964] bridge_slave_0: entered allmulticast mode [ 175.533056][ T9964] bridge_slave_0: entered promiscuous mode [ 175.552172][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.591652][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.618435][ T9964] bridge_slave_1: entered allmulticast mode [ 175.625586][ T9964] bridge_slave_1: entered promiscuous mode [ 175.702561][ T9964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.736127][ T9964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.829375][ T9964] team0: Port device team_slave_0 added [ 175.839514][ T9964] team0: Port device team_slave_1 added [ 175.904417][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.923575][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.967992][ T9964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.998328][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.005855][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.037434][ T5148] Bluetooth: hci1: command tx timeout [ 176.045550][ T9964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.172885][ T9964] hsr_slave_0: entered promiscuous mode [ 176.194097][ T9964] hsr_slave_1: entered promiscuous mode [ 176.212746][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 176.291354][T10090] bond0: option mode: unable to set because the bond device has slaves [ 176.378324][T10092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1169'. [ 176.414737][T10095] netlink: 'syz.3.1170': attribute type 9 has an invalid length. [ 176.424422][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 176.461175][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.084277][ T9811] veth0_vlan: entered promiscuous mode [ 177.115224][ T9811] veth1_vlan: entered promiscuous mode [ 177.189297][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 177.261555][ T9811] veth0_macvtap: entered promiscuous mode [ 177.307695][ T9964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.347874][ T9811] veth1_macvtap: entered promiscuous mode [ 177.357151][ T9964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.371730][ T9964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.410062][ T9964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.437895][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.454191][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.479124][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.508238][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.540656][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.633104][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.677265][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.697703][ T9811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.719167][ T9811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.739876][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.769125][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 177.791367][ T9811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.805802][ T9811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.815402][ T9811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.824933][ T9811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.014666][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.081431][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.098202][ T5837] Bluetooth: hci1: command tx timeout [ 178.106153][ T9964] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.113914][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.200167][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.207479][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.252877][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.260083][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.294007][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.309091][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.369668][T10178] __nla_validate_parse: 1 callbacks suppressed [ 178.369690][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 178.449216][T10178] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 178.486531][T10178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.490595][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1196'. [ 178.522102][T10178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1195'. [ 178.751169][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.790411][T10190] netlink: 'syz.3.1197': attribute type 7 has an invalid length. [ 178.881026][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.919553][ T9964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.020621][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.140145][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.226028][ T9964] veth0_vlan: entered promiscuous mode [ 179.280170][ T9964] veth1_vlan: entered promiscuous mode [ 179.304604][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 179.485646][ T9964] veth0_macvtap: entered promiscuous mode [ 179.580136][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.592406][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.601482][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.625575][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.634099][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 179.641645][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.941071][ T5148] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 180.178450][ T5148] Bluetooth: hci1: command tx timeout [ 181.567986][ T9964] veth1_macvtap: entered promiscuous mode [ 181.615819][ T1171] bridge_slave_1: left allmulticast mode [ 181.628698][ T1171] bridge_slave_1: left promiscuous mode [ 181.657164][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.698824][ T5148] Bluetooth: hci3: command tx timeout [ 181.719257][ T1171] bridge_slave_0: left allmulticast mode [ 181.724943][ T1171] bridge_slave_0: left promiscuous mode [ 181.734253][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.157573][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.172088][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.183679][ T1171] bond0 (unregistering): Released all slaves [ 182.207246][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.228565][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.248257][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.259906][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.270148][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.280896][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.294171][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.306617][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1206'. [ 182.332315][T10227] x_tables: duplicate underflow at hook 2 [ 182.358842][T10204] xfrm0 speed is unknown, defaulting to 1000 [ 182.400510][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.448170][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.466649][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.498727][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.518712][ T9964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.541480][ T9964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.554813][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.598884][T10237] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 182.697111][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 182.722435][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 182.767126][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 182.778521][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 182.801629][ T9964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.815094][ T9964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.828244][ T9964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.837077][ T9964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.917171][T10253] netlink: 'syz.0.1213': attribute type 21 has an invalid length. [ 182.936081][T10253] netlink: 'syz.0.1213': attribute type 20 has an invalid length. [ 182.951121][T10253] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.050113][ T1171] hsr_slave_0: left promiscuous mode [ 183.066864][ T1171] hsr_slave_1: left promiscuous mode [ 183.078995][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.086611][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.094806][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.102620][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.125819][ T1171] veth1_macvtap: left promiscuous mode [ 183.131603][ T1171] veth0_macvtap: left promiscuous mode [ 183.137358][ T1171] veth1_vlan: left promiscuous mode [ 183.146963][ T1171] veth0_vlan: left promiscuous mode [ 183.579777][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 183.627343][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 183.778652][ T5148] Bluetooth: hci3: command tx timeout [ 184.335237][T10271] geneve2: entered promiscuous mode [ 184.358374][T10271] geneve2: entered allmulticast mode [ 184.387504][T10277] netlink: 'syz.0.1219': attribute type 2 has an invalid length. [ 184.413429][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 184.597219][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.625413][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.740885][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.758475][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.775601][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 184.795916][T10204] chnl_net:caif_netlink_parms(): no params data found [ 184.815059][T10293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1221'. [ 185.064848][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.083624][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.094145][T10204] bridge_slave_0: entered allmulticast mode [ 185.102384][T10204] bridge_slave_0: entered promiscuous mode [ 185.110628][T10298] netlink: 'syz.0.1222': attribute type 4 has an invalid length. [ 185.161464][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.171478][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.179137][T10204] bridge_slave_1: entered allmulticast mode [ 185.186379][T10204] bridge_slave_1: entered promiscuous mode [ 185.276021][T10204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.304619][T10204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.522051][ T9136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.627891][T10204] team0: Port device team_slave_0 added [ 185.694360][ T9136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.750982][T10204] team0: Port device team_slave_1 added [ 185.800095][T10329] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1231'. [ 185.841364][ T9136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.868259][ T5148] Bluetooth: hci3: command tx timeout [ 186.061779][T10204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.084407][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.148091][T10204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.212774][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.222939][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.231925][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.243465][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.246469][ T9136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.251326][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.272181][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.279660][T10337] netlink: 'syz.0.1229': attribute type 21 has an invalid length. [ 186.308923][T10337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.313098][T10347] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1234'. [ 186.316603][T10337] IPv6: NLM_F_CREATE should be set when creating new route [ 186.325956][T10347] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 186.333032][T10337] IPv6: NLM_F_CREATE should be set when creating new route [ 186.347906][T10337] IPv6: NLM_F_CREATE should be set when creating new route [ 186.378928][T10204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.385965][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.412427][T10204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.520758][T10204] hsr_slave_0: entered promiscuous mode [ 186.529541][T10204] hsr_slave_1: entered promiscuous mode [ 186.535773][T10204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.549298][T10204] Cannot create hsr debugfs directory [ 186.554911][T10344] xfrm0 speed is unknown, defaulting to 1000 [ 186.882146][ T9136] bridge_slave_1: left allmulticast mode [ 186.887864][ T9136] bridge_slave_1: left promiscuous mode [ 186.921368][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.962245][T10367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1239'. [ 186.964078][ T9136] bridge_slave_0: left allmulticast mode [ 186.988858][ T9136] bridge_slave_0: left promiscuous mode [ 186.994783][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.149507][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 187.331500][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 187.520881][ T9136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.532718][ T9136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.544647][ T9136] bond0 (unregistering): Released all slaves [ 187.760292][T10382] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1243'. [ 187.794779][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.941871][ T5847] Bluetooth: hci3: command tx timeout [ 188.115247][T10397] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 188.145566][ T9136] hsr_slave_0: left promiscuous mode [ 188.145668][T10397] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1246'. [ 188.162085][ T9136] hsr_slave_1: left promiscuous mode [ 188.170414][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.177875][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.197410][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.205179][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.237679][ T9136] veth1_macvtap: left promiscuous mode [ 188.243646][ T9136] veth0_macvtap: left promiscuous mode [ 188.249520][ T9136] veth1_vlan: left promiscuous mode [ 188.255588][ T9136] veth0_vlan: left promiscuous mode [ 188.338295][ T5847] Bluetooth: hci1: command tx timeout [ 188.780581][ T9136] team0 (unregistering): Port device team_slave_1 removed [ 188.827096][ T9136] team0 (unregistering): Port device team_slave_0 removed [ 189.450550][T10344] chnl_net:caif_netlink_parms(): no params data found [ 189.637960][T10426] __nla_validate_parse: 1 callbacks suppressed [ 189.637983][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 189.856486][T10435] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1258'. [ 189.873782][T10344] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.897846][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.908897][T10344] bridge_slave_0: entered allmulticast mode [ 189.916035][T10344] bridge_slave_0: entered promiscuous mode [ 189.960023][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.967936][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.002003][T10344] bridge_slave_1: entered allmulticast mode [ 190.009919][T10344] bridge_slave_1: entered promiscuous mode [ 190.145020][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.176413][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.257690][T10450] netlink: 'syz.1.1263': attribute type 39 has an invalid length. [ 190.285694][T10344] team0: Port device team_slave_0 added [ 190.298849][T10204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.324468][T10344] team0: Port device team_slave_1 added [ 190.377134][T10204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.394845][T10455] Bluetooth: MGMT ver 1.23 [ 190.402460][T10204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.418655][ T5847] Bluetooth: hci1: command tx timeout [ 190.436007][T10204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.472364][T10344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.499904][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.541958][T10344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.574191][T10344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.582123][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.611591][T10344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.703551][T10344] hsr_slave_0: entered promiscuous mode [ 190.710791][T10344] hsr_slave_1: entered promiscuous mode [ 190.960674][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.070870][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.105233][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.112438][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.179579][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.186764][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.211724][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 191.627831][T10344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.681333][T10487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 191.704434][T10344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.744148][T10344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.794817][T10344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.865972][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.017276][T10344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.109876][T10344] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.159894][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.167056][ T9136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.226647][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.233837][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.502222][ T5847] Bluetooth: hci1: command tx timeout [ 192.514996][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 192.555927][T10507] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 192.629770][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 192.815914][T10517] netlink: 'syz.3.1278': attribute type 5 has an invalid length. [ 192.873687][T10204] veth0_vlan: entered promiscuous mode [ 192.892697][T10204] veth1_vlan: entered promiscuous mode [ 193.008475][T10204] veth0_macvtap: entered promiscuous mode [ 193.040852][T10204] veth1_macvtap: entered promiscuous mode [ 193.120566][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.141558][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.164766][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.194048][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.215803][T10204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.256040][T10344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.292902][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.320105][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.340450][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.367601][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.400851][T10204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.435229][T10204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.451964][T10204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.462178][T10204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.471759][T10204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.568919][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 193.615593][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 193.627046][T10344] veth0_vlan: entered promiscuous mode [ 193.646544][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 193.676964][T10344] veth1_vlan: entered promiscuous mode [ 193.759921][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 193.820489][T10555] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 193.974292][T10556] "syz.3.1289" (10556) uses obsolete ecb(arc4) skcipher [ 194.101700][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.116580][T10344] veth0_macvtap: entered promiscuous mode [ 194.118547][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.204081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.207226][T10344] veth1_macvtap: entered promiscuous mode [ 194.237247][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.277530][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.303220][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.315058][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.326349][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.339162][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.350575][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.401958][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.435202][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.481101][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.512510][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.551166][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.578513][ T5847] Bluetooth: hci1: command tx timeout [ 194.600325][T10344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.677404][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.708774][T10344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.741175][T10344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.776201][T10344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.804522][T10344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.815357][T10344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.828112][T10344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.869667][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 194.970237][T10583] hsr_slave_0: left promiscuous mode [ 194.992858][T10583] hsr_slave_1: left promiscuous mode [ 195.004396][T10586] sctp: [Deprecated]: syz.3.1298 (pid 10586) Use of int in maxseg socket option. [ 195.004396][T10586] Use struct sctp_assoc_value instead [ 195.069787][T10570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:19968 [ 195.511066][ T8395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.544229][T10603] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1303'. [ 195.580680][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.618544][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.720754][ T8395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.841079][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.880399][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.896058][T10612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1305'. [ 195.910153][ T8395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.936105][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 196.044824][ T8395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.216054][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.238444][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.260540][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.269412][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.282137][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.293163][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.318964][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.463160][T10620] xfrm0 speed is unknown, defaulting to 1000 [ 196.466081][ T8395] bridge_slave_1: left allmulticast mode [ 196.477971][ T8395] bridge_slave_1: left promiscuous mode [ 196.500965][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.526103][ T8395] bridge_slave_0: left allmulticast mode [ 196.532654][ T8395] bridge_slave_0: left promiscuous mode [ 196.540337][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.741147][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 196.997632][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.010506][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.025430][ T8395] bond0 (unregistering): Released all slaves [ 197.276888][T10620] chnl_net:caif_netlink_parms(): no params data found [ 197.471408][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 197.554943][ T8395] hsr_slave_0: left promiscuous mode [ 197.584397][ T8395] hsr_slave_1: left promiscuous mode [ 197.590800][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.598630][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.621312][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.639713][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.676038][ T8395] veth1_macvtap: left promiscuous mode [ 197.687853][ T8395] veth0_macvtap: left promiscuous mode [ 197.695819][ T8395] veth1_vlan: left promiscuous mode [ 197.707394][ T8395] veth0_vlan: left promiscuous mode [ 197.868591][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.880383][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.889739][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.898835][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.906922][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.917600][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.345203][ T5148] Bluetooth: hci3: command tx timeout [ 198.359987][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 198.407609][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 199.035726][T10653] xfrm0 speed is unknown, defaulting to 1000 [ 199.091759][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1316'. [ 199.116342][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.131109][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.139249][T10620] bridge_slave_0: entered allmulticast mode [ 199.147116][T10620] bridge_slave_0: entered promiscuous mode [ 199.162176][T10658] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 199.198255][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.205691][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.229433][T10620] bridge_slave_1: entered allmulticast mode [ 199.236634][T10620] bridge_slave_1: entered promiscuous mode [ 199.324356][T10673] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 199.413448][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.442149][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.614203][T10620] team0: Port device team_slave_0 added [ 199.668666][T10620] team0: Port device team_slave_1 added [ 199.676422][T10677] xt_CT: No such helper "pptp" [ 199.797450][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1324'. [ 199.810259][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.817279][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.854840][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 199.866560][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.995035][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.019241][ T5148] Bluetooth: hci1: command tx timeout [ 200.034487][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.081906][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 200.130803][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.323470][ T8395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.429867][ T5148] Bluetooth: hci3: command tx timeout [ 200.451492][T10653] chnl_net:caif_netlink_parms(): no params data found [ 200.521246][ T8395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.560678][T10620] hsr_slave_0: entered promiscuous mode [ 200.566855][T10620] hsr_slave_1: entered promiscuous mode [ 200.596939][T10620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.618282][T10620] Cannot create hsr debugfs directory [ 200.684728][ T8395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.754906][T10721] syzkaller0: entered allmulticast mode [ 200.820166][ T8395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.910730][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.918341][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.925622][T10653] bridge_slave_0: entered allmulticast mode [ 200.932517][T10653] bridge_slave_0: entered promiscuous mode [ 200.940699][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.948381][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.955740][T10653] bridge_slave_1: entered allmulticast mode [ 200.962996][T10653] bridge_slave_1: entered promiscuous mode [ 201.001466][T10733] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 201.074108][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.108491][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.222899][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1339'. [ 201.252014][T10653] team0: Port device team_slave_0 added [ 201.397807][T10653] team0: Port device team_slave_1 added [ 201.574256][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.598431][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.633490][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.646434][ T8395] bridge_slave_1: left allmulticast mode [ 201.658189][ T8395] bridge_slave_1: left promiscuous mode [ 201.664008][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.673172][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 201.709296][ T8395] bridge_slave_0: left allmulticast mode [ 201.715366][ T8395] bridge_slave_0: left promiscuous mode [ 201.722087][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.104278][ T5837] Bluetooth: hci1: command tx timeout [ 202.165704][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.177592][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.189547][ T8395] bond0 (unregistering): Released all slaves [ 202.218652][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.258338][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.306737][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.506622][ T5837] Bluetooth: hci3: command tx timeout [ 202.511246][T10766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1347'. [ 202.584091][T10653] hsr_slave_0: entered promiscuous mode [ 202.590622][T10653] hsr_slave_1: entered promiscuous mode [ 202.596747][T10653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.608742][T10653] Cannot create hsr debugfs directory [ 202.628921][T10765] tc_dump_action: action bad kind [ 202.680213][T10773] netlink: 'syz.1.1349': attribute type 6 has an invalid length. [ 202.699860][T10773] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1349'. [ 202.728188][T10775] netlink: 'syz.3.1350': attribute type 8 has an invalid length. [ 202.793145][T10778] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1351'. [ 202.802797][T10778] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.923733][T10773] netlink: 'syz.1.1349': attribute type 11 has an invalid length. [ 202.942041][T10782] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1352'. [ 203.330575][ T8395] hsr_slave_0: left promiscuous mode [ 203.349431][T10788] netlink: 'syz.3.1355': attribute type 2 has an invalid length. [ 203.363277][ T8395] hsr_slave_1: left promiscuous mode [ 203.379115][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.387458][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.410613][T10790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1356'. [ 203.411294][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.436668][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.458966][T10792] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 203.472839][ T8395] veth1_macvtap: left promiscuous mode [ 203.478794][ T8395] veth0_macvtap: left promiscuous mode [ 203.484417][T10792] netlink: 'syz.1.1354': attribute type 9 has an invalid length. [ 203.484619][ T8395] veth1_vlan: left promiscuous mode [ 203.499594][ T8395] veth0_vlan: left promiscuous mode [ 203.501136][T10792] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.1354'. [ 203.709080][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1357'. [ 204.059990][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 204.106916][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 204.178943][ T5837] Bluetooth: hci1: command tx timeout [ 204.589141][ T5837] Bluetooth: hci3: command tx timeout [ 204.660214][T10798] tipc: Enabling of bearer rejected, already enabled [ 204.822849][T10620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.862802][T10620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.904877][T10620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.943405][T10620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.990104][T10809] netlink: 'syz.1.1360': attribute type 4 has an invalid length. [ 205.453039][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.475972][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.505585][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.512802][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.563406][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.570738][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.657476][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1370'. [ 205.808767][T10653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.836680][T10653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.857183][T10653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.882771][T10653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.071530][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.093662][T10854] xt_TCPMSS: Only works on TCP SYN packets [ 206.145842][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.219536][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.256682][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.263911][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.272437][ T5837] Bluetooth: hci1: command tx timeout [ 206.306399][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.313615][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.431666][T10653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.470588][T10867] netlink: 'syz.1.1376': attribute type 3 has an invalid length. [ 206.486694][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1376'. [ 206.656214][ T30] audit: type=1107 audit(1742561080.654:3): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 206.752522][T10620] veth0_vlan: entered promiscuous mode [ 206.916354][T10878] netlink: 'syz.1.1379': attribute type 12 has an invalid length. [ 206.932592][T10878] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 206.946919][T10878] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1379'. [ 206.959906][T10878] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1379'. [ 207.034277][T10620] veth1_vlan: entered promiscuous mode [ 207.078961][T10889] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1381'. [ 207.106010][T10889] nbd: must specify at least one socket [ 207.116266][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.131554][T10620] veth0_macvtap: entered promiscuous mode [ 207.164634][T10620] veth1_macvtap: entered promiscuous mode [ 207.236562][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.260941][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.278940][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.303281][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.320690][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.347289][T10653] veth0_vlan: entered promiscuous mode [ 207.367382][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.395433][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.410163][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.423376][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.444917][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.493343][T10620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.515112][T10620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.519096][T10909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1388'. [ 207.528065][T10620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.562866][T10620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.584804][T10653] veth1_vlan: entered promiscuous mode [ 207.586308][T10909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.643313][T10911] xt_l2tp: missing protocol rule (udp|l2tpip) [ 207.680511][T10913] ax25_connect(): syz.1.1390 uses autobind, please contact jreuter@yaina.de [ 207.709069][T10913] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 207.743432][T10913] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1390'. [ 207.760483][T10653] veth0_macvtap: entered promiscuous mode [ 207.782764][T10913] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 207.806215][T10653] veth1_macvtap: entered promiscuous mode [ 207.879897][T10916] tipc: Enabled bearer , priority 0 [ 207.887432][T10916] syzkaller0: entered promiscuous mode [ 207.896157][T10916] syzkaller0: entered allmulticast mode [ 207.959926][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.967395][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.980523][T10919] bond0: left promiscuous mode [ 207.985350][T10919] bond_slave_0: left promiscuous mode [ 207.993798][T10919] bond_slave_1: left promiscuous mode [ 208.000280][T10919] team0: left promiscuous mode [ 208.005519][T10919] team_slave_0: left promiscuous mode [ 208.012364][T10919] team_slave_1: left promiscuous mode [ 208.054905][T10917] tipc: Resetting bearer [ 208.060167][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.085425][T10914] tipc: Resetting bearer [ 208.088116][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.159009][T10914] tipc: Disabling bearer [ 208.195278][T10926] syzkaller1: entered promiscuous mode [ 208.203140][T10926] syzkaller1: entered allmulticast mode [ 208.212538][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.230253][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.244180][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.262851][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.274459][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.288130][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.305352][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.370101][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.388729][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.408199][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.428215][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.450026][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.460786][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.473293][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.581415][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.582857][T10941] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 208.591169][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.620406][T10653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.648204][T10653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.657007][T10653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.698206][T10653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.980014][ T8395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.015887][ T8395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.057448][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.079593][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.233581][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1403'. [ 209.246885][T10965] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.1404'. [ 209.453194][ T1087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.610658][ T1087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.697413][ T1087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.787707][ T1087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.972268][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 210.137445][ T1087] bridge_slave_1: left allmulticast mode [ 210.158827][ T1087] bridge_slave_1: left promiscuous mode [ 210.164651][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.204471][ T1087] bridge_slave_0: left allmulticast mode [ 210.218788][ T1087] bridge_slave_0: left promiscuous mode [ 210.224613][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.371471][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.384129][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.393392][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.412681][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.430160][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.443304][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.699169][T10992] netlink: 'syz.0.1409': attribute type 39 has an invalid length. [ 211.039245][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.052351][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.069049][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.093237][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.121915][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.131748][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.239726][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.251999][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.262955][ T1087] bond0 (unregistering): Released all slaves [ 211.288998][T10994] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 211.548680][T10979] xfrm0 speed is unknown, defaulting to 1000 [ 211.707683][T10996] xfrm0 speed is unknown, defaulting to 1000 [ 211.777466][ T1087] hsr_slave_0: left promiscuous mode [ 211.797903][ T1087] hsr_slave_1: left promiscuous mode [ 211.816474][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.826000][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.834749][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.843727][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.889456][ T1087] veth1_macvtap: left promiscuous mode [ 211.895325][ T1087] veth0_macvtap: left promiscuous mode [ 211.901340][ T1087] veth1_vlan: left promiscuous mode [ 211.906758][ T1087] veth0_vlan: left promiscuous mode [ 211.975659][T11018] __nla_validate_parse: 1 callbacks suppressed [ 211.975675][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1417'. [ 212.198931][T11022] netlink: 'syz.1.1417': attribute type 4 has an invalid length. [ 212.206931][T11022] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1417'. [ 212.454281][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 212.504545][ T5837] Bluetooth: hci1: command tx timeout [ 212.513985][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 213.220014][ T5837] Bluetooth: hci3: command tx timeout [ 213.455323][T10996] chnl_net:caif_netlink_parms(): no params data found [ 213.664383][T10979] chnl_net:caif_netlink_parms(): no params data found [ 213.842657][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 213.884897][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.911686][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.928775][T10996] bridge_slave_0: entered allmulticast mode [ 213.937798][T10996] bridge_slave_0: entered promiscuous mode [ 213.947605][T11066] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 214.021822][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1425'. [ 214.036761][ T1087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.070469][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.089250][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.097377][T10996] bridge_slave_1: entered allmulticast mode [ 214.117833][T10996] bridge_slave_1: entered promiscuous mode [ 214.139835][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1425'. [ 214.182952][T11077] sctp: [Deprecated]: syz.3.1429 (pid 11077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.182952][T11077] Use struct sctp_sack_info instead [ 214.207954][ T1087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.322894][ T1087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.356480][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.367133][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 214.370525][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.387361][T11083] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1431'. [ 214.416610][T10979] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.428334][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.435779][T10979] bridge_slave_0: entered allmulticast mode [ 214.459362][T10979] bridge_slave_0: entered promiscuous mode [ 214.479302][T10979] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.486540][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.508157][T10979] bridge_slave_1: entered allmulticast mode [ 214.517525][T10979] bridge_slave_1: entered promiscuous mode [ 214.578934][ T5837] Bluetooth: hci1: command tx timeout [ 214.592156][ T1087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.665787][T10996] team0: Port device team_slave_0 added [ 214.709940][T10996] team0: Port device team_slave_1 added [ 214.765755][T10979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.799546][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.822328][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.869861][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.902004][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.914290][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.988462][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.002060][T10979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.056404][T11097] netlink: 'syz.1.1438': attribute type 2 has an invalid length. [ 215.067337][T11097] netlink: 'syz.1.1438': attribute type 8 has an invalid length. [ 215.089468][T11097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1438'. [ 215.121290][T10979] team0: Port device team_slave_0 added [ 215.132928][T10996] hsr_slave_0: entered promiscuous mode [ 215.146629][T10996] hsr_slave_1: entered promiscuous mode [ 215.172937][T11099] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 215.206602][T10979] team0: Port device team_slave_1 added [ 215.309673][ T5837] Bluetooth: hci3: command 0x041b tx timeout [ 215.426447][T10979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.439129][T11108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1441'. [ 215.445905][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.491076][T10979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.571802][T11113] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 215.582164][T10979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.591390][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.638171][T10979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.693402][ T1087] bridge_slave_1: left allmulticast mode [ 215.709028][ T1087] bridge_slave_1: left promiscuous mode [ 215.720085][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.742304][ T1087] bridge_slave_0: left allmulticast mode [ 215.763143][ T1087] bridge_slave_0: left promiscuous mode [ 215.778401][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.049404][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 216.346639][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.358515][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.370058][ T1087] bond0 (unregistering): Released all slaves [ 216.441632][T10979] hsr_slave_0: entered promiscuous mode [ 216.451362][T10979] hsr_slave_1: entered promiscuous mode [ 216.457644][T10979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.474067][T10979] Cannot create hsr debugfs directory [ 216.658732][ T5148] Bluetooth: hci1: command tx timeout [ 216.835449][T11148] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 216.861726][T11148] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 216.870624][T11148] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 216.896054][T11148] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 216.927179][T11148] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 217.038316][ T1087] hsr_slave_0: left promiscuous mode [ 217.047198][ T1087] hsr_slave_1: left promiscuous mode [ 217.054204][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.108134][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.116263][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.150805][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.189793][ T1087] veth1_macvtap: left promiscuous mode [ 217.195530][ T1087] veth0_macvtap: left promiscuous mode [ 217.201983][ T1087] veth1_vlan: left promiscuous mode [ 217.207555][ T1087] veth0_vlan: left promiscuous mode [ 217.276025][T11171] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 217.396493][ T5148] Bluetooth: hci3: command 0x041b tx timeout [ 217.470144][T11174] sctp: [Deprecated]: syz.1.1455 (pid 11174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.470144][T11174] Use struct sctp_sack_info instead [ 217.781106][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 217.832994][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 218.329526][T11171] hsr0: entered promiscuous mode [ 218.350365][T11171] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 218.373567][T11171] bond0: (slave hsr0): Error -95 calling set_mac_address [ 218.407078][T11172] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 218.455458][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'. [ 218.514742][T11180] netlink: 'syz.0.1457': attribute type 2 has an invalid length. [ 218.738149][ T5148] Bluetooth: hci1: command tx timeout [ 219.035596][T11205] No such timeout policy "syz0" [ 219.150093][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1466'. [ 219.347932][T10996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.355372][T11217] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1470'. [ 219.378844][T10996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.444558][T10996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.458436][ T5148] Bluetooth: hci3: command 0x041b tx timeout [ 219.492005][T10996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.535961][T10979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.560202][T10979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.584825][T10979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.616448][T10979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.736646][T11230] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1475'. [ 219.806688][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.837667][T10996] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.873068][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.880362][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.905224][T10979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.935351][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.942593][ T9136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.990907][T10979] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.017690][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.024962][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.059437][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.066633][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.471833][T10979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.572140][T10996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.606016][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 220.730598][T10996] veth0_vlan: entered promiscuous mode [ 220.787706][T10996] veth1_vlan: entered promiscuous mode [ 220.892139][T10996] veth0_macvtap: entered promiscuous mode [ 220.930813][T10996] veth1_macvtap: entered promiscuous mode [ 221.024381][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.049310][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.079298][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.111816][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.126640][T10996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.163700][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.186816][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.199139][T10996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.210755][T10996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.232071][T10996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.291232][T10996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.307406][T10996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.319462][T10996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.329575][T10996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.397194][T10979] veth0_vlan: entered promiscuous mode [ 221.451128][T10979] veth1_vlan: entered promiscuous mode [ 221.497176][T11293] validate_nla: 3 callbacks suppressed [ 221.497196][T11293] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 221.538316][ T5148] Bluetooth: hci3: command 0x041b tx timeout [ 221.554602][T11295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.569944][T10979] veth0_macvtap: entered promiscuous mode [ 221.590858][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.598148][T11293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.605782][T11293] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.613030][T11293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.646022][T11293] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.697433][T10979] veth1_macvtap: entered promiscuous mode [ 221.734181][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.763735][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.807143][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.829392][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.857678][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.879034][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.893586][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.913031][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.935113][T10979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.965838][T11304] xfrm0 speed is unknown, defaulting to 1000 [ 221.999176][T11310] netlink: 'syz.3.1494': attribute type 38 has an invalid length. [ 222.028740][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 222.054405][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.078127][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.104978][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.126604][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.155729][T10979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.167463][T10979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.180511][T10979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.203469][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'. [ 222.225422][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.259336][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.279832][T10979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.308788][T10979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.317689][T10979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.339225][T10979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.737365][T11332] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 222.747531][T11332] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1500'. [ 222.824775][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.852582][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.071300][ T8397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.103373][ T8397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.191045][T11347] Cannot find set identified by id 0 to match [ 223.209060][T11350] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1503'. [ 223.341532][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1504'. [ 223.629726][ T3456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.744109][ T3456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.825285][ T3456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.007902][ T3456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.290111][ T3456] bridge_slave_1: left allmulticast mode [ 224.295831][ T3456] bridge_slave_1: left promiscuous mode [ 224.318536][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.338574][ T3456] bridge_slave_0: left allmulticast mode [ 224.344310][ T3456] bridge_slave_0: left promiscuous mode [ 224.354236][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.354434][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.378821][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.387484][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.401687][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.410154][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.419075][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.550950][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 224.590137][T11387] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1510'. [ 224.773180][T11392] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 225.017638][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.037147][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.050992][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.078724][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.095498][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.112283][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.187281][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.204075][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.214813][ T3456] bond0 (unregistering): Released all slaves [ 225.292606][T11400] xfrm0 speed is unknown, defaulting to 1000 [ 225.312831][T11379] xfrm0 speed is unknown, defaulting to 1000 [ 225.452022][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 225.776250][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 225.868123][ T30] audit: type=1800 audit(1742561099.854:4): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1519" name="memory.events" dev="tmpfs" ino=1743 res=0 errno=0 [ 225.998719][T11400] chnl_net:caif_netlink_parms(): no params data found [ 226.111151][ T3456] hsr_slave_0: left promiscuous mode [ 226.117620][ T3456] hsr_slave_1: left promiscuous mode [ 226.139582][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.147108][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.164603][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.174057][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.237159][ T3456] veth1_macvtap: left promiscuous mode [ 226.243535][ T3456] veth0_macvtap: left promiscuous mode [ 226.250105][ T3456] veth1_vlan: left promiscuous mode [ 226.255539][ T3456] veth0_vlan: left promiscuous mode [ 226.326792][T11447] x_tables: unsorted entry at hook 3 [ 226.498129][ T5837] Bluetooth: hci1: command tx timeout [ 226.916575][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 226.981715][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 227.073913][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1525'. [ 227.224575][ T5837] Bluetooth: hci3: command tx timeout [ 227.570117][T11451] team0: Device is already in use. [ 227.583901][T11379] chnl_net:caif_netlink_parms(): no params data found [ 227.660249][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.699120][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.706444][T11400] bridge_slave_0: entered allmulticast mode [ 227.755762][T11400] bridge_slave_0: entered promiscuous mode [ 227.772020][T11463] openvswitch: netlink: Missing valid actions attribute. [ 227.772257][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.786099][T11463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.810370][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.828974][T11400] bridge_slave_1: entered allmulticast mode [ 227.860673][T11400] bridge_slave_1: entered promiscuous mode [ 227.965582][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.023090][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.116388][T11477] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 228.142913][T11400] team0: Port device team_slave_0 added [ 228.175036][T11400] team0: Port device team_slave_1 added [ 228.226388][T11480] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 228.238762][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 228.240274][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.257714][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.266378][T11379] bridge_slave_0: entered allmulticast mode [ 228.274763][T11379] bridge_slave_0: entered promiscuous mode [ 228.315395][T11477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.332846][T11474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.345871][T11474] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 228.358972][T11474] bond3: (slave gre1): Error -95 calling set_mac_address [ 228.382280][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.398804][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.406709][T11379] bridge_slave_1: entered allmulticast mode [ 228.414399][T11379] bridge_slave_1: entered promiscuous mode [ 228.527845][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.546533][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.579273][ T5837] Bluetooth: hci1: command tx timeout [ 228.658553][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.699262][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.765346][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.778138][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.814536][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.897863][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.026861][T11379] team0: Port device team_slave_0 added [ 229.069338][T11400] hsr_slave_0: entered promiscuous mode [ 229.086968][T11400] hsr_slave_1: entered promiscuous mode [ 229.111841][T11379] team0: Port device team_slave_1 added [ 229.136243][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 229.187881][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 229.296287][ T3456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.314246][ T5148] Bluetooth: hci3: command tx timeout [ 229.359748][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 229.541491][ T3456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.612282][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.628098][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.690255][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.762276][ T3456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.784615][T11541] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 229.794774][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.818672][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.852693][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.871312][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 229.884436][T11543] netlink: 'syz.1.1545': attribute type 4 has an invalid length. [ 229.920866][ T3456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.175098][T11379] hsr_slave_0: entered promiscuous mode [ 230.184448][T11379] hsr_slave_1: entered promiscuous mode [ 230.196897][T11379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.214451][T11379] Cannot create hsr debugfs directory [ 230.626153][ T3456] bridge_slave_1: left allmulticast mode [ 230.649121][ T3456] bridge_slave_1: left promiscuous mode [ 230.661530][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.668378][ T5148] Bluetooth: hci1: command tx timeout [ 230.690793][ T3456] bridge_slave_0: left allmulticast mode [ 230.727688][ T3456] bridge_slave_0: left promiscuous mode [ 230.760228][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.779110][ T5148] Bluetooth: hci4: link tx timeout [ 230.785185][ T5148] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 231.384319][ T5837] Bluetooth: hci3: command tx timeout [ 231.395584][T11598] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 231.404669][T11598] netlink: 'syz.1.1559': attribute type 3 has an invalid length. [ 231.412693][T11598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1559'. [ 231.422138][T11598] NCSI netlink: No device for ifindex 131080 [ 231.455556][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.469126][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.480348][ T3456] bond0 (unregistering): Released all slaves [ 231.543125][T11597] bridge: RTM_NEWNEIGH with unconfigured vlan 5 on bridge0 [ 231.943428][T11613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1564'. [ 232.153197][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 232.211362][ T3456] hsr_slave_0: left promiscuous mode [ 232.230520][ T3456] hsr_slave_1: left promiscuous mode [ 232.237548][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.254815][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.272867][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.291473][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.344686][ T3456] veth1_macvtap: left promiscuous mode [ 232.359873][ T3456] veth0_macvtap: left promiscuous mode [ 232.365552][ T3456] veth1_vlan: left promiscuous mode [ 232.372249][ T3456] veth0_vlan: left promiscuous mode [ 232.744159][ T5837] Bluetooth: hci1: command tx timeout [ 232.824440][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 232.921813][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 232.975050][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 233.434674][T11616] tipc: Enabled bearer , priority 10 [ 233.459456][ T5148] Bluetooth: hci3: command tx timeout [ 234.181539][T11400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.222056][T11400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.289208][T11400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.338446][T11672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1578'. [ 234.442492][T11400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.561433][T11379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.612083][T11379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.651134][T11379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.684014][T11379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.767165][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 234.800948][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.808306][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.827744][T11687] bond0: (slave bridge0): Releasing backup interface [ 235.003780][T11379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.053067][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.064012][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1585'. [ 235.093629][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.127386][T11379] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.173390][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.180704][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.254187][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.261396][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.286558][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.293805][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.304950][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.312254][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.452934][T11714] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.985392][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.094444][T11379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.251632][T11763] netlink: 'syz.1.1595': attribute type 16 has an invalid length. [ 236.253290][T11379] veth0_vlan: entered promiscuous mode [ 236.333878][T11379] veth1_vlan: entered promiscuous mode [ 236.341939][T11763] netlink: 'syz.1.1595': attribute type 17 has an invalid length. [ 236.582117][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 236.606778][T11379] veth0_macvtap: entered promiscuous mode [ 236.649403][T11379] veth1_macvtap: entered promiscuous mode [ 236.742955][T11379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.766249][T11379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.792436][T11379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.803324][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 236.815142][T11379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.847188][T11379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.911119][T11379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.939913][T11379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.958431][T11379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.984023][T11379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.009675][T11379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.030987][T11379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.044879][T11379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.066564][T11379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.102349][T11379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.206092][T11400] veth0_vlan: entered promiscuous mode [ 237.294082][T11400] veth1_vlan: entered promiscuous mode [ 237.373559][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 237.401195][T11808] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1602'. [ 237.428214][T11808] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1602'. [ 237.526143][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.554536][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.621470][T11400] veth0_macvtap: entered promiscuous mode [ 237.683150][T11400] veth1_macvtap: entered promiscuous mode [ 237.718719][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.744065][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.771589][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.799285][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.841242][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.868470][T11828] xt_l2tp: wrong L2TP version: 0 [ 237.878142][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.907231][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.922067][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.957130][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.032826][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.098676][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.126173][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.148953][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.175248][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.204532][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.225704][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.283043][T11400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.299589][T11848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1610'. [ 238.315992][T11400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.328110][T11400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.336875][T11400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.376061][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 238.541782][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 238.576415][T11855] netlink: 'syz.1.1612': attribute type 3 has an invalid length. [ 238.847424][T11863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1614'. [ 238.934839][ T8397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.997726][ T8395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.039168][ T8395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.193625][ T8397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.228574][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.255891][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.327449][ T8397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.425237][ T8397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.646705][ T8397] bridge_slave_1: left allmulticast mode [ 239.652783][ T8397] bridge_slave_1: left promiscuous mode [ 239.659442][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.668925][ T8397] bridge_slave_0: left allmulticast mode [ 239.674680][ T8397] bridge_slave_0: left promiscuous mode [ 239.680629][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.369264][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.388851][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.399486][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.416770][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.444151][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.452589][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.496061][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.516113][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.535624][ T8397] bond0 (unregistering): Released all slaves [ 240.654990][T11905] xfrm0 speed is unknown, defaulting to 1000 [ 241.102919][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 241.259351][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.268773][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.284704][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.294012][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.303144][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.312680][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.487444][T11930] xfrm0 speed is unknown, defaulting to 1000 [ 241.507692][T11905] chnl_net:caif_netlink_parms(): no params data found [ 241.592619][ T8397] hsr_slave_0: left promiscuous mode [ 241.620188][ T8397] hsr_slave_1: left promiscuous mode [ 241.626176][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.634532][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.651586][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.660336][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.692748][ T8397] veth1_macvtap: left promiscuous mode [ 241.701887][ T8397] veth0_macvtap: left promiscuous mode [ 241.707700][ T8397] veth1_vlan: left promiscuous mode [ 241.713891][ T8397] veth0_vlan: left promiscuous mode [ 241.777546][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 241.815344][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 242.259028][ T8397] team0 (unregistering): Port device team_slave_1 removed [ 242.316250][ T8397] team0 (unregistering): Port device team_slave_0 removed [ 242.511301][ T5837] Bluetooth: hci1: command tx timeout [ 242.960338][T11962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1631'. [ 243.017102][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1631'. [ 243.065119][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.123906][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.146963][T11905] bridge_slave_0: entered allmulticast mode [ 243.169940][T11905] bridge_slave_0: entered promiscuous mode [ 243.200052][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.207306][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.258417][T11905] bridge_slave_1: entered allmulticast mode [ 243.265627][T11905] bridge_slave_1: entered promiscuous mode [ 243.326285][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1634'. [ 243.379082][ T5837] Bluetooth: hci3: command tx timeout [ 243.459202][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.577427][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.663942][T11905] team0: Port device team_slave_0 added [ 243.682373][T11905] team0: Port device team_slave_1 added [ 243.741634][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.758539][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.790877][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.812018][T11930] chnl_net:caif_netlink_parms(): no params data found [ 243.824340][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.831797][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.858826][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.992718][T11905] hsr_slave_0: entered promiscuous mode [ 244.005979][T11905] hsr_slave_1: entered promiscuous mode [ 244.013427][T11905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.027567][T11905] Cannot create hsr debugfs directory [ 244.227842][ T8397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.254536][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.263073][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.270755][T11930] bridge_slave_0: entered allmulticast mode [ 244.278253][T11930] bridge_slave_0: entered promiscuous mode [ 244.359960][ T8397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.449805][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.473940][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.484820][T11930] bridge_slave_1: entered allmulticast mode [ 244.496021][T11930] bridge_slave_1: entered promiscuous mode [ 244.567057][ T8397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.584030][ T5837] Bluetooth: hci1: command tx timeout [ 244.705521][ T8397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.744560][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.791898][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.943786][T11930] team0: Port device team_slave_0 added [ 244.974092][T11930] team0: Port device team_slave_1 added [ 245.089914][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.096916][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.125650][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.168845][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.177262][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.204148][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.216749][ T8397] bridge_slave_1: left allmulticast mode [ 245.223234][ T8397] bridge_slave_1: left promiscuous mode [ 245.233835][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.283136][ T8397] bridge_slave_0: left allmulticast mode [ 245.289211][ T8397] bridge_slave_0: left promiscuous mode [ 245.295013][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.459125][ T5837] Bluetooth: hci3: command tx timeout [ 245.459417][T12032] netlink: 'syz.1.1651': attribute type 9 has an invalid length. [ 245.805417][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.826193][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.840458][ T8397] bond0 (unregistering): Released all slaves [ 245.932701][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 245.989744][T12037] "syz.0.1652" (12037) uses obsolete ecb(arc4) skcipher [ 246.113485][T11930] hsr_slave_0: entered promiscuous mode [ 246.136237][T11930] hsr_slave_1: entered promiscuous mode [ 246.142964][T11930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.151233][T11930] Cannot create hsr debugfs directory [ 246.533137][ T8397] hsr_slave_0: left promiscuous mode [ 246.546379][ T8397] hsr_slave_1: left promiscuous mode [ 246.583629][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.603632][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.626433][ T8397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.646097][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.659009][ T5837] Bluetooth: hci1: command tx timeout [ 246.689197][ T8397] veth1_macvtap: left promiscuous mode [ 246.694989][ T8397] veth0_macvtap: left promiscuous mode [ 246.701538][ T8397] veth1_vlan: left promiscuous mode [ 246.718235][ T8397] veth0_vlan: left promiscuous mode [ 247.255647][ T8397] team0 (unregistering): Port device team_slave_1 removed [ 247.315808][ T8397] team0 (unregistering): Port device team_slave_0 removed [ 247.548847][ T5837] Bluetooth: hci3: command tx timeout [ 247.867004][T11905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.909862][T11905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.944573][T11905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.971292][T12071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1664'. [ 248.043338][T11905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.233515][T12077] netlink: 'syz.0.1665': attribute type 21 has an invalid length. [ 248.258378][T12077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1665'. [ 248.267676][T12077] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1665'. [ 248.478551][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.527170][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.562964][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.570181][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.594618][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.601840][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.746298][ T5837] Bluetooth: hci1: command tx timeout [ 248.764827][T11930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.784275][T11930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.837042][T11930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.934538][T12089] tipc: Resetting bearer [ 249.618429][ T5837] Bluetooth: hci3: command tx timeout [ 250.157684][T12089] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.179008][T12089] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.187944][T12089] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.199175][T12089] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.355866][T11930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.390543][T12094] netlink: 'syz.1.1671': attribute type 5 has an invalid length. [ 250.418593][ T7855] xfrm0 speed is unknown, defaulting to 1000 [ 250.612325][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.636243][T12116] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 250.672578][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.714715][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.721909][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.764195][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.794415][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.801786][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.915034][T12126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1678'. [ 251.057613][T11905] veth0_vlan: entered promiscuous mode [ 251.082135][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 251.190196][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.198973][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.256572][T12129] bridge0: left promiscuous mode [ 251.343326][T11905] veth1_vlan: entered promiscuous mode [ 251.456741][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.525735][T11905] veth0_macvtap: entered promiscuous mode [ 251.540034][T12146] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 251.565301][T11905] veth1_macvtap: entered promiscuous mode [ 251.626846][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.665678][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.691993][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.709709][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.723451][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.771222][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.797401][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.819963][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.838751][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.864980][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.865582][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 251.929350][T11905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.958684][T11905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.978995][T11905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.990604][T11905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.097681][T12173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1688'. [ 252.305561][T11930] veth0_vlan: entered promiscuous mode [ 252.341887][ T8397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.353993][ T8397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.447474][T11930] veth1_vlan: entered promiscuous mode [ 252.494739][ T9136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.527240][ T9136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.585783][T11930] veth0_macvtap: entered promiscuous mode [ 252.617422][T11930] veth1_macvtap: entered promiscuous mode [ 252.691829][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.713943][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.725619][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.746000][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.770516][T12205] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 252.777490][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.798163][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.820493][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.872665][T12202] bond0: (slave team0): Releasing backup interface [ 252.946817][T12202] bridge_slave_0: left allmulticast mode [ 252.990115][T12202] bridge_slave_0: left promiscuous mode [ 252.996088][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.009645][T12202] bridge_slave_1: left allmulticast mode [ 253.015495][T12202] bridge_slave_1: left promiscuous mode [ 253.022185][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.040276][T12202] bond0: (slave bond_slave_0): Releasing backup interface [ 253.062922][T12202] bond0: (slave bond_slave_1): Releasing backup interface [ 253.122602][T12202] team0: Port device team_slave_0 removed [ 253.137546][T12202] team0: Port device team_slave_1 removed [ 253.144752][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.152873][T12202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.166661][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.174796][T12202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.196641][T12202] bond2: (slave gretap1): Releasing active interface [ 253.230817][T12205] ÿ: mtu greater than device maximum [ 253.236396][T12205] bond0: (slave ÿ): Error -22 calling dev_set_mtu [ 253.369215][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.395095][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.406800][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.421202][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.465307][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.632690][ T1171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.692333][T11930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.723598][T11930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.744094][T11930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.779796][T11930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.937098][ T1171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.025160][ T9136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.034044][ T9136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.065009][ T9136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.073375][ T9136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.331473][ T1171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.532727][ T1171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.668906][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1705'. [ 254.771050][T12254] openvswitch: netlink: Message has 4 unknown bytes. [ 254.778188][T12254] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.810492][ T1171] bridge_slave_1: left allmulticast mode [ 254.816256][ T1171] bridge_slave_1: left promiscuous mode [ 254.832689][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.850318][ T1171] bridge_slave_0: left allmulticast mode [ 254.856141][ T1171] bridge_slave_0: left promiscuous mode [ 254.877112][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.059489][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.071219][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.086040][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.112545][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.141834][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.154638][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.720193][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.750882][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.760148][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.799132][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.806813][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.816068][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.872784][T12281] netlink: 'syz.1.1712': attribute type 4 has an invalid length. [ 255.889308][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.898256][T12281] netlink: 'syz.1.1712': attribute type 11 has an invalid length. [ 255.906131][T12281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1712'. [ 255.958936][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.989388][ T1171] bond0 (unregistering): Released all slaves [ 256.056096][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 256.103606][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.267022][T12274] xfrm0 speed is unknown, defaulting to 1000 [ 256.295548][T12257] xfrm0 speed is unknown, defaulting to 1000 [ 256.600438][ T1171] hsr_slave_0: left promiscuous mode [ 256.608639][ T1171] hsr_slave_1: left promiscuous mode [ 256.614666][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.629459][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.639013][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.655790][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.700972][ T1171] veth1_macvtap: left promiscuous mode [ 256.706581][ T1171] veth0_macvtap: left promiscuous mode [ 256.716042][ T1171] veth1_vlan: left promiscuous mode [ 256.723260][ T1171] veth0_vlan: left promiscuous mode [ 257.219632][ T5148] Bluetooth: hci1: command tx timeout [ 257.279943][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 257.327661][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 257.859049][ T5148] Bluetooth: hci3: command tx timeout [ 257.906570][T12309] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 258.176010][T12257] chnl_net:caif_netlink_parms(): no params data found [ 258.335734][T12325] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1725'. [ 258.406067][T12274] chnl_net:caif_netlink_parms(): no params data found [ 258.518179][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 258.551239][T12257] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.568936][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.576201][T12257] bridge_slave_0: entered allmulticast mode [ 258.591631][T12257] bridge_slave_0: entered promiscuous mode [ 258.620683][T12257] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.629608][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.637736][T12257] bridge_slave_1: entered allmulticast mode [ 258.645572][T12257] bridge_slave_1: entered promiscuous mode [ 258.686499][T12336] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 258.737113][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.766518][T12336] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 258.794354][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.807321][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.901681][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.918295][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.948570][T12274] bridge_slave_0: entered allmulticast mode [ 258.959593][T12274] bridge_slave_0: entered promiscuous mode [ 259.051620][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.107782][T12257] team0: Port device team_slave_0 added [ 259.119307][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.126461][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.132627][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 259.159557][T12274] bridge_slave_1: entered allmulticast mode [ 259.177034][T12274] bridge_slave_1: entered promiscuous mode [ 259.249847][T12257] team0: Port device team_slave_1 added [ 259.299822][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.311659][ T5148] Bluetooth: hci1: command tx timeout [ 259.485456][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.565206][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.674380][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.742419][T12257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.760421][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.798229][T12257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.863332][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.893627][T12274] team0: Port device team_slave_0 added [ 259.915502][T12257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.939097][ T5148] Bluetooth: hci3: command tx timeout [ 259.948738][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.038228][T12257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.091212][T12274] team0: Port device team_slave_1 added [ 260.110880][T12381] x_tables: duplicate underflow at hook 1 [ 260.195364][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.203054][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.236817][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.365143][T12389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1742'. [ 260.390311][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.397628][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.424405][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.458875][T12257] hsr_slave_0: entered promiscuous mode [ 260.465418][T12257] hsr_slave_1: entered promiscuous mode [ 260.490746][T12390] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1743'. [ 260.664986][ T1171] bridge_slave_1: left allmulticast mode [ 260.688548][ T1171] bridge_slave_1: left promiscuous mode [ 260.696324][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.710633][ T1171] bridge_slave_0: left allmulticast mode [ 260.716362][ T1171] bridge_slave_0: left promiscuous mode [ 260.723852][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.378764][ T5148] Bluetooth: hci1: command tx timeout [ 261.489291][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.509500][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.522299][ T1171] bond0 (unregistering): Released all slaves [ 261.542739][T12274] hsr_slave_0: entered promiscuous mode [ 261.552535][T12274] hsr_slave_1: entered promiscuous mode [ 261.559123][T12274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.586868][T12274] Cannot create hsr debugfs directory [ 261.942143][T12422] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1752'. [ 261.951460][T12422] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 261.970577][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'. [ 262.019115][ T5148] Bluetooth: hci3: command tx timeout [ 262.053553][ T1171] hsr_slave_0: left promiscuous mode [ 262.061185][ T1171] hsr_slave_1: left promiscuous mode [ 262.067105][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.075327][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.091053][T12429] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 262.100270][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.107751][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.135442][ T1171] veth1_macvtap: left promiscuous mode [ 262.141911][ T1171] veth0_macvtap: left promiscuous mode [ 262.147593][ T1171] veth1_vlan: left promiscuous mode [ 262.156321][ T1171] veth0_vlan: left promiscuous mode [ 262.167205][T12431] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 262.768336][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 262.850033][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 263.468795][ T5148] Bluetooth: hci1: command tx timeout [ 263.988627][T12460] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 264.100375][ T5148] Bluetooth: hci3: command tx timeout [ 264.255204][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 264.353198][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1770'. [ 264.376078][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1770'. [ 264.386672][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1770'. [ 264.427212][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1770'. [ 264.437309][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1770'. [ 264.656271][T12496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.869858][T12257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.892725][T12257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.961141][T12257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.992110][T12257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.115890][T12274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.162139][T12274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.201239][T12274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.247774][T12274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.402872][T12257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.492832][T12257] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.526406][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.533630][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.596573][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.603792][ T9136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.631340][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.639184][T12529] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 265.651818][T12529] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 265.660278][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.0.1789 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 265.671159][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.681227][T12529] RIP: 0010:tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 265.687681][T12529] Code: 81 d0 00 00 00 48 89 44 24 58 48 8d 81 c8 00 00 00 48 89 44 24 40 45 31 ff 48 89 5c 24 10 4c 89 74 24 50 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 59 81 f6 49 8b 04 24 48 89 44 [ 265.707310][T12529] RSP: 0018:ffffc90004a67040 EFLAGS: 00010246 [ 265.713420][T12529] RAX: 0000000000000000 RBX: ffff88804b5da5e8 RCX: ffff8880291bf500 [ 265.721437][T12529] RDX: ffffc9000ba99000 RSI: 000000000000021b RDI: 000000000000021c [ 265.729429][T12529] RBP: ffffc90004a67190 R08: ffffffff89d13d66 R09: 1ffffffff2079f6e [ 265.737446][T12529] R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 0000000000000000 [ 265.745434][T12529] R13: dffffc0000000000 R14: ffff88804996c098 R15: 0000000000000000 [ 265.753429][T12529] FS: 00007f661b13a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 265.762375][T12529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.768978][T12529] CR2: 000000110c35fdb3 CR3: 000000007cca4000 CR4: 00000000003526f0 [ 265.776963][T12529] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.784945][T12529] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.792933][T12529] Call Trace: [ 265.796265][T12529] [ 265.799212][T12529] ? __die_body+0x5f/0xb0 [ 265.803570][T12529] ? die_addr+0xb0/0xe0 [ 265.807743][T12529] ? exc_general_protection+0x3dd/0x5d0 [ 265.813322][T12529] ? asm_exc_general_protection+0x26/0x30 [ 265.819070][T12529] ? lockdep_rtnl_is_held+0x26/0x40 [ 265.824288][T12529] ? tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 265.830120][T12529] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 265.836301][T12529] ? __pfx___alloc_skb+0x10/0x10 [ 265.841261][T12529] genl_dumpit+0x10d/0x1b0 [ 265.845737][T12529] netlink_dump+0x64d/0xe10 [ 265.850272][T12529] ? __pfx_netlink_dump+0x10/0x10 [ 265.855320][T12529] ? __asan_memset+0x23/0x50 [ 265.859921][T12529] ? genl_start+0x4ae/0x6d0 [ 265.864444][T12529] __netlink_dump_start+0x5a2/0x790 [ 265.869664][T12529] genl_rcv_msg+0x894/0xec0 [ 265.874192][T12529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.879244][T12529] ? __pfx_genl_start+0x10/0x10 [ 265.884113][T12529] ? __pfx_genl_dumpit+0x10/0x10 [ 265.889080][T12529] ? __pfx_genl_done+0x10/0x10 [ 265.893874][T12529] ? __pfx_lock_acquire+0x10/0x10 [ 265.898921][T12529] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 265.905103][T12529] ? __pfx___might_resched+0x10/0x10 [ 265.910421][T12529] netlink_rcv_skb+0x206/0x480 [ 265.915204][T12529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.920252][T12529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.925571][T12529] genl_rcv+0x28/0x40 [ 265.929577][T12529] netlink_unicast+0x7f6/0x990 [ 265.934359][T12529] ? __pfx_netlink_unicast+0x10/0x10 [ 265.940015][T12529] ? __virt_addr_valid+0x45f/0x530 [ 265.945142][T12529] ? __phys_addr_symbol+0x2f/0x70 [ 265.950182][T12529] ? __check_object_size+0x47a/0x730 [ 265.955534][T12529] netlink_sendmsg+0x8de/0xcb0 [ 265.960322][T12529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.965627][T12529] ? aa_sock_msg_perm+0x91/0x160 [ 265.970630][T12529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.975934][T12529] __sock_sendmsg+0x221/0x270 [ 265.980730][T12529] ____sys_sendmsg+0x53a/0x860 [ 265.985509][T12529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.990805][T12529] ? __fget_files+0x2a/0x410 [ 265.995420][T12529] ? __fget_files+0x2a/0x410 [ 266.000063][T12529] __sys_sendmsg+0x269/0x350 [ 266.004702][T12529] ? __pfx_futex_wake+0x10/0x10 [ 266.009576][T12529] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.014723][T12529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.021079][T12529] ? do_syscall_64+0x100/0x230 [ 266.025865][T12529] ? do_syscall_64+0xb6/0x230 [ 266.030571][T12529] do_syscall_64+0xf3/0x230 [ 266.035096][T12529] ? clear_bhb_loop+0x35/0x90 [ 266.039799][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.045709][T12529] RIP: 0033:0x7f661a38d169 [ 266.050152][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.069860][T12529] RSP: 002b:00007f661b13a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.078292][T12529] RAX: ffffffffffffffda RBX: 00007f661a5a5fa0 RCX: 00007f661a38d169 [ 266.086279][T12529] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 266.094262][T12529] RBP: 00007f661a40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.102245][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.110229][T12529] R13: 0000000000000000 R14: 00007f661a5a5fa0 R15: 00007fffbc78fd58 [ 266.118222][T12529] [ 266.121248][T12529] Modules linked in: [ 266.126183][T12529] ---[ end trace 0000000000000000 ]--- [ 266.137911][T12529] RIP: 0010:tipc_udp_nl_dump_remoteip+0x579/0x9c0 [ 266.145686][T12529] Code: 81 d0 00 00 00 48 89 44 24 58 48 8d 81 c8 00 00 00 48 89 44 24 40 45 31 ff 48 89 5c 24 10 4c 89 74 24 50 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 59 81 f6 49 8b 04 24 48 89 44 [ 266.171677][T12529] RSP: 0018:ffffc90004a67040 EFLAGS: 00010246 [ 266.177909][T12529] RAX: 0000000000000000 RBX: ffff88804b5da5e8 RCX: ffff8880291bf500 [ 266.186438][T12529] RDX: ffffc9000ba99000 RSI: 000000000000021b RDI: 000000000000021c [ 266.195157][T12529] RBP: ffffc90004a67190 R08: ffffffff89d13d66 R09: 1ffffffff2079f6e [ 266.203793][T12529] R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 0000000000000000 [ 266.211860][T12529] R13: dffffc0000000000 R14: ffff88804996c098 R15: 0000000000000000 [ 266.220137][T12529] FS: 00007f661b13a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 266.229168][T12529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.235805][T12529] CR2: 00007f7d835762d8 CR3: 000000007cca4000 CR4: 00000000003526f0 [ 266.244128][T12529] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.252475][T12529] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.261132][T12529] Kernel panic - not syncing: Fatal exception [ 266.267586][T12529] Kernel Offset: disabled [ 266.271923][T12529] Rebooting in 86400 seconds..