last executing test programs: 1m45.689358517s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 1m39.794640169s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 1m24.245587914s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 1m18.258526052s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 1m7.012564296s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 1m5.29629896s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 49.294988918s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 48.151705493s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 30.525567428s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 29.287649704s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 13.592203083s ago: executing program 0 (id=1366): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf250e0000002000028008000c005b0f038008000200ff070000080002000702000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce322e12d340) 13.04172201s ago: executing program 4 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r4}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 7.898213866s ago: executing program 2 (id=2267): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 7.637515133s ago: executing program 2 (id=2270): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000013020000050000000000a62f568b879ab7e6023e23956e1cdadfee8c339bbd2e253cbde5b78a87918bc6a8f0f71b3646370c5d72289b5bdffe3a9d4fc392658ee221a0e1a79b24d7a0d6ac813f96c6ca0e2ee00f37454d5f24ddf9b0d84a87cb65f70b04009702de00"/146], 0x0, 0x32}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1d}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xa4}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) vmsplice(r4, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffffffffffed8, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_EGRESS_BLOCK]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x3051, 0x4) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000001180016801400018010000600000100000000000000040000140014"], 0x4c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0) 7.303361983s ago: executing program 2 (id=2274): socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0xb, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r7], 0x20}}, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffff1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcfb9cc821fc0631b}}}}}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0), 0x6db6e559) 5.515618167s ago: executing program 2 (id=2281): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0x4, 0xffff, 0x424, 0xffffffffffffffff, 0x46, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x1}, 0x48) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x1}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@li, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x6, &(0x7f00000001c0)=""/231}, 0x90) 4.790519935s ago: executing program 2 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000", @ANYRES32=r0, @ANYRES32=r2], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="220033000300000000000000000108021100000050505050505000000f04000000000000"], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70000000900000085000000860000009500000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x34, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {0xfff3, 0x10}, {0xfff3, 0x5}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x40}]}, 0x34}}, 0x0) unshare(0x20000400) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r10, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="030722a0d7b1ffdbdf250b0000000800030085449066a641d5564f2ecfde4523be67a5ada399c9cb0d8f16535b4873f8fc3e7b1184f661096f36f42136f0c9c93927", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000180060001000200000008000301e0000001080006001800"/42], 0x30}}, 0x0) 3.215005076s ago: executing program 3 (id=2290): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000007"], 0xd) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.945202985s ago: executing program 2 (id=2291): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x200001d2, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000e30b00000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7d7, 0x0, 0x2}, 0x4f) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="a50000008b0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2.734988966s ago: executing program 3 (id=2293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x92, 0x0, &(0x7f00000000c0)) 2.395803154s ago: executing program 3 (id=2297): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="76379893bdf43ff388495471bcc49aae7e215bca98720e4f743bb0ecd27a647ecf234e3d60df4b47a7533314b22e9cabf6a0108080fa689d80", 0x39}], 0x1}, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000002e40)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_DELSETELEM={0x1430, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1410, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x126c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "45538ca8eccc6c0717"}]}, @NFTA_SET_ELEM_DATA={0x10f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x77, 0x1, "efd7d59bd2e560385ab3ccfa96c96f9c81c4ff76e2f27f4d8a10eb26908610d265969c136f43859089708c52d1489593374e8d908ecffbc908a8ddfa6b6edf890e6afcb48b28e1157947a573dd76322566894e58f8f62369033857a8d6320a77af3bfe0cca872b22f41d15f037ef819ac7622a"}, @NFTA_DATA_VALUE={0x19, 0x1, "0a2d369904827af302f39b150fbb5b34ccd7264bf7"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x583a}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7fff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "d76981b391839246d5b01c7caa2778725bce8bd4c4cfc55e6009162e5c3cec2b7ad2cf3aafbcf0305fd3d9ead19efddeecf112e61b9d646c5735b6c73cd57da696221d61fda8e61664a179dda1900f1030e798000c8ff24e465a5fb5646fa9574f5d70e219d515f35d87e681d1eeb941f661daf2290aebec43360e026cb373ad5225e7a430"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x30, 0x6, 0x1, 0x0, "d3b43678b247073414d058ab43409c96cf3879fa0385087f916d7ec3d8c0422fff611a0c2b78bf4cfb0500f9"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "efbd54b53643f5712c50"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "e05d5bb3fe0710ab122189232e357424f03570520ea9f64e31e7cdccec3f5ddf4b0cc13aa8763b62671934ba6ee13c"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x14ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.305349625s ago: executing program 3 (id=2298): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) sendmsg$nl_route(r2, 0x0, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xbbc830f88e03ec87}}, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xe) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000013c0)=@newpolicy={0x27c, 0x13, 0x429, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@algo_auth={0x1c4, 0x5, {{'streebog512-generic\x00'}, 0xbe0, "cde307f8f962b60c05ee923b64e8e8f24ff42f9bfbfe34efd167c5af73f8c70ca243d749b48ca13b907c3a2d0b2fcef6428399d6b99055b5a06e534062c93224d3810c0fbee7bb2b3547796d2950e193cd908317afac146c847eb40ff3b2988c10d22c7c8344bc8c983c970138ce911fcb6fdcf26ee463e48da558ca018994026ef587c5d9e367238cee42ee72428f4193db081b4e61f7732ae60d07880dde642814ea90fd7744fdcfca3ad3a55df80cf6199478d228e0cc09d7506892aa55ef44eb0ebf2bcf7ca32cc1cb7e7eaf8c7a8918c95976940f33c0dc64302114cbe39335a60769f92c505e99d88741ed3e8ef61acfb2312ea5988dc6a4b168ef58a208d542c12e3c3bd8156a369b4cc124196d11e1bbf2db1eb5539ebb7913caa48e0f47cb1ef9f2fa927fe0bed6c157c388536ad9f224c8129572cd93b430f4de157cedcdfb68c42e5e3469eb371e913451a5ad37fdc81e31fcc467ebdaacb160cf462f90920583f38f68fa82e14ba9a591699cb022b59bddd660ea7248"}}]}, 0x27c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.181881302s ago: executing program 3 (id=2303): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000240)=[{r0, 0xe25c9a466c376ce5}], 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', '', [{0x20, 'veth0_virt_wifi\x00'}, {0x20, 'nl80211\x00'}]}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000de1e7edf5300001b"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0xfffbffff) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff52, &(0x7f0000000240)='cgroup\x00\x02\x12.\x92a\xf8\x1e\xef}\x19\xe7\\\xb1=\x00\xed^i@`\xef\xc0s[\x06{\n\x89*i\x8b\x87\x04\xc6}?r\xc8V\x93UBk\xf6\xfazl\x15\xeb1wTn\xad\xeeB\aU?(\x18~\"\xb9\xe6a%;!O\x7f\x02\x04\x13\xe2\xed'}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) 444.277905ms ago: executing program 1 (id=2308): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x3c}}, 0x0) 349.339272ms ago: executing program 1 (id=2309): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x75, 0xce, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x0, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x2, 0x8000}, 0x50) syz_emit_ethernet(0x56, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500200600fc000000000000000000000000000000fe800000000000aa00"/58, @ANYRES32=0x41424344, @ANYBLOB="f4d298174897be4802e67e62cf7f9208d1dd09165e220142346dde0e90c03427f407e807a4ecdc6f427090d52fd23bdf49cd9ef18b704970535b34", @ANYBLOB="8010000090780000050a00"/20, @ANYRES8, @ANYRES8=r2, @ANYRESDEC], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002a0001000000000000000000050000000c000a"], 0x20}, 0x1, 0x900000000000000}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207104e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 284.162606ms ago: executing program 1 (id=2310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$unix(0x1, 0x1, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async, rerun: 32) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0xbb3e}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) socket$tipc(0x1e, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000014c0)=0x5) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x0, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000180)=0x55b7, 0x4) (async) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003500)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x432d}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)="e1b5e4b41a40d1542a3d4fce184ff60e7e71d9b2ee337ad5cfaf86494f2198ba89994d4ca55e2fa7e11eb82576ae25424f9cea7b82d50a22ef83471e7287ca158e527649a686f165a88f2db58e4ec8626156dc4c0b7a07fec228d2c307f2acf5b5c9ac2fa7cb743e5467ecfa961bb103bffe99b3dae1d2adfacb64bb79f35b5e99472955c5c34397d51199f60a0126747c4adc10c25f5a0e6bbc5732d57d127a90afd93aa2c893921bcf7c6cb7e8bc8b208f6b7d1a01385db8bdcf753189b55fea7f", 0xc2}, {&(0x7f0000000200)="4b57a8d010e8f7c2478722b0be4c280e2ecd25ec4cc8b675a33027b8c6398d4b1938d9d1e23262a529ae368a8d7863692aeeea4c3f98f66b2764c2dfe65903056c2b3503d10359b5797976f5a17436f0407511a4aba9e8798f2843cc6e325adb5391bd229ef2dabfb1b4ad9e1e9234d18484ca8bad6be3cb", 0x78}], 0x2, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x100}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001600)="8bd2bdbe84143fbd6dc6719ba4a3d2f788e2381de5e9ab5fd7be7bb4fba77c7fdca77e87424e733fcbbf679ddf5827714fdf2efc4b44a160b61c1d687762dc032321df561fa543f0f6bc4c11a9e74314647f0e7d0a3198729ee0d2f50db99ca5b18eb8820f30ac738dac2ecb985989d22ca65e2478080b841e9e4474cf8bc69e7e55d147a3bd039e45b7d6c2591cd2999902e8dcdcc8410f66584dc8133a4f1890215f4faa448c78c720d4facc4bdfcf8d", 0xb1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x42) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd0c, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080003000200000008000700020000000500060000000000"], 0x4c}}, 0x0) 164.352756ms ago: executing program 3 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0xbb3e}) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000180)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080003000200000008000700020000000500060000000000"], 0x4c}}, 0x0) 163.92015ms ago: executing program 1 (id=2312): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x4, 0x0, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x41}, 0x20) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 82.434263ms ago: executing program 1 (id=2313): socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) (async) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0}, 0x0) 0s ago: executing program 1 (id=2314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="24000000fc82b70547b94f8338e42dc18e57d3599d363df10ca30226fe2bae50d8a986b8f4402e650250bc2e5e842330078654991a0f4f52f4d95ddc5fef0b09c726dca44b580387d8e3ff119e0ad93ec4650979f245b2580bb021bdcd7e2455c0a6c01fd644c6ce380415", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000ac0)=ANY=[@ANYBLOB="94000000f702110000000802110000000400f201f1b3d6a15649f76f"], 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xd21, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) write$cgroup_type(r5, &(0x7f0000000140), 0x9) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000740)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="f4c7d641c39a7197fd1d000700080211000001080211000000"], 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.647765][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.657871][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.668870][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.681255][T10880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.704968][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.728730][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.744756][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.779836][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.798933][T10880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.808206][T10880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.817642][T10880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.831171][T10880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.855235][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.862702][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.894885][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.977686][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1772'. [ 285.998796][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.069979][T11090] hsr_slave_0: entered promiscuous mode [ 286.076348][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 286.087843][T11090] hsr_slave_1: entered promiscuous mode [ 286.102225][T11090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.109864][T11090] Cannot create hsr debugfs directory [ 286.158071][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.165369][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.267126][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.274372][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.530097][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.558476][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.566369][ T5098] Bluetooth: hci3: command tx timeout [ 286.686299][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.694790][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.725810][T11090] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.862958][T11090] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.075718][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 287.125132][T11090] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.220869][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.259349][T11090] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.529484][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.577977][T10981] veth0_vlan: entered promiscuous mode [ 287.725486][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.786524][T10981] veth1_vlan: entered promiscuous mode [ 287.834513][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.890517][T11090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.919228][T11090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.942061][T11090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.983534][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.009610][T11090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.118402][T10981] veth0_macvtap: entered promiscuous mode [ 288.134577][T10981] veth1_macvtap: entered promiscuous mode [ 288.220723][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.232916][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.252875][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.263638][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.273644][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.284386][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.294598][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.306153][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.316892][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.328435][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.340626][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.385180][ T62] bridge_slave_1: left allmulticast mode [ 288.390894][ T62] bridge_slave_1: left promiscuous mode [ 288.399746][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.419316][ T62] bridge_slave_0: left allmulticast mode [ 288.425526][ T62] bridge_slave_0: left promiscuous mode [ 288.439039][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.646398][ T5098] Bluetooth: hci3: command tx timeout [ 289.088823][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.119384][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.148461][ T62] bond0 (unregistering): Released all slaves [ 289.192186][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.221482][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.252485][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.301475][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.311362][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.371196][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.390471][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.408671][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.420112][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.430807][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.463543][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.556231][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 289.688157][T10981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.714933][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.720884][T10981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.725392][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.730968][T10981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.731009][T10981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.741892][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.796330][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.831709][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.839527][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.099971][T11090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.271308][T11216] lo speed is unknown, defaulting to 1000 [ 290.365765][T11090] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.431944][ T62] hsr_slave_0: left promiscuous mode [ 290.462570][ T62] hsr_slave_1: left promiscuous mode [ 290.469789][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.498350][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.522528][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.530017][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.624418][ T62] veth1_macvtap: left promiscuous mode [ 290.630035][ T62] veth0_macvtap: left promiscuous mode [ 290.642141][ T62] veth1_vlan: left promiscuous mode [ 290.647679][ T62] veth0_vlan: left promiscuous mode [ 291.751390][ T62] team0 (unregistering): Port device team_slave_1 removed [ 291.806149][ T62] team0 (unregistering): Port device team_slave_0 removed [ 291.923767][ T5098] Bluetooth: hci0: command tx timeout [ 292.546551][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.553791][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.634578][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.641809][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.696664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.712339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.796036][T11227] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1791'. [ 292.840870][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.862957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.359670][T11216] chnl_net:caif_netlink_parms(): no params data found [ 293.501902][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.601988][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.699271][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.715616][T11216] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.725624][T11216] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.733259][T11216] bridge_slave_0: entered allmulticast mode [ 293.743069][T11216] bridge_slave_0: entered promiscuous mode [ 293.755281][T11216] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.763773][T11216] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.771068][T11216] bridge_slave_1: entered allmulticast mode [ 293.778425][T11216] bridge_slave_1: entered promiscuous mode [ 293.814823][T11216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.830578][T11216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.859358][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.926324][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.952817][T11216] team0: Port device team_slave_0 added [ 293.963608][T11216] team0: Port device team_slave_1 added [ 293.997387][T11216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.007035][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.023302][ T5098] Bluetooth: hci0: command tx timeout [ 294.034552][T11216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.056130][T11216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.063475][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.089667][T11216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.259651][T11216] hsr_slave_0: entered promiscuous mode [ 294.270135][T11216] hsr_slave_1: entered promiscuous mode [ 294.286083][T11216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.299737][T11216] Cannot create hsr debugfs directory [ 294.543265][T11090] veth0_vlan: entered promiscuous mode [ 294.567460][ T62] bridge_slave_1: left allmulticast mode [ 294.592339][ T62] bridge_slave_1: left promiscuous mode [ 294.606289][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.657018][ T29] audit: type=1804 audit(1719857858.837:19): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1800" name="/root/syzkaller.ysHpI7/506/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 294.682747][ T62] bridge_slave_0: left allmulticast mode [ 294.688450][ T62] bridge_slave_0: left promiscuous mode [ 294.694494][ T29] audit: type=1804 audit(1719857858.847:20): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1800" name="/root/syzkaller.ysHpI7/506/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 294.711741][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.717689][ T29] audit: type=1804 audit(1719857858.907:21): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1800" name="/root/syzkaller.ysHpI7/506/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 294.746342][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.762595][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.771959][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.789143][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.799769][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.808902][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.071253][T11273] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1802'. [ 295.328385][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.340660][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.353909][ T62] bond0 (unregistering): Released all slaves [ 295.473669][T11090] veth1_vlan: entered promiscuous mode [ 295.704905][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1805'. [ 295.769506][T11265] lo speed is unknown, defaulting to 1000 [ 295.907240][T11090] veth0_macvtap: entered promiscuous mode [ 295.953816][T11090] veth1_macvtap: entered promiscuous mode [ 296.024179][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.036931][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.054251][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.070591][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.083397][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.095587][ T5098] Bluetooth: hci0: command tx timeout [ 296.102540][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.113596][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.124800][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.135081][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.145945][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.158775][T11090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.335570][ T62] hsr_slave_0: left promiscuous mode [ 296.347056][ T62] hsr_slave_1: left promiscuous mode [ 296.356430][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.367496][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.375762][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.383419][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.410994][ T62] veth1_macvtap: left promiscuous mode [ 296.418099][ T62] veth0_macvtap: left promiscuous mode [ 296.431747][ T62] veth1_vlan: left promiscuous mode [ 296.437150][ T62] veth0_vlan: left promiscuous mode [ 296.882133][ T5098] Bluetooth: hci4: command tx timeout [ 297.158128][ T62] team0 (unregistering): Port device team_slave_1 removed [ 297.213957][ T62] team0 (unregistering): Port device team_slave_0 removed [ 297.850338][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.869327][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.879259][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.889910][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.900038][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.910793][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.920701][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.936570][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.959465][T11090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.026086][T11090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.035521][T11090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.046751][T11090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.077179][T11090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.164635][ T5098] Bluetooth: hci0: command tx timeout [ 298.598604][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.601155][T11321] infiniband syz0: set active [ 298.611658][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.629629][T11321] tipc: Resetting bearer [ 298.645160][T11321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 298.707919][ T25] lo speed is unknown, defaulting to 1000 [ 298.852500][T11216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.879604][T11216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.891309][ T2843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.907102][T11216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.919036][ T2843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.950977][T11265] chnl_net:caif_netlink_parms(): no params data found [ 298.961673][ T5098] Bluetooth: hci4: command tx timeout [ 298.981086][T11216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.007073][T11335] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1821'. [ 299.285160][T11265] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.307836][T11265] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.325706][T11265] bridge_slave_0: entered allmulticast mode [ 299.339245][T11265] bridge_slave_0: entered promiscuous mode [ 299.357008][T11265] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.373268][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.389502][T11265] bridge_slave_1: entered allmulticast mode [ 299.403198][T11265] bridge_slave_1: entered promiscuous mode [ 299.500162][T11265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.536457][T11265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.671140][T11265] team0: Port device team_slave_0 added [ 299.716074][T11265] team0: Port device team_slave_1 added [ 299.839872][T11364] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 299.865775][T11265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.882769][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.923092][T11265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.941290][T11265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.951306][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.978729][T11265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.024297][T11372] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1831'. [ 300.180281][T11265] hsr_slave_0: entered promiscuous mode [ 300.222977][T11265] hsr_slave_1: entered promiscuous mode [ 300.242063][T11265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.249694][T11265] Cannot create hsr debugfs directory [ 300.301337][T11386] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1834'. [ 300.349863][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 300.391389][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 300.505148][T11216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.625591][T11216] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.685359][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.692688][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.714183][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.721593][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.729828][ T29] audit: type=1804 audit(1719857864.917:22): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1839" name="/root/syzkaller.ysHpI7/523/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0 [ 301.041786][ T5098] Bluetooth: hci4: command tx timeout [ 301.120220][T11407] infiniband syz0: set active [ 301.135948][T11407] tipc: Resetting bearer [ 301.149792][T11407] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.181558][ T25] lo speed is unknown, defaulting to 1000 [ 301.206666][T11265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.256151][T11265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.269113][T11265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.302777][T11265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.407598][T11216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.643063][T11265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.707132][T11265] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.730474][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.737773][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.759880][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.767180][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.133306][T11216] veth0_vlan: entered promiscuous mode [ 302.147281][ T29] audit: type=1804 audit(1719857866.347:23): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1852" name="/root/syzkaller.ysHpI7/529/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0 [ 302.187218][T11216] veth1_vlan: entered promiscuous mode [ 302.214505][T11445] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 302.299320][T11216] veth0_macvtap: entered promiscuous mode [ 302.336361][T11216] veth1_macvtap: entered promiscuous mode [ 302.423300][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.445483][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.465990][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.487372][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.497740][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.510109][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.533681][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.546408][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.560367][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.583086][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.600527][T11216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.611352][T11452] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 302.623873][T11454] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 302.636207][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.655988][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.666155][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.676929][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.686829][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.697342][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.709861][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.720349][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.732439][T11216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.743989][T11216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.757954][T11216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.786320][T11216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.806997][T11216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.822191][T11216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.830976][T11216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.880748][T11265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.120371][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.122197][ T5098] Bluetooth: hci4: command tx timeout [ 303.145427][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.371344][T11265] veth0_vlan: entered promiscuous mode [ 303.405483][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.416245][T11265] veth1_vlan: entered promiscuous mode [ 303.441807][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.588318][T11265] veth0_macvtap: entered promiscuous mode [ 303.724138][T11265] veth1_macvtap: entered promiscuous mode [ 303.808270][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.819653][ T29] audit: type=1804 audit(1719857868.007:24): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1867" name="/root/syzkaller.ysHpI7/535/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 303.849147][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.874581][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.902095][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.919583][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.940969][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.963682][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.991949][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.032664][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.058967][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.084941][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.096767][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.108878][T11265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.118650][T11496] netlink: 'syz.1.1872': attribute type 12 has an invalid length. [ 304.150314][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.186556][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.198187][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.218530][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.228600][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.253271][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.267838][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.278917][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.281602][T11500] x_tables: duplicate entry at hook 3 [ 304.293732][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.304850][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.310410][T11500] xt_TCPMSS: Only works on TCP SYN packets [ 304.325574][T11265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.346965][T11265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.363111][T11265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.437291][T11265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.462120][T11265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.479174][T11265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.499751][T11265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.756262][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.779494][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1881'. [ 304.908092][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.937307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.953865][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.008572][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.017237][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.051080][T11516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.248865][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.538427][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.662168][ T51] bridge_slave_1: left allmulticast mode [ 305.667882][ T51] bridge_slave_1: left promiscuous mode [ 305.673786][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.687280][ T51] bridge_slave_0: left allmulticast mode [ 305.693236][ T51] bridge_slave_0: left promiscuous mode [ 305.699097][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.138246][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.152123][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.166879][ T51] bond0 (unregistering): Released all slaves [ 306.710448][ T51] hsr_slave_0: left promiscuous mode [ 306.718856][ T51] hsr_slave_1: left promiscuous mode [ 306.727930][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.739933][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.742384][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.758131][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.766386][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.766708][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.782928][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.791638][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.807762][ T51] veth1_macvtap: left promiscuous mode [ 306.814105][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 306.815318][ T51] veth0_macvtap: left promiscuous mode [ 306.822954][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.829348][ T51] veth1_vlan: left promiscuous mode [ 306.839235][ T51] veth0_vlan: left promiscuous mode [ 307.575533][T11534] x_tables: duplicate entry at hook 3 [ 307.587914][T11534] xt_TCPMSS: Only works on TCP SYN packets [ 307.711611][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.722191][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.737643][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.748331][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.771832][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.779347][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.915470][ T51] team0 (unregistering): Port device team_slave_1 removed [ 307.969212][ T51] team0 (unregistering): Port device team_slave_0 removed [ 308.611807][T11538] lo speed is unknown, defaulting to 1000 [ 308.688309][T11549] syz.1.1891[11549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.688485][T11549] syz.1.1891[11549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.883017][ T5094] Bluetooth: hci0: command tx timeout [ 309.099149][T11519] lo speed is unknown, defaulting to 1000 [ 309.572309][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.589874][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.599299][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.619319][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.632606][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.640143][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.753118][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.849600][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.860274][ T5094] Bluetooth: hci4: command tx timeout [ 309.964816][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.967549][T11589] netlink: 'syz.2.1901': attribute type 5 has an invalid length. [ 310.036639][T11573] lo speed is unknown, defaulting to 1000 [ 310.055472][T11538] chnl_net:caif_netlink_parms(): no params data found [ 310.136609][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.439070][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.454449][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.467416][T11538] bridge_slave_0: entered allmulticast mode [ 310.477945][T11538] bridge_slave_0: entered promiscuous mode [ 310.501136][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.509891][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.525393][T11538] bridge_slave_1: entered allmulticast mode [ 310.539780][T11538] bridge_slave_1: entered promiscuous mode [ 310.668126][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.705346][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.893047][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 310.944447][T11538] team0: Port device team_slave_0 added [ 310.973061][ T5094] Bluetooth: hci0: command tx timeout [ 310.994710][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 311.007600][T11614] bond2 (unregistering): Released all slaves [ 311.040169][T11519] chnl_net:caif_netlink_parms(): no params data found [ 311.055858][T11538] team0: Port device team_slave_1 added [ 311.068694][ T51] bridge_slave_1: left allmulticast mode [ 311.090167][ T51] bridge_slave_1: left promiscuous mode [ 311.101822][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.134532][ T51] bridge_slave_0: left allmulticast mode [ 311.140257][ T51] bridge_slave_0: left promiscuous mode [ 311.169448][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.687243][ T5094] Bluetooth: hci2: command tx timeout [ 311.779496][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.800634][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.816953][ T51] bond0 (unregistering): Released all slaves [ 311.925168][ T5094] Bluetooth: hci4: command tx timeout [ 311.940910][T11635] infiniband syz0: set active [ 311.949396][T11635] tipc: Resetting bearer [ 311.963666][T11635] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.043284][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.050374][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.077910][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.090668][ T8] lo speed is unknown, defaulting to 1000 [ 312.188375][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.197258][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.223910][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.366514][T11538] hsr_slave_0: entered promiscuous mode [ 312.394877][T11538] hsr_slave_1: entered promiscuous mode [ 312.416394][T11538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.437522][T11538] Cannot create hsr debugfs directory [ 312.487035][T11660] tipc: MTU too low for tipc bearer [ 312.836263][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.844735][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.852099][T11519] bridge_slave_0: entered allmulticast mode [ 312.859744][T11519] bridge_slave_0: entered promiscuous mode [ 312.924573][ T51] hsr_slave_0: left promiscuous mode [ 312.949775][ T51] hsr_slave_1: left promiscuous mode [ 312.960980][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.972889][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.988033][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.995871][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.024755][ T51] veth1_macvtap: left promiscuous mode [ 313.030484][ T51] veth0_macvtap: left promiscuous mode [ 313.036627][ T51] veth1_vlan: left promiscuous mode [ 313.042445][ T5094] Bluetooth: hci0: command tx timeout [ 313.048098][ T51] veth0_vlan: left promiscuous mode [ 313.627778][ T51] team0 (unregistering): Port device team_slave_1 removed [ 313.677765][ T51] team0 (unregistering): Port device team_slave_0 removed [ 313.762078][ T5094] Bluetooth: hci2: command tx timeout [ 314.004422][ T5098] Bluetooth: hci4: command tx timeout [ 314.397377][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.405722][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.423595][T11519] bridge_slave_1: entered allmulticast mode [ 314.430837][T11519] bridge_slave_1: entered promiscuous mode [ 314.468305][T11685] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 314.476349][T11685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.483622][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 314.490913][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 314.550803][T11573] chnl_net:caif_netlink_parms(): no params data found [ 314.682999][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.700852][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 314.760361][T11701] pimreg: entered allmulticast mode [ 314.775622][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.938427][T11704] xt_hashlimit: invalid interval [ 314.960575][T11519] team0: Port device team_slave_0 added [ 315.006102][T11710] netlink: 'syz.1.1935': attribute type 11 has an invalid length. [ 315.046712][T11519] team0: Port device team_slave_1 added [ 315.123342][ T5098] Bluetooth: hci0: command tx timeout [ 315.239318][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.271328][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.298977][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.314107][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.321299][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.348016][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.380635][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.399622][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.408361][T11573] bridge_slave_0: entered allmulticast mode [ 315.425025][T11573] bridge_slave_0: entered promiscuous mode [ 315.497866][T11728] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 315.518016][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.525416][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.525786][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.542833][T11573] bridge_slave_1: entered allmulticast mode [ 315.551267][T11573] bridge_slave_1: entered promiscuous mode [ 315.566041][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.702150][T11736] infiniband syz0: set active [ 315.720375][T11736] tipc: Resetting bearer [ 315.737853][T11736] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.823428][ T928] lo speed is unknown, defaulting to 1000 [ 315.827345][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.841737][ T5098] Bluetooth: hci2: command tx timeout [ 315.872225][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.888061][T11519] hsr_slave_0: entered promiscuous mode [ 315.895890][T11519] hsr_slave_1: entered promiscuous mode [ 315.907527][T11519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.915374][T11519] Cannot create hsr debugfs directory [ 316.056601][T11573] team0: Port device team_slave_0 added [ 316.067179][T11573] team0: Port device team_slave_1 added [ 316.081941][ T5098] Bluetooth: hci4: command tx timeout [ 316.142611][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.149646][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.187705][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.204884][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.211999][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.249010][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.352579][T11748] netlink: 'syz.2.1945': attribute type 11 has an invalid length. [ 316.503397][T11538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.587301][T11538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.677842][T11538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.696010][T11573] hsr_slave_0: entered promiscuous mode [ 316.704375][T11573] hsr_slave_1: entered promiscuous mode [ 316.710799][T11573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.723446][T11573] Cannot create hsr debugfs directory [ 316.738696][T11538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.215020][T11573] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.248446][T11770] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 317.340587][T11573] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.382134][T11772] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 317.389372][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.458005][T11573] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.492179][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.507832][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.515020][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.589714][T11573] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.630292][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.637555][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.718412][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.773565][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.872457][T11519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.900597][T11519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.921950][ T5098] Bluetooth: hci2: command tx timeout [ 317.941846][T11781] netlink: 'syz.1.1955': attribute type 11 has an invalid length. [ 317.994512][T11519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.019303][T11519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.099532][T11573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.117805][T11573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.167529][T11573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.190022][T11573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.307478][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.507633][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.559232][T11538] veth0_vlan: entered promiscuous mode [ 318.604937][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.640398][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.656294][T11538] veth1_vlan: entered promiscuous mode [ 318.707701][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.714941][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.738382][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.745613][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.779225][T11803] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1964'. [ 318.790006][T11803] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1964'. [ 318.827738][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.904648][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.911893][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.989074][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.996303][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.137006][T11538] veth0_macvtap: entered promiscuous mode [ 319.230022][T11573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.285825][T11538] veth1_macvtap: entered promiscuous mode [ 319.379187][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.407878][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.421479][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.437332][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.463872][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.484709][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.499147][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.520224][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.544171][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.563789][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.586823][T11538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.625374][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.646631][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.656987][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.669025][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.688591][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.714895][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.729873][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.750615][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.760759][T11538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.772881][T11538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.785259][T11538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.821723][T11836] sit0: entered promiscuous mode [ 319.858533][T11836] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 319.891895][T11836] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1974'. [ 319.949197][T11538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.962509][T11538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.971372][T11538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.980455][T11538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.170014][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.219761][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.330128][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.358735][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.451823][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.459695][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.485488][T11573] veth0_vlan: entered promiscuous mode [ 320.520249][T11573] veth1_vlan: entered promiscuous mode [ 320.634000][T11573] veth0_macvtap: entered promiscuous mode [ 320.646461][T11573] veth1_macvtap: entered promiscuous mode [ 320.800504][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.822797][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.832946][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.862442][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.881633][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.892398][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.905009][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.915645][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.925820][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.936365][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.946582][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.957296][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.974960][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.998218][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.028032][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.048621][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.059756][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.069806][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.090403][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.104765][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.126716][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.141644][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.163009][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.181078][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.195182][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.220570][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.270354][T11573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.290179][T11573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.310498][T11573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.319664][T11573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.595185][T11519] veth0_vlan: entered promiscuous mode [ 321.637330][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.654040][T11519] veth1_vlan: entered promiscuous mode [ 321.654939][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.754871][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.792043][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.824854][T11519] veth0_macvtap: entered promiscuous mode [ 321.850316][T11519] veth1_macvtap: entered promiscuous mode [ 321.911079][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.934099][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1985'. [ 321.951588][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.971896][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.997411][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.007655][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.019238][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.029416][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.042909][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.053079][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.063675][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.074059][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.094183][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.106222][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.117510][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.130175][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.147436][T11893] infiniband syz0: set active [ 322.156528][T11893] tipc: Resetting bearer [ 322.170580][T11893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 322.200275][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.228287][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.240352][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.254390][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.264423][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.275130][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.293876][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.318244][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.338970][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.349789][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.360212][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.373026][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.383887][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.403358][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.428547][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.443033][ T5143] lo speed is unknown, defaulting to 1000 [ 322.449967][T11519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.473163][T11519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.495899][T11519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.509217][T11519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.541245][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 322.638994][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.778386][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.871083][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.932508][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.940359][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.975480][ T2843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.983695][ T2843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.090649][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.200458][ T12] bridge_slave_1: left allmulticast mode [ 323.208145][ T12] bridge_slave_1: left promiscuous mode [ 323.214319][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.224406][ T12] bridge_slave_0: left allmulticast mode [ 323.230946][ T12] bridge_slave_0: left promiscuous mode [ 323.237597][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.936747][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.948856][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.963595][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.980451][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.995037][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.011300][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.029057][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.058855][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.071003][ T12] bond0 (unregistering): Released all slaves [ 324.096147][T11913] bridge0: port 3(bond0) entered blocking state [ 324.102873][T11913] bridge0: port 3(bond0) entered disabled state [ 324.109605][T11913] bond0: entered allmulticast mode [ 324.118154][T11913] bond_slave_0: entered allmulticast mode [ 324.125397][T11913] bond_slave_1: entered allmulticast mode [ 324.133884][T11913] bond0: entered promiscuous mode [ 324.139061][T11913] bond_slave_0: entered promiscuous mode [ 324.145405][T11913] bond_slave_1: entered promiscuous mode [ 324.156066][T11913] bridge0: port 3(bond0) entered blocking state [ 324.162892][T11913] bridge0: port 3(bond0) entered forwarding state [ 324.260188][T11921] lo speed is unknown, defaulting to 1000 [ 324.747525][ T12] hsr_slave_0: left promiscuous mode [ 324.759502][ T12] hsr_slave_1: left promiscuous mode [ 324.769195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.776853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.787023][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.794860][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.830650][ T12] veth1_macvtap: left promiscuous mode [ 324.836537][ T12] veth0_macvtap: left promiscuous mode [ 324.842407][ T12] veth1_vlan: left promiscuous mode [ 324.847841][ T12] veth0_vlan: left promiscuous mode [ 325.547197][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.558958][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.567720][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.581918][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.600061][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.609883][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.784361][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.835189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 326.081675][ T5094] Bluetooth: hci0: command tx timeout [ 326.384010][T11940] netlink: 'syz.1.1999': attribute type 10 has an invalid length. [ 326.438707][T11941] netlink: 'syz.1.1999': attribute type 10 has an invalid length. [ 326.467429][T11921] chnl_net:caif_netlink_parms(): no params data found [ 326.843298][T11942] lo speed is unknown, defaulting to 1000 [ 326.983482][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.990668][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.032078][T11921] bridge_slave_0: entered allmulticast mode [ 327.039685][T11921] bridge_slave_0: entered promiscuous mode [ 327.069458][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.087905][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.101756][T11921] bridge_slave_1: entered allmulticast mode [ 327.119652][T11921] bridge_slave_1: entered promiscuous mode [ 327.140768][T11965] infiniband syz0: set active [ 327.155411][T11965] tipc: Resetting bearer [ 327.187256][T11965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.304014][ T5138] lo speed is unknown, defaulting to 1000 [ 327.363335][T11921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.392636][T11921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.549114][T11978] syzkaller1: entered promiscuous mode [ 327.559819][T11978] syzkaller1: entered allmulticast mode [ 327.606552][T11921] team0: Port device team_slave_0 added [ 327.644773][T11921] team0: Port device team_slave_1 added [ 327.658413][T11978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'. [ 327.681929][ T5094] Bluetooth: hci4: command tx timeout [ 327.785148][T11921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.793759][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.820177][T11921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.835168][T11921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.848465][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.875011][T11921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.937663][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.113765][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.163532][ T5094] Bluetooth: hci0: command tx timeout [ 328.225892][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.317823][T11921] hsr_slave_0: entered promiscuous mode [ 328.336764][T11921] hsr_slave_1: entered promiscuous mode [ 328.353710][T11921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.371605][T11921] Cannot create hsr debugfs directory [ 328.578935][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.867209][T11998] tipc: Resetting bearer [ 329.113785][T12015] delete_channel: no stack [ 329.141708][T11942] chnl_net:caif_netlink_parms(): no params data found [ 329.218510][ T12] bridge_slave_1: left allmulticast mode [ 329.231026][ T12] bridge_slave_1: left promiscuous mode [ 329.237059][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.260307][ T12] bridge_slave_0: left allmulticast mode [ 329.267397][ T12] bridge_slave_0: left promiscuous mode [ 329.273451][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.731078][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.745501][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.759692][ T12] bond0 (unregistering): Released all slaves [ 329.767189][ T5094] Bluetooth: hci4: command tx timeout [ 329.785099][T12022] netlink: 'syz.2.2021': attribute type 7 has an invalid length. [ 329.793334][T12022] netlink: 'syz.2.2021': attribute type 39 has an invalid length. [ 329.963776][T12027] netlink: 'syz.2.2021': attribute type 7 has an invalid length. [ 329.976156][T12027] netlink: 'syz.2.2021': attribute type 39 has an invalid length. [ 330.242200][ T5098] Bluetooth: hci0: command tx timeout [ 330.254255][T12043] IPVS: length: 24 != 3221225496 [ 330.480666][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.496400][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.509889][T11942] bridge_slave_0: entered allmulticast mode [ 330.533443][T11942] bridge_slave_0: entered promiscuous mode [ 330.607012][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.622329][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.635573][T11942] bridge_slave_1: entered allmulticast mode [ 330.652790][T11942] bridge_slave_1: entered promiscuous mode [ 330.796187][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.986390][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.286783][ T12] hsr_slave_0: left promiscuous mode [ 331.297660][ T12] hsr_slave_1: left promiscuous mode [ 331.307050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.322433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.342877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.359409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.438385][ T12] veth1_macvtap: left promiscuous mode [ 331.453496][ T12] veth0_macvtap: left promiscuous mode [ 331.470438][ T12] veth1_vlan: left promiscuous mode [ 331.482824][ T12] veth0_vlan: left promiscuous mode [ 331.702483][T12081] Bluetooth: MGMT ver 1.22 [ 331.791490][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2043'. [ 331.841868][ T5098] Bluetooth: hci4: command tx timeout [ 332.324940][ T5098] Bluetooth: hci0: command tx timeout [ 332.478559][ T12] team0 (unregistering): Port device team_slave_1 removed [ 332.529401][ T12] team0 (unregistering): Port device team_slave_0 removed [ 333.047246][T12066] netlink: 'syz.1.2038': attribute type 32 has an invalid length. [ 333.063936][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 333.073367][T12066] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 333.098548][T12087] netlink: 542 bytes leftover after parsing attributes in process `syz.3.2043'. [ 333.121373][T12094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 333.132042][T12089] syzkaller1: entered promiscuous mode [ 333.137561][T12089] syzkaller1: entered allmulticast mode [ 333.170239][T11942] team0: Port device team_slave_0 added [ 333.183293][T11942] team0: Port device team_slave_1 added [ 333.528033][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.545729][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.588526][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.926448][ T5098] Bluetooth: hci4: command tx timeout [ 335.538918][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.546150][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.572498][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.815510][T11942] hsr_slave_0: entered promiscuous mode [ 335.836335][T11942] hsr_slave_1: entered promiscuous mode [ 335.843606][T11942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.851215][T11942] Cannot create hsr debugfs directory [ 335.866632][T11921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.889584][T11921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.957241][T11921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.977497][T11921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.199980][T12145] netlink: 'syz.3.2062': attribute type 16 has an invalid length. [ 336.208330][T12145] netlink: 'syz.3.2062': attribute type 17 has an invalid length. [ 336.254495][T12146] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 336.282314][T12145] netlink: 'syz.3.2062': attribute type 16 has an invalid length. [ 336.290197][T12145] netlink: 'syz.3.2062': attribute type 17 has an invalid length. [ 336.299937][T12147] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 336.477957][T11921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.533529][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.616277][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.623707][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.648334][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.655615][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.030261][T11942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.075384][T11942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.112313][T11942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.153072][T11942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.302629][T11921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.330764][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 337.404024][T12185] netlink: 'syz.2.2073': attribute type 10 has an invalid length. [ 337.608355][T12194] xt_CT: No such helper "snmp" [ 337.707888][T11921] veth0_vlan: entered promiscuous mode [ 337.757939][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.798552][T11921] veth1_vlan: entered promiscuous mode [ 337.876292][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.957248][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.964489][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.003266][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.010500][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.209235][T11921] veth0_macvtap: entered promiscuous mode [ 338.265702][T11921] veth1_macvtap: entered promiscuous mode [ 338.353880][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.399218][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.432502][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.451681][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.463948][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.487419][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.506827][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.527457][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.547535][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.569604][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.584101][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.599259][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.628206][T11921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.678686][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.721891][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.752342][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.781674][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.822161][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.843386][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.854949][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 338.864420][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.876885][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.890183][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.901925][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.912166][T11921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.923329][T11921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.936389][T11921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.948732][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 338.958508][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 339.016439][T11921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.039170][T11921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.053215][T11921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.066919][T11921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.096465][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.114129][T12244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.379280][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.423242][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.503458][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.532138][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.781984][T12271] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 339.817870][T12271] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2099'. [ 339.923085][T11942] veth0_vlan: entered promiscuous mode [ 339.974521][T11942] veth1_vlan: entered promiscuous mode [ 340.080920][T11942] veth0_macvtap: entered promiscuous mode [ 340.105212][T11942] veth1_macvtap: entered promiscuous mode [ 340.150943][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.178924][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.225281][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.261652][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.291721][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.311891][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.331540][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.352887][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.369854][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.389207][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.400860][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.413447][ T29] audit: type=1804 audit(1719857904.617:25): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2106" name="/root/syzkaller.Twc4B6/111/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 340.421268][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.458926][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.470787][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.493456][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.515572][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.548314][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.563250][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.584766][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.600559][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.630456][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.656846][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.671099][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.691529][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.709022][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.719547][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.731098][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.742734][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.753640][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.765836][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.778001][T11942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.787017][T11942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.797415][T11942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.806961][T11942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.038213][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.052542][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2112'. [ 341.064858][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.185116][T12312] lo speed is unknown, defaulting to 1000 [ 341.276321][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.418054][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.468962][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.503029][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.793029][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.847021][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.959007][ T51] bridge_slave_1: left allmulticast mode [ 341.966294][ T51] bridge_slave_1: left promiscuous mode [ 341.974093][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.985527][ T51] bridge_slave_0: left allmulticast mode [ 341.991195][ T51] bridge_slave_0: left promiscuous mode [ 341.997602][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.543263][T12329] x_tables: duplicate underflow at hook 4 [ 342.733830][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.760719][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.777011][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.789218][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.789892][ T51] bond0 (unregistering): Released all slaves [ 342.803815][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.814626][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.826469][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.840583][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.968435][T12331] lo speed is unknown, defaulting to 1000 [ 343.360328][ T51] hsr_slave_0: left promiscuous mode [ 343.369868][ T51] hsr_slave_1: left promiscuous mode [ 343.377324][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.388225][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.409648][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.418746][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.450643][ T51] veth1_macvtap: left promiscuous mode [ 343.456865][ T51] veth0_macvtap: left promiscuous mode [ 343.464181][ T51] veth1_vlan: left promiscuous mode [ 343.469592][ T51] veth0_vlan: left promiscuous mode [ 344.179247][ T51] team0 (unregistering): Port device team_slave_1 removed [ 344.189710][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 344.286797][ T51] team0 (unregistering): Port device team_slave_0 removed [ 344.456902][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.478902][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.504936][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.526656][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.541255][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.557046][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.934347][T12339] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 344.963813][ T5094] Bluetooth: hci0: command tx timeout [ 344.991264][T12339] batman_adv: batadv0: Adding interface: team0 [ 345.011513][T12339] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.051504][T12339] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 345.063089][T12342] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 345.070949][T12342] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2121'. [ 345.080068][T12342] team0: entered promiscuous mode [ 345.085173][T12342] team_slave_0: entered promiscuous mode [ 345.090981][T12342] team_slave_1: entered promiscuous mode [ 345.103763][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.110826][T12342] batman_adv: batadv0: Interface activated: team0 [ 345.117589][T12342] batman_adv: batadv0: Interface deactivated: team0 [ 345.124472][T12342] batman_adv: batadv0: Removing interface: team0 [ 345.132262][T12342] bridge0: port 4(team0) entered blocking state [ 345.139664][T12342] bridge0: port 4(team0) entered disabled state [ 345.147479][T12342] team0: entered allmulticast mode [ 345.154940][T12342] team_slave_0: entered allmulticast mode [ 345.160805][T12342] team_slave_1: entered allmulticast mode [ 345.171710][T12342] bridge0: port 4(team0) entered blocking state [ 345.178131][T12342] bridge0: port 4(team0) entered forwarding state [ 345.185176][T12341] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 345.231927][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 345.495348][T12345] lo speed is unknown, defaulting to 1000 [ 345.687092][T12331] chnl_net:caif_netlink_parms(): no params data found [ 345.839763][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 346.020062][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.314957][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.465265][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.553741][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.561037][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.570777][T12331] bridge_slave_0: entered allmulticast mode [ 346.579349][T12331] bridge_slave_0: entered promiscuous mode [ 346.593563][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.602910][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.610198][T12331] bridge_slave_1: entered allmulticast mode [ 346.617451][T12331] bridge_slave_1: entered promiscuous mode [ 346.641672][ T5094] Bluetooth: hci4: command tx timeout [ 346.673857][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.739867][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.751314][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2143'. [ 346.809927][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.922517][T12331] team0: Port device team_slave_0 added [ 346.961037][T12331] team0: Port device team_slave_1 added [ 347.007271][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 347.043814][ T5094] Bluetooth: hci0: command tx timeout [ 347.128346][T12345] chnl_net:caif_netlink_parms(): no params data found [ 347.180094][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.189105][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.217010][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.263275][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.280091][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.309496][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.358595][ T51] bridge_slave_1: left allmulticast mode [ 347.365245][ T51] bridge_slave_1: left promiscuous mode [ 347.373317][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.398170][ T51] bridge_slave_0: left allmulticast mode [ 347.404324][ T51] bridge_slave_0: left promiscuous mode [ 347.410232][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.910634][ T29] audit: type=1804 audit(1719857912.107:26): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2152" name="/root/syzkaller.ysHpI7/643/cgroup.controllers" dev="sda1" ino=1994 res=1 errno=0 [ 348.015932][T12442] netlink: 'syz.1.2152': attribute type 11 has an invalid length. [ 348.225236][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.237761][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.256024][ T51] bond0 (unregistering): Released all slaves [ 348.437933][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.446230][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.454022][T12345] bridge_slave_0: entered allmulticast mode [ 348.462248][T12345] bridge_slave_0: entered promiscuous mode [ 348.548361][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.556238][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.565044][T12345] bridge_slave_1: entered allmulticast mode [ 348.574054][T12345] bridge_slave_1: entered promiscuous mode [ 348.648225][T12331] hsr_slave_0: entered promiscuous mode [ 348.663912][T12331] hsr_slave_1: entered promiscuous mode [ 348.670902][T12331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.680282][T12331] Cannot create hsr debugfs directory [ 348.726527][ T5094] Bluetooth: hci4: command tx timeout [ 348.743825][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.828435][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.849678][T12460] Cannot find set identified by id 0 to match [ 348.960493][T12345] team0: Port device team_slave_0 added [ 349.096935][T12345] team0: Port device team_slave_1 added [ 349.124851][ T5094] Bluetooth: hci0: command tx timeout [ 349.429784][ T51] hsr_slave_0: left promiscuous mode [ 349.436250][ T51] hsr_slave_1: left promiscuous mode [ 349.451745][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.459367][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.472598][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.480113][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.511195][ T51] veth1_macvtap: left promiscuous mode [ 349.521859][ T51] veth0_macvtap: left promiscuous mode [ 349.527584][ T51] veth1_vlan: left promiscuous mode [ 349.538386][ T51] veth0_vlan: left promiscuous mode [ 349.623353][T12468] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2161'. [ 349.681170][T12470] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2162'. [ 350.267250][ T51] team0 (unregistering): Port device team_slave_1 removed [ 350.330166][ T51] team0 (unregistering): Port device team_slave_0 removed [ 350.811726][ T5094] Bluetooth: hci4: command tx timeout [ 350.857567][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.868373][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.913823][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.927225][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.934451][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.961068][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.207145][ T5094] Bluetooth: hci0: command tx timeout [ 351.295290][T12345] hsr_slave_0: entered promiscuous mode [ 351.326504][T12345] hsr_slave_1: entered promiscuous mode [ 351.349339][T12345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.367781][T12345] Cannot create hsr debugfs directory [ 352.439011][T12331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.443183][T12518] xt_TCPMSS: Only works on TCP SYN packets [ 352.483485][T12331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.513252][T12331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.556181][T12331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.597614][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.609310][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.620280][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.630937][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.641546][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.659888][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.673608][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.684340][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.695506][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.706165][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.728891][T12523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.739482][T12523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.883527][ T5094] Bluetooth: hci4: command tx timeout [ 353.143895][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.173874][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.193457][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.200646][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.221247][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.228595][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.467291][T12331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.491798][T12345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.528912][T12345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.556567][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2193'. [ 353.578593][T12345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.616000][T12345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.991553][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.029838][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.113401][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.160888][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.168185][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.245529][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.252771][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.389545][T12345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.410271][T12588] rdma_rxe: rxe_newlink: failed to add ip_vti0 [ 354.446592][T12331] veth0_vlan: entered promiscuous mode [ 354.488899][T12331] veth1_vlan: entered promiscuous mode [ 354.604568][T12331] veth0_macvtap: entered promiscuous mode [ 354.645938][T12331] veth1_macvtap: entered promiscuous mode [ 354.729399][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.761788][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.791697][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.825414][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.843545][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.854776][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.864701][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.886602][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.897513][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.908105][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.919754][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.930371][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.944117][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.967818][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.989487][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.999541][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.019899][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.030973][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.071891][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.091475][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.112559][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.127532][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.139487][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.149663][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.160377][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.179591][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.188193][T12605] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 355.285365][T12604] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 355.357108][T12331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.378152][T12331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.405632][T12331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.423254][T12331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.454010][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.674994][T12629] bond0: option ad_select: unable to set because the bond device is up [ 355.768534][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.797259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.942606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.950500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.279451][T12345] veth0_vlan: entered promiscuous mode [ 356.317736][T12345] veth1_vlan: entered promiscuous mode [ 356.425341][T12345] veth0_macvtap: entered promiscuous mode [ 356.463884][T12345] veth1_macvtap: entered promiscuous mode [ 356.517744][T12669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2224'. [ 356.549392][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.560394][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.572917][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.583738][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.593655][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.604290][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.615847][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.626445][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.639445][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.653835][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.663819][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.674478][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.684516][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.695044][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.707131][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.738503][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.752362][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.764377][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.775046][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.784959][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.795904][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.806454][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.818477][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.828390][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.839009][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.848912][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.861907][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.872452][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.883391][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.895409][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.919693][T12345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.929052][T12345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.939175][T12345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.947997][T12345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.103597][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.124410][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.169725][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.203976][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.659885][T12692] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 357.679951][T12692] netlink: 'syz.1.2237': attribute type 2 has an invalid length. [ 358.159687][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.293923][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 358.954336][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.970112][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.979025][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.987468][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.995611][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.003228][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.013637][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.055335][T12732] lo speed is unknown, defaulting to 1000 [ 359.124953][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.233898][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.388139][ T51] bridge_slave_1: left allmulticast mode [ 359.399958][ T51] bridge_slave_1: left promiscuous mode [ 359.405849][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.416664][ T51] bridge_slave_0: left allmulticast mode [ 359.422850][ T51] bridge_slave_0: left promiscuous mode [ 359.428623][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.896114][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.915155][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.928812][ T51] bond0 (unregistering): Released all slaves [ 360.037004][T12732] chnl_net:caif_netlink_parms(): no params data found [ 360.161131][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.171877][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.179210][T12732] bridge_slave_0: entered allmulticast mode [ 360.188251][T12732] bridge_slave_0: entered promiscuous mode [ 360.200194][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.208843][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.222347][T12732] bridge_slave_1: entered allmulticast mode [ 360.229508][T12732] bridge_slave_1: entered promiscuous mode [ 360.360338][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.365484][T12743] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 360.398191][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.605607][T12732] team0: Port device team_slave_0 added [ 360.622977][ T51] hsr_slave_0: left promiscuous mode [ 360.630260][ T51] hsr_slave_1: left promiscuous mode [ 360.637422][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.645586][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.657227][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.664870][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.689582][ T51] veth1_macvtap: left promiscuous mode [ 360.695322][ T51] veth0_macvtap: left promiscuous mode [ 360.701133][ T51] veth1_vlan: left promiscuous mode [ 360.708410][ T51] veth0_vlan: left promiscuous mode [ 361.051367][ T5094] Bluetooth: hci0: command tx timeout [ 361.364586][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.386453][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.395676][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.425240][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.434373][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 361.446378][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.708762][ T51] team0 (unregistering): Port device team_slave_1 removed [ 361.757051][ T51] team0 (unregistering): Port device team_slave_0 removed [ 362.270752][T12732] team0: Port device team_slave_1 added [ 362.415120][T12761] infiniband syz0: set active [ 362.574704][ T5138] lo speed is unknown, defaulting to 1000 [ 362.589398][T12767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2257'. [ 362.603556][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.610677][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.690769][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.707462][T12772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 362.736060][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.743621][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.779761][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.887616][T12762] lo speed is unknown, defaulting to 1000 [ 363.003332][T12732] hsr_slave_0: entered promiscuous mode [ 363.025136][T12732] hsr_slave_1: entered promiscuous mode [ 363.051638][T12732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.073741][T12732] Cannot create hsr debugfs directory [ 363.122637][ T5098] Bluetooth: hci0: command tx timeout [ 363.503604][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.521847][ T5098] Bluetooth: hci4: command tx timeout [ 363.633579][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.845876][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.058429][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.147538][T12809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2270'. [ 364.166811][T12810] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 364.378064][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2272'. [ 364.413195][T12815] team0: left allmulticast mode [ 364.418126][T12815] team_slave_0: left allmulticast mode [ 364.441518][T12815] team_slave_1: left allmulticast mode [ 364.447704][T12815] bridge0: port 4(team0) entered disabled state [ 364.472721][T12815] bond0: left allmulticast mode [ 364.477852][T12815] bond_slave_0: left allmulticast mode [ 364.485011][T12815] bond_slave_1: left allmulticast mode [ 364.490808][T12815] bond0: left promiscuous mode [ 364.497084][T12815] bond_slave_0: left promiscuous mode [ 364.503994][T12815] bond_slave_1: left promiscuous mode [ 364.510049][T12815] bridge0: port 3(bond0) entered disabled state [ 364.521158][T12815] bridge_slave_1: left allmulticast mode [ 364.528221][T12815] bridge_slave_1: left promiscuous mode [ 364.535738][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.557247][T12815] bridge_slave_0: left allmulticast mode [ 364.565760][T12815] bridge_slave_0: left promiscuous mode [ 364.571939][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.684783][T12818] infiniband syz0: set active [ 364.883837][ T25] lo speed is unknown, defaulting to 1000 [ 364.925466][ T51] bridge_slave_1: left allmulticast mode [ 364.943473][ T51] bridge_slave_1: left promiscuous mode [ 364.949329][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.053971][ T51] bridge_slave_0: left allmulticast mode [ 365.059703][ T51] bridge_slave_0: left promiscuous mode [ 365.081716][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.202345][ T5098] Bluetooth: hci0: command tx timeout [ 365.608960][ T5098] Bluetooth: hci4: command tx timeout [ 365.788190][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.800286][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.812402][ T51] bond0 (unregistering): Released all slaves [ 365.827185][T12762] chnl_net:caif_netlink_parms(): no params data found [ 365.968185][T12732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.018425][T12732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.165800][T12732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.193105][T12842] netlink: 'syz.1.2279': attribute type 12 has an invalid length. [ 366.201075][T12842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2279'. [ 366.281863][T12845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2279'. [ 366.327158][T12732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.661013][T12762] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.680414][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.700221][T12762] bridge_slave_0: entered allmulticast mode [ 366.740706][T12762] bridge_slave_0: entered promiscuous mode [ 366.766445][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2284'. [ 366.777125][T12861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.824848][T12762] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.832269][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.839617][T12762] bridge_slave_1: entered allmulticast mode [ 366.863271][T12762] bridge_slave_1: entered promiscuous mode [ 366.913119][ T51] hsr_slave_0: left promiscuous mode [ 366.925044][ T51] hsr_slave_1: left promiscuous mode [ 366.932054][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.939580][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.949279][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.968992][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.014471][ T51] veth1_macvtap: left promiscuous mode [ 367.020194][ T51] veth0_macvtap: left promiscuous mode [ 367.036634][ T51] veth1_vlan: left promiscuous mode [ 367.050630][ T51] veth0_vlan: left promiscuous mode [ 367.292630][ T5098] Bluetooth: hci0: command tx timeout [ 367.692035][ T5098] Bluetooth: hci4: command tx timeout [ 367.769818][ T51] team0 (unregistering): Port device team_slave_1 removed [ 367.817908][ T51] team0 (unregistering): Port device team_slave_0 removed [ 368.385397][T12762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.399833][T12762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.434220][T12867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2286'. [ 368.452251][T12867] bridge_slave_1: left allmulticast mode [ 368.457959][T12867] bridge_slave_1: left promiscuous mode [ 368.470471][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.482841][T12867] bridge_slave_0: left allmulticast mode [ 368.489462][T12867] bridge_slave_0: left promiscuous mode [ 368.495556][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.540925][T12879] Bluetooth: MGMT ver 1.22 [ 368.545575][T12879] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 368.834302][T12762] team0: Port device team_slave_0 added [ 368.848393][T12762] team0: Port device team_slave_1 added [ 368.917798][T12762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.929975][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.982464][T12762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.044328][T12762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.051342][T12762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.114937][T12762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.418175][T12762] hsr_slave_0: entered promiscuous mode [ 369.467627][T12762] hsr_slave_1: entered promiscuous mode [ 369.491776][T12762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.518683][T12762] Cannot create hsr debugfs directory [ 369.660998][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.765908][ T5098] Bluetooth: hci4: command tx timeout [ 369.846157][T12909] syzkaller1: entered promiscuous mode [ 369.866152][T12909] syzkaller1: entered allmulticast mode [ 369.873321][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.884239][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.897674][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.921168][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.930751][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 369.938994][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.961236][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.042437][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.049637][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.092212][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.099487][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.186685][T12732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.209318][T12732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.262194][T12911] lo speed is unknown, defaulting to 1000 [ 370.735541][ T29] audit: type=1804 audit(1719857934.937:27): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2303" name="/root/syzkaller.MuPgB7/117/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 370.751203][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.802118][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 370.880603][T12762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.913809][T12762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.927709][T12762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.966935][ T29] audit: type=1804 audit(1719857935.167:28): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2305" name="/root/syzkaller.ysHpI7/699/cgroup.controllers" dev="sda1" ino=1996 res=1 errno=0 [ 370.998982][T12762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.091007][T12732] veth0_vlan: entered promiscuous mode [ 371.150426][T12732] veth1_vlan: entered promiscuous mode [ 371.401264][T12732] veth0_macvtap: entered promiscuous mode [ 371.438398][T12732] veth1_macvtap: entered promiscuous mode [ 371.484825][T12911] chnl_net:caif_netlink_parms(): no params data found [ 371.651993][ T12] ================================================================== [ 371.660125][ T12] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 371.668269][ T12] Read of size 8 at addr ffff88806c36b0b8 by task kworker/u8:1/12 [ 371.676126][ T12] [ 371.677948][T12959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.678473][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-01137-g1c5fc27bc48a #0 [ 371.698261][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.708357][ T12] Workqueue: l2tp l2tp_tunnel_del_work [ 371.713870][ T12] Call Trace: [ 371.717157][ T12] [ 371.720096][ T12] dump_stack_lvl+0x241/0x360 [ 371.724801][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.730008][ T12] ? __pfx__printk+0x10/0x10 [ 371.734618][ T12] ? _printk+0xd5/0x120 [ 371.738873][ T12] ? __virt_addr_valid+0x183/0x520 [ 371.743997][ T12] ? __virt_addr_valid+0x183/0x520 [ 371.749128][ T12] print_report+0x169/0x550 [ 371.753644][ T12] ? __virt_addr_valid+0x183/0x520 [ 371.758766][ T12] ? __virt_addr_valid+0x183/0x520 [ 371.763891][ T12] ? __virt_addr_valid+0x44e/0x520 [ 371.769014][ T12] ? __phys_addr+0xba/0x170 [ 371.773530][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 371.778822][ T12] kasan_report+0x143/0x180 [ 371.783337][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 371.788632][ T12] l2tp_tunnel_del_work+0xe5/0x330 [ 371.793760][ T12] ? process_scheduled_works+0x945/0x1830 [ 371.799921][ T12] process_scheduled_works+0xa2c/0x1830 [ 371.805491][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.811480][ T12] ? assign_work+0x364/0x3d0 [ 371.816080][ T12] worker_thread+0x86d/0xd50 [ 371.820689][ T12] ? __kthread_parkme+0x169/0x1d0 [ 371.825726][ T12] ? __pfx_worker_thread+0x10/0x10 [ 371.830841][ T12] kthread+0x2f0/0x390 [ 371.834919][ T12] ? __pfx_worker_thread+0x10/0x10 [ 371.840038][ T12] ? __pfx_kthread+0x10/0x10 [ 371.844638][ T12] ret_from_fork+0x4b/0x80 [ 371.849063][ T12] ? __pfx_kthread+0x10/0x10 [ 371.853665][ T12] ret_from_fork_asm+0x1a/0x30 [ 371.858451][ T12] [ 371.861471][ T12] [ 371.863793][ T12] Allocated by task 12954: [ 371.868211][ T12] kasan_save_track+0x3f/0x80 [ 371.872899][ T12] __kasan_kmalloc+0x98/0xb0 [ 371.877499][ T12] __kmalloc_noprof+0x1f9/0x400 [ 371.882364][ T12] l2tp_session_create+0x3b/0xc20 [ 371.887402][ T12] pppol2tp_connect+0xca3/0x17a0 [ 371.892347][ T12] __sys_connect+0x2df/0x310 [ 371.896944][ T12] __x64_sys_connect+0x7a/0x90 [ 371.901711][ T12] do_syscall_64+0xf3/0x230 [ 371.906232][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.912129][ T12] [ 371.914466][ T12] Freed by task 16: [ 371.918286][ T12] kasan_save_track+0x3f/0x80 [ 371.922988][ T12] kasan_save_free_info+0x40/0x50 [ 371.928023][ T12] poison_slab_object+0xe0/0x150 [ 371.932990][ T12] __kasan_slab_free+0x37/0x60 [ 371.937764][ T12] kfree+0x149/0x360 [ 371.941731][ T12] __sk_destruct+0x58/0x5f0 [ 371.946244][ T12] rcu_core+0xafd/0x1830 [ 371.950490][ T12] handle_softirqs+0x2c4/0x970 [ 371.955255][ T12] run_ksoftirqd+0xca/0x130 [ 371.959761][ T12] smpboot_thread_fn+0x544/0xa30 [ 371.964706][ T12] kthread+0x2f0/0x390 [ 371.968787][ T12] ret_from_fork+0x4b/0x80 [ 371.973226][ T12] ret_from_fork_asm+0x1a/0x30 [ 371.978001][ T12] [ 371.980346][ T12] Last potentially related work creation: [ 371.986058][ T12] kasan_save_stack+0x3f/0x60 [ 371.990746][ T12] __kasan_record_aux_stack+0xac/0xc0 [ 371.996117][ T12] call_rcu+0x167/0xa70 [ 372.000290][ T12] pppol2tp_release+0x24b/0x350 [ 372.005145][ T12] sock_close+0xbc/0x240 [ 372.009394][ T12] __fput+0x406/0x8b0 [ 372.013396][ T12] task_work_run+0x24f/0x310 [ 372.018021][ T12] syscall_exit_to_user_mode+0x168/0x370 [ 372.023671][ T12] do_syscall_64+0x100/0x230 [ 372.028284][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.034191][ T12] [ 372.036515][ T12] The buggy address belongs to the object at ffff88806c36b000 [ 372.036515][ T12] which belongs to the cache kmalloc-1k of size 1024 [ 372.050577][ T12] The buggy address is located 184 bytes inside of [ 372.050577][ T12] freed 1024-byte region [ffff88806c36b000, ffff88806c36b400) [ 372.064555][ T12] [ 372.066878][ T12] The buggy address belongs to the physical page: [ 372.073308][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c368 [ 372.082102][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 372.090609][ T12] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 372.098601][ T12] page_type: 0xffffefff(slab) [ 372.103286][ T12] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 372.111873][ T12] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 372.120460][ T12] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 372.129136][ T12] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 372.137897][ T12] head: 00fff00000000003 ffffea0001b0da01 ffffffffffffffff 0000000000000000 [ 372.146569][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 372.155258][ T12] page dumped because: kasan: bad access detected [ 372.161684][ T12] page_owner tracks the page as allocated [ 372.167403][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1278, tgid 1278 (kworker/u8:7), ts 354635258603, free_ts 354596805741 [ 372.188263][ T12] post_alloc_hook+0x1f3/0x230 [ 372.193048][ T12] get_page_from_freelist+0x2e4c/0x2f10 [ 372.198601][ T12] __alloc_pages_noprof+0x256/0x6c0 [ 372.203802][ T12] alloc_slab_page+0x5f/0x120 [ 372.208497][ T12] allocate_slab+0x5a/0x2f0 [ 372.213005][ T12] ___slab_alloc+0xcd1/0x14b0 [ 372.217700][ T12] __slab_alloc+0x58/0xa0 [ 372.222032][ T12] __kmalloc_noprof+0x257/0x400 [ 372.226889][ T12] ___neigh_create+0x691/0x2470 [ 372.231836][ T12] ip6_finish_output2+0x1631/0x1680 [ 372.237037][ T12] ip6_finish_output+0x41e/0x810 [ 372.241990][ T12] ndisc_send_skb+0xab2/0x1380 [ 372.246762][ T12] ndisc_send_ns+0xcc/0x160 [ 372.251270][ T12] addrconf_dad_work+0xb45/0x16f0 [ 372.256305][ T12] process_scheduled_works+0xa2c/0x1830 [ 372.261856][ T12] worker_thread+0x86d/0xd50 [ 372.266448][ T12] page last free pid 45 tgid 45 stack trace: [ 372.272424][ T12] free_unref_page+0xd22/0xea0 [ 372.277204][ T12] __put_partials+0xeb/0x130 [ 372.281801][ T12] put_cpu_partial+0x17c/0x250 [ 372.286585][ T12] __slab_free+0x2ea/0x3d0 [ 372.291014][ T12] qlist_free_all+0x9e/0x140 [ 372.295621][ T12] kasan_quarantine_reduce+0x14f/0x170 [ 372.301114][ T12] __kasan_slab_alloc+0x23/0x80 [ 372.306022][ T12] __kmalloc_noprof+0x1a3/0x400 [ 372.310889][ T12] fib6_info_alloc+0x2e/0xf0 [ 372.315501][ T12] ip6_route_info_create+0x445/0x12b0 [ 372.320889][ T12] ip6_route_add+0x28/0x160 [ 372.325406][ T12] addrconf_add_dev+0x35b/0x540 [ 372.330267][ T12] addrconf_init_auto_addrs+0x85f/0xeb0 [ 372.335835][ T12] addrconf_notify+0xaff/0x1020 [ 372.340913][ T12] notifier_call_chain+0x19f/0x3e0 [ 372.346030][ T12] netdev_state_change+0x11f/0x1a0 [ 372.351145][ T12] [ 372.353470][ T12] Memory state around the buggy address: [ 372.359098][ T12] ffff88806c36af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 372.367161][ T12] ffff88806c36b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.375244][ T12] >ffff88806c36b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.383325][ T12] ^ [ 372.389225][ T12] ffff88806c36b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.397388][ T12] ffff88806c36b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 372.405461][ T12] ================================================================== [ 372.413586][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 372.420808][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-01137-g1c5fc27bc48a #0 [ 372.430896][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 372.440984][ T12] Workqueue: l2tp l2tp_tunnel_del_work [ 372.446464][ T12] Call Trace: [ 372.449768][ T12] [ 372.452705][ T12] dump_stack_lvl+0x241/0x360 [ 372.457397][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.462611][ T12] ? __pfx__printk+0x10/0x10 [ 372.467217][ T12] ? vscnprintf+0x5d/0x90 [ 372.471557][ T12] panic+0x349/0x860 [ 372.475471][ T12] ? check_panic_on_warn+0x21/0xb0 [ 372.480600][ T12] ? __pfx_panic+0x10/0x10 [ 372.485034][ T12] ? mark_lock+0x9a/0x350 [ 372.489375][ T12] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 372.495278][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 372.501178][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.507516][ T12] ? print_report+0x502/0x550 [ 372.512207][ T12] check_panic_on_warn+0x86/0xb0 [ 372.517158][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 372.522451][ T12] end_report+0x77/0x160 [ 372.526704][ T12] kasan_report+0x154/0x180 [ 372.531218][ T12] ? l2tp_tunnel_del_work+0xe5/0x330 [ 372.536519][ T12] l2tp_tunnel_del_work+0xe5/0x330 [ 372.541641][ T12] ? process_scheduled_works+0x945/0x1830 [ 372.547364][ T12] process_scheduled_works+0xa2c/0x1830 [ 372.552929][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.558925][ T12] ? assign_work+0x364/0x3d0 [ 372.563533][ T12] worker_thread+0x86d/0xd50 [ 372.568138][ T12] ? __kthread_parkme+0x169/0x1d0 [ 372.573171][ T12] ? __pfx_worker_thread+0x10/0x10 [ 372.578287][ T12] kthread+0x2f0/0x390 [ 372.582368][ T12] ? __pfx_worker_thread+0x10/0x10 [ 372.587505][ T12] ? __pfx_kthread+0x10/0x10 [ 372.592105][ T12] ret_from_fork+0x4b/0x80 [ 372.596542][ T12] ? __pfx_kthread+0x10/0x10 [ 372.601139][ T12] ret_from_fork_asm+0x1a/0x30 [ 372.605924][ T12] [ 372.609244][ T12] Kernel Offset: disabled [ 372.613598][ T12] Rebooting in 86400 seconds..