last executing test programs: 1m47.620420295s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m35.406626169s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m19.161643043s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m5.881811323s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 55.894243781s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 47.037710073s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 38.295693286s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 29.08335208s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.199905424s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 15.161526361s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 7.676434805s ago: executing program 3 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.317328766s ago: executing program 0 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.467390322s ago: executing program 1 (id=3561): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) unshare(0x2e020200) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'geneve1\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x12}}) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0xc0c00) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, &(0x7f00000001c0)=0xc) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x4, 0x0, 0x2, 0x2, 0x81, 0x99}, 0x20) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x6c, 0x0, 0x1a0, 0x0, 0x2e0, 0x258, 0x258, 0x2e0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@multicast1, @ipv4=@multicast1, @ipv4=@loopback, @ipv6=@mcast1, 0x30}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffe}}}}, {{@ipv6={@private0, @empty, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'lo\x00', 'erspan0\x00', {}, {}, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0xfff, 0x800, 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0xffffffffffffff93) (async) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 3.292291812s ago: executing program 1 (id=3563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014"], 0x68}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) pwritev(r9, &(0x7f0000000000)=[{&(0x7f0000000600)="384bc3f46ccc764bb9f1cfe1e0f14df89676b62e1e67e47eabfa5ceadb1310139ed89fc36a72ca1a8ae2ed67500a3e6268f6867369ae3354e1724f0ff7c4000000242c0554dc08d0efd39230acdc05729cfd2aef4d1643d7c717bd17727cea27d9a843d8b11a2678ce5d61999927247a7e0c3359a9b06ac01d0b3edaf1682b18766fe1623813911898adf3bb87b418550e33b3c8d73523c506b945cad3b514d81339fd17077a025c7ae103d34d16703171cec02f0556e916387db43e026ca64f49bbf0120429240c2fb6ad4b4dccc01d131871a1ac38ce7d4ecd0b4196d0e8bca14fccf79fb4a95d2f8722f6979a2d7aeb7f509f216d807160c94b15d2472d09848392518c3dc5a3e48cc75f3d41bde115b5cbc6103e681539d7da87fbf93a0cf5177afb9dbcc887baf6d569ee4b378505bf42", 0x41}, {&(0x7f0000000140)="ce903baa49", 0xfffffe11}], 0x2, 0x80000001, 0x4dc7a87d) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x140d, 0x10, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000006}, 0x40001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d08e8800080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="08000900b7ce52e6c52f36", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r4, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xe) syz_emit_ethernet(0x36, &(0x7f0000000380)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "4451b4", 0x0, 0x87, 0x0, @local, @loopback}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaa"], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) 2.286488595s ago: executing program 2 (id=3569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf6c0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x5, [@volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @datasec={0x10, 0x6, 0x0, 0xf, 0x2, [{0x5, 0x6, 0x47}, {0x1, 0x401, 0x9}, {0x5, 0x1, 0x8}, {0x3, 0x6, 0x45}, {0x1, 0x5, 0xfffffffc}, {0x4, 0x7, 0x2}], "cfb4"}]}, {0x0, [0x2e, 0x6f, 0x0]}}, &(0x7f0000000340)=""/141, 0x81, 0x8d, 0x1, 0x7ff, 0x10000, @value}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0x1, 0x6c, 0x10020, r0, 0x7, '\x00', r1, r2, 0x3, 0x0, 0x4, 0xe, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.210957082s ago: executing program 1 (id=3570): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x1f, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r17 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r18 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r19, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) (async) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r19, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x148, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004044}, 0x4090) 2.16380593s ago: executing program 2 (id=3571): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0xe, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005ff6991a2b20", 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newaddr={0x34, 0x14, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x4a, 0xc8, r5}, [@IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x4000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x80010003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) unshare(0x26020480) r7 = socket(0x22, 0x3, 0x0) bind$vsock_stream(r7, &(0x7f0000000740), 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0002000000000000000000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0x0) 2.093845749s ago: executing program 4 (id=3572): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES64], 0x4c}}, 0x0) 1.972596308s ago: executing program 4 (id=3573): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4b, &(0x7f0000000280)=[{0x6, 0x0, 0x80, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="15a7", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 1.024694558s ago: executing program 4 (id=3574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) 951.244223ms ago: executing program 1 (id=3575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) close(0x3) (async) 926.683469ms ago: executing program 2 (id=3576): r0 = socket(0x2, 0x3, 0xff) shutdown(r0, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r2, &(0x7f0000000180)="f85115", 0x0}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r0}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd372, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x18, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xebac, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x3, 0x2, 0x2, 0x9, 0xa, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x1000000, 0x3, &(0x7f00000002c0)=""/3, 0x41100, 0x14, '\x00', r1, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x9, 0xff, 0x3d9a}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, r3, r4, r5, r6, r7], &(0x7f00000005c0)=[{0x4, 0x1, 0x10, 0x8}, {0x1, 0x4, 0x7, 0x1}, {0x4, 0x4, 0x6}, {0x5, 0x4, 0xd, 0xa}, {0x4, 0x3, 0x9, 0x3}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x3, 0x6, 0xa}, {0x3, 0x5, 0x4, 0x3}], 0x10, 0x6, @void, @value}, 0x94) accept4(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000100)=0x80, 0x80000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0x2b, 0x0, 0x0) write(r0, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57", 0x14) 871.442625ms ago: executing program 4 (id=3577): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x4000004) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x44080) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048115}, 0x40000) socketpair(0x6, 0x8080b, 0x3, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x307, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "48a2fd82f41bf8d50e2c86dc231eee8a9e03cca89a8bfc6d6259a51d16b029da606a7ef59be33348761f96abeb79f2dfaf05f8511624fe726e3a0ed1a4eeb49c6167e2c5b7338a6d4576fac16374d4f6dd1cc7d66f06cfc0b9bfd0e99c9650ef358b14471a52f675d9bda74b8b08b07f4f10bb79dc9605187faa89f96931a973e0695455a3110fb979bea40e8e3271943cbc0d6506c9c50a46eae6d36abefbe83d4520bfd0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa30}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x86, 0x6, 0x1, 0x0, "c2e31e656b4c47850957bd36ba687cd0052611cca61151261ae86286239dc0956b627f619d30da582f6dec1381dd044cccab584a4fbd92f7618b7f2b4e06a0fdae10bc57b87d9299b5b4b7c73814ef7c625859c35fb85088e256a8ddd3ebe310d188b0b972725235d6304dd09551f76c66aa3215d849e7c36e29685df3de4ccf605a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x334}, 0x1, 0x0, 0x0, 0x4000}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8880) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), r0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x21005100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'nl802154\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x56fee63d604e9996) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d40), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40100060}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r12, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x11) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000e80), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xec, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r7}}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4044}, 0x4000004) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={0x1a4, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x128, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x260069e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8be1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bf4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40bfa123}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9362}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x488d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76cd58f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61296b6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b04a528}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71d0f717}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e344c8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d2edd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76471c35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c85a0bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a12f256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf741}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28b8ce3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2582d813}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42fa6ff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1545}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fbdbddd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e10690c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3679a5f1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8c59462}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x706c8922}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r15, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r16, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r17 = socket$qrtr(0x2a, 0x2, 0x0) r18 = gettid() setsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f00000014c0)={r18, 0x0, 0xffffffffffffffff}, 0xc) 744.9494ms ago: executing program 1 (id=3578): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x58, r4, 0xf2473ed90fb552e1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e2a80fd3cfc88ffa37455e69043793c0"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ced67e75c6458b0b9c55e4a35ed2aaae"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x44800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 589.118566ms ago: executing program 2 (id=3579): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x0) 371.841211ms ago: executing program 4 (id=3580): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 368.571158ms ago: executing program 2 (id=3581): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x90, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000001d40)=@get={0x1, 0x0, 0x800}) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xfff3, 0xffff}, {0xffe0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) socketpair(0xa, 0xa, 0xc7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMCTRLREQ(r7, 0x80044945, &(0x7f0000000040)={0x4009, 0x6, 0x7, 0x3}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 343.656621ms ago: executing program 1 (id=3582): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8990, &(0x7f00000002c0)={'bond0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x8c, 0x68, 0x800, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x23}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_OIF={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}, @NHA_GROUP={0x24, 0x2, [{0x2, 0x7}, {0x2, 0xf}, {0x1, 0x5}, {0x0, 0x2}]}]}, 0x8c}}, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfc00}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x585}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x40010) recvmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/104, 0x68}], 0x1}, 0x0) recvfrom$phonet(r4, &(0x7f0000000440)=""/86, 0x56, 0x2002, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x10000000, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0xa09, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r3, 0x8990, &(0x7f00000002c0)={'bond0\x00'}) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x8c, 0x68, 0x800, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x23}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_OIF={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}, @NHA_GROUP={0x24, 0x2, [{0x2, 0x7}, {0x2, 0xf}, {0x1, 0x5}, {0x0, 0x2}]}]}, 0x8c}}, 0x4) (async) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfc00}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x585}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) recvmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/104, 0x68}], 0x1}, 0x0) (async) recvfrom$phonet(r4, &(0x7f0000000440)=""/86, 0x56, 0x2002, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x10000000, 0x6}, 0x10) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0xa09, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) 206.592302ms ago: executing program 4 (id=3583): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x198, 0x0, 0xffffffff, 0x0, 0xa8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @private=0xa010100, @remote, @icmp_id=0x67, @port=0x4e22}}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x6, 0x2, [0x12, 0x3d, 0x2f, 0x2d, 0x17, 0x16, 0x6, 0x31, 0xf, 0x40, 0x8, 0x0, 0x3f, 0x19, 0x1a, 0x26], 0x2, 0x8, 0x6}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x103, 0x1, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xe, @remote, @broadcast, @port=0x4e20, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "58d0", 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "584162247b7bce76af25179232c620bac7c37823359e864e9d06fd0ee405"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 0s ago: executing program 2 (id=3584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, r1, 0xc364a000) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): n_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.913289][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.007694][ T3555] veth1_macvtap: left promiscuous mode [ 342.014167][ T3555] veth0_macvtap: left promiscuous mode [ 342.019834][ T3555] veth1_vlan: left promiscuous mode [ 342.025323][ T3555] veth0_vlan: left promiscuous mode [ 342.952478][ T5850] Bluetooth: hci2: command tx timeout [ 343.226441][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 343.281532][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 343.499729][ T5850] Bluetooth: hci4: command tx timeout [ 343.759513][T16516] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 343.953082][T16540] netlink: 'syz.4.2949': attribute type 2 has an invalid length. [ 344.004840][T16468] chnl_net:caif_netlink_parms(): no params data found [ 344.091111][T16549] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 344.131850][T16549] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 344.141015][T16549] netlink: 134712 bytes leftover after parsing attributes in process `syz.1.2952'. [ 344.160487][T16547] lo speed is unknown, defaulting to 1000 [ 344.211617][T16485] chnl_net:caif_netlink_parms(): no params data found [ 344.242515][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 344.369744][T16547] xfrm0 speed is unknown, defaulting to 1000 [ 344.464985][T16468] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.492715][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.505268][T16468] bridge_slave_0: entered allmulticast mode [ 344.523718][T16468] bridge_slave_0: entered promiscuous mode [ 344.581460][T16468] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.633348][T16468] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.653678][T16468] bridge_slave_1: entered allmulticast mode [ 344.678903][T16468] bridge_slave_1: entered promiscuous mode [ 345.013952][ T5850] Bluetooth: hci2: command tx timeout [ 345.188092][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.205523][T16574] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 345.215083][T16574] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 345.573451][ T5850] Bluetooth: hci4: command tx timeout [ 346.958541][T16485] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.972636][T16485] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.990159][T16485] bridge_slave_0: entered allmulticast mode [ 346.999519][T16485] bridge_slave_0: entered promiscuous mode [ 347.027731][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.098143][ T5850] Bluetooth: hci2: command tx timeout [ 347.125815][T16485] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.132974][T16485] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.209970][T16485] bridge_slave_1: entered allmulticast mode [ 347.224611][T16485] bridge_slave_1: entered promiscuous mode [ 347.252873][T16468] team0: Port device team_slave_0 added [ 347.293688][T16468] team0: Port device team_slave_1 added [ 347.398547][T16485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.417488][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.433488][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.478203][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.483974][T16610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2961'. [ 347.509027][T16612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2962'. [ 347.528231][T16613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2961'. [ 347.528535][T16485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.580507][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.593339][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.653238][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.653503][ T5850] Bluetooth: hci4: command tx timeout [ 347.667077][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2963'. [ 347.746505][T16622] No such timeout policy "syz0" [ 347.759316][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 347.800551][ T3555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.891636][T16485] team0: Port device team_slave_0 added [ 347.929322][ T3555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.954855][T16485] team0: Port device team_slave_1 added [ 347.987462][T16627] veth0: entered promiscuous mode [ 348.002039][T16468] hsr_slave_0: entered promiscuous mode [ 348.009277][T16468] hsr_slave_1: entered promiscuous mode [ 348.035535][T16485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.042521][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.091168][T16485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.113570][T16485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.120558][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.168923][T16485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.205498][ T3555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.228091][T16626] veth0: left promiscuous mode [ 348.323031][ T3555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.372102][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 348.392677][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 348.410175][T16636] netlink: 'syz.1.2970': attribute type 4 has an invalid length. [ 348.410918][T16635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2969'. [ 348.462513][T16636] netlink: 'syz.1.2970': attribute type 4 has an invalid length. [ 348.470748][T16485] hsr_slave_0: entered promiscuous mode [ 348.471601][T16485] hsr_slave_1: entered promiscuous mode [ 348.493924][T16485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.501615][T16485] Cannot create hsr debugfs directory [ 348.542463][T16638] (unnamed net_device) (uninitialized): option use_carrier: invalid value (8) [ 348.700617][T16640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2971'. [ 348.808907][ T3555] bridge_slave_1: left allmulticast mode [ 348.819921][ T3555] bridge_slave_1: left promiscuous mode [ 348.833826][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.854719][ T3555] bridge_slave_0: left allmulticast mode [ 348.876705][ T3555] bridge_slave_0: left promiscuous mode [ 348.882574][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.173858][ T5850] Bluetooth: hci2: command tx timeout [ 349.323305][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.335028][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.345971][ T3555] bond0 (unregistering): Released all slaves [ 349.368506][T16648] IPVS: Unknown mcast interface: vcan0 [ 349.562733][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2978'. [ 349.619895][T16660] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 349.722684][T16664] xt_hashlimit: max too large, truncated to 1048576 [ 349.733684][ T5850] Bluetooth: hci4: command tx timeout [ 349.949782][ T3555] hsr_slave_0: left promiscuous mode [ 349.975204][ T3555] hsr_slave_1: left promiscuous mode [ 349.990451][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.999680][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.016595][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.029247][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.040667][T16680] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 350.091945][ T3555] veth1_macvtap: left promiscuous mode [ 350.103085][ T3555] veth0_macvtap: left promiscuous mode [ 350.112298][ T3555] veth1_vlan: left promiscuous mode [ 350.127722][ T3555] veth0_vlan: left promiscuous mode [ 350.753925][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 350.811680][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 351.296730][T16680] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.654700][T16701] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 351.702739][T16468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.716526][T16468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.795929][T16468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.811404][T16468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.889808][T16485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.962592][T16485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.001102][T16485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.036520][T16485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.121444][T16468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.185220][T16468] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.209811][T16718] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 352.250055][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.257240][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.315483][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.322654][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.445389][T16724] netlink: 'syz.1.2994': attribute type 16 has an invalid length. [ 352.465399][T16485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.473925][T16724] netlink: 'syz.1.2994': attribute type 17 has an invalid length. [ 352.481850][T16726] netlink: 'syz.4.2993': attribute type 3 has an invalid length. [ 352.616710][T16732] __nla_validate_parse: 5 callbacks suppressed [ 352.616727][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2995'. [ 352.651746][T16485] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.684757][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.691903][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.725603][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.732752][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.840100][T16739] netlink: 'syz.4.2997': attribute type 30 has an invalid length. [ 352.881673][T16740] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 352.927479][T16468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.137106][T16753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2999'. [ 353.245785][T16468] veth0_vlan: entered promiscuous mode [ 353.292939][T16485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.302415][T16468] veth1_vlan: entered promiscuous mode [ 353.400212][T16468] veth0_macvtap: entered promiscuous mode [ 353.436150][T16485] veth0_vlan: entered promiscuous mode [ 353.447423][T16468] veth1_macvtap: entered promiscuous mode [ 353.490073][T16468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.533328][T16468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.563247][T16468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.603710][T16468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.624330][T16468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.634464][T16485] veth1_vlan: entered promiscuous mode [ 353.647519][T16780] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3006'. [ 353.671329][T16468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.714734][T16468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.737007][T16468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.766301][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3008'. [ 353.782432][T16468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.802732][T16468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.812990][T16468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.824499][T16468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.837321][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 353.917299][T16485] veth0_macvtap: entered promiscuous mode [ 353.995090][T16485] veth1_macvtap: entered promiscuous mode [ 354.034575][T16791] validate_nla: 4 callbacks suppressed [ 354.034595][T16791] netlink: 'syz.4.3010': attribute type 1 has an invalid length. [ 354.048711][ T8105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.059649][T16485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.083639][T16791] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3010'. [ 354.085847][ T8105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.092692][T16791] netlink: 'syz.4.3010': attribute type 1 has an invalid length. [ 354.092710][T16791] netlink: 'syz.4.3010': attribute type 2 has an invalid length. [ 354.094349][T16485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.143931][T16485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.161407][T16794] x_tables: unsorted underflow at hook 4 [ 354.182116][T16485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.192447][T16485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.203902][T16485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.221770][T16485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.297278][T16485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.317101][T16485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.332882][T16485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.350460][T16485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.394429][T16485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.432009][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.438826][T16485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.452477][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.462867][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 354.476545][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3015'. [ 354.479920][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 354.494897][T16485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.509956][T16485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.519185][T16485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.805728][ T8105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.842869][ T8105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.949508][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 354.979447][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.992837][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.111795][T16833] xt_hashlimit: overflow, rate too high: 0 [ 355.187853][T16835] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 355.423033][T16845] netlink: 'syz.1.3027': attribute type 10 has an invalid length. [ 355.443605][T16845] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 355.562461][ T2969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.685086][ T2969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.878280][ T2969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.984582][T16853] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 356.167619][ T2969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.179824][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.190568][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.201906][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.211456][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.220340][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.233813][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.270902][T16854] lo speed is unknown, defaulting to 1000 [ 356.283836][T16854] xfrm0 speed is unknown, defaulting to 1000 [ 356.320595][ T2969] bridge_slave_1: left allmulticast mode [ 356.327255][ T2969] bridge_slave_1: left promiscuous mode [ 356.332927][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.344630][ T2969] bridge_slave_0: left allmulticast mode [ 356.350311][ T2969] bridge_slave_0: left promiscuous mode [ 356.356064][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.577272][T16864] openvswitch: netlink: Missing valid actions attribute. [ 356.585434][T16864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.840705][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.851837][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.869329][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.886962][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.903928][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.918488][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.989571][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.001507][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.012696][ T2969] bond0 (unregistering): Released all slaves [ 357.139613][T16864] IPVS: Scheduler module ip_vs_sip not found [ 357.211716][T16869] lo speed is unknown, defaulting to 1000 [ 357.227544][T16869] xfrm0 speed is unknown, defaulting to 1000 [ 357.467700][T16885] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 357.514300][ T2969] hsr_slave_0: left promiscuous mode [ 357.520216][ T2969] hsr_slave_1: left promiscuous mode [ 357.530286][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.537836][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.547431][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.555399][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.619965][ T2969] veth1_macvtap: left promiscuous mode [ 357.631403][ T2969] veth0_macvtap: left promiscuous mode [ 357.641746][ T2969] veth1_vlan: left promiscuous mode [ 357.654048][ T2969] veth0_vlan: left promiscuous mode [ 358.134875][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 358.198665][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 358.296715][ T5850] Bluetooth: hci2: command tx timeout [ 358.900505][T16854] chnl_net:caif_netlink_parms(): no params data found [ 358.974130][T16906] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 359.013396][ T5850] Bluetooth: hci4: command tx timeout [ 359.106014][T16869] chnl_net:caif_netlink_parms(): no params data found [ 359.138071][T16911] __nla_validate_parse: 5 callbacks suppressed [ 359.138090][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'. [ 359.153937][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'. [ 359.162892][T16911] netlink: 'syz.2.3041': attribute type 3 has an invalid length. [ 359.405648][T16854] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.413503][T16854] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.420777][T16854] bridge_slave_0: entered allmulticast mode [ 359.434591][T16854] bridge_slave_0: entered promiscuous mode [ 359.524489][T16854] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.531627][T16854] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.531791][T16933] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 359.555276][T16933] netlink: 'syz.4.3048': attribute type 2 has an invalid length. [ 359.569102][T16933] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 359.573457][T16854] bridge_slave_1: entered allmulticast mode [ 359.597034][T16854] bridge_slave_1: entered promiscuous mode [ 359.725658][T16854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.786485][T16854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.828646][T16869] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.853308][T16869] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.864455][T16869] bridge_slave_0: entered allmulticast mode [ 359.882133][T16869] bridge_slave_0: entered promiscuous mode [ 359.935839][T16869] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.943092][T16869] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.952176][T16869] bridge_slave_1: entered allmulticast mode [ 359.959957][T16869] bridge_slave_1: entered promiscuous mode [ 359.962771][T16950] Cannot find add_set index 1 as target [ 360.010402][T16854] team0: Port device team_slave_0 added [ 360.077477][ T8109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.130505][T16854] team0: Port device team_slave_1 added [ 360.168914][T16869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.237461][ T8109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.266184][T16869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.277431][T16854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.284858][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.322377][T16854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.373874][ T5850] Bluetooth: hci2: command tx timeout [ 360.491362][ T8109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.516629][T16854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.525933][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.547462][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 360.553974][T16854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.594955][ T8109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.608979][T16963] netlink: 'syz.2.3054': attribute type 29 has an invalid length. [ 360.621657][T16869] team0: Port device team_slave_0 added [ 360.634472][T16869] team0: Port device team_slave_1 added [ 360.652343][T16969] netlink: 'syz.2.3054': attribute type 29 has an invalid length. [ 360.787237][T16869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.804326][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.831584][T16869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.866420][T16976] netlink: 'syz.4.3057': attribute type 21 has an invalid length. [ 360.874486][T16976] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 360.912391][T16869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.921992][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.960735][T16869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.997201][T16854] hsr_slave_0: entered promiscuous mode [ 361.014585][T16854] hsr_slave_1: entered promiscuous mode [ 361.098372][ T5850] Bluetooth: hci4: command tx timeout [ 361.122956][T16992] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3062'. [ 361.269154][T16997] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 361.290286][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 361.350349][T16869] hsr_slave_0: entered promiscuous mode [ 361.360856][T16869] hsr_slave_1: entered promiscuous mode [ 361.367712][T16869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.378718][T16869] Cannot create hsr debugfs directory [ 361.391421][ T8109] bridge_slave_1: left allmulticast mode [ 361.403238][ T8109] bridge_slave_1: left promiscuous mode [ 361.409032][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.422670][ T8109] bridge_slave_0: left allmulticast mode [ 361.428948][ T8109] bridge_slave_0: left promiscuous mode [ 361.435055][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.507410][T17009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3066'. [ 361.833868][ T8109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.845935][ T8109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.856428][ T8109] bond0 (unregistering): Released all slaves [ 361.980887][T17011] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3069'. [ 362.207275][T17020] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 362.243311][T17020] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3070'. [ 362.294370][T17023] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 362.302493][T17023] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3071'. [ 362.334123][T17023] NCSI netlink: No device for ifindex 458760 [ 362.354635][T17027] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3070'. [ 362.439870][ T8109] hsr_slave_0: left promiscuous mode [ 362.453570][ T5850] Bluetooth: hci2: command tx timeout [ 362.464008][ T8109] hsr_slave_1: left promiscuous mode [ 362.470035][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.478129][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.527280][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.544966][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.596268][ T8109] veth1_macvtap: left promiscuous mode [ 362.601934][ T8109] veth0_macvtap: left promiscuous mode [ 362.608361][ T8109] veth1_vlan: left promiscuous mode [ 362.614080][ T8109] veth0_vlan: left promiscuous mode [ 363.134396][ T8109] team0 (unregistering): Port device team_slave_1 removed [ 363.173406][ T5850] Bluetooth: hci4: command tx timeout [ 363.189997][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 363.658515][T17037] lo speed is unknown, defaulting to 1000 [ 363.808125][T17037] xfrm0 speed is unknown, defaulting to 1000 [ 364.050363][T17049] sctp: [Deprecated]: syz.2.3078 (pid 17049) Use of int in max_burst socket option deprecated. [ 364.050363][T17049] Use struct sctp_assoc_value instead [ 364.333678][T17063] validate_nla: 2 callbacks suppressed [ 364.333696][T17063] netlink: 'syz.2.3081': attribute type 1 has an invalid length. [ 364.533770][ T5850] Bluetooth: hci2: command tx timeout [ 364.551045][T16869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.584449][T16869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.596857][T16869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.611638][T16869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.757010][T16854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.822434][T17081] bond9: (slave gretap0): Releasing active interface [ 364.834419][ T5916] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 364.856446][T16854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.897015][T16854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.910980][T16854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.111301][T16869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.218326][T16869] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.252383][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.259597][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.263650][ T5850] Bluetooth: hci4: command tx timeout [ 365.318646][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.325821][ T8105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.376519][ T5883] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 365.406875][T16854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.476174][T16854] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.520964][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.528165][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.606771][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.613970][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.832286][T17119] __nla_validate_parse: 3 callbacks suppressed [ 365.832307][T17119] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3096'. [ 365.877192][T17119] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 365.892577][T16869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.028098][T16869] veth0_vlan: entered promiscuous mode [ 366.051253][T16854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.068630][T16869] veth1_vlan: entered promiscuous mode [ 366.165584][T16869] veth0_macvtap: entered promiscuous mode [ 366.194770][T16854] veth0_vlan: entered promiscuous mode [ 366.212099][T16869] veth1_macvtap: entered promiscuous mode [ 366.260830][T16854] veth1_vlan: entered promiscuous mode [ 366.269194][T16869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.281717][T16869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.292792][T16869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.311476][T16869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.348818][T16869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.382600][T16869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.420486][T17136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3101'. [ 366.430155][T16869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.475674][T16869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.496875][T16869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.513699][T16869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.531971][T16869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.551965][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'. [ 366.568476][T16869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.612786][T17145] macvlan3: entered allmulticast mode [ 366.619032][T17145] veth1_vlan: entered allmulticast mode [ 366.739984][T16854] veth0_macvtap: entered promiscuous mode [ 366.779085][T16854] veth1_macvtap: entered promiscuous mode [ 366.936259][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.954755][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.973528][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.993141][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.043205][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.061878][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.073500][T16854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.081849][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.102674][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.125564][T17163] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 367.142466][T17171] veth0_to_hsr: entered promiscuous mode [ 367.152102][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.163489][T17163] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 367.178039][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.199802][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.232508][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.249445][T16854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.277320][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.285550][T17170] veth0_to_hsr: left promiscuous mode [ 367.290608][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.325679][T16854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.343197][T16854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.352411][T16854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.368256][T16854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.611682][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.637689][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.721498][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.750416][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.759373][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 367.772756][T17188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3116'. [ 367.927401][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.351622][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.456447][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.532150][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.839755][ T53] bridge_slave_1: left allmulticast mode [ 368.848003][ T53] bridge_slave_1: left promiscuous mode [ 368.858620][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.871028][ T53] bridge_slave_0: left allmulticast mode [ 368.881784][ T53] bridge_slave_0: left promiscuous mode [ 368.890278][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.953827][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.962852][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.972229][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.980474][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.988337][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.996253][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.290868][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.301742][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.312368][ T53] bond0 (unregistering): Released all slaves [ 369.360642][T17197] lo speed is unknown, defaulting to 1000 [ 369.381094][T17197] xfrm0 speed is unknown, defaulting to 1000 [ 369.542915][T17197] chnl_net:caif_netlink_parms(): no params data found [ 369.585762][ T53] hsr_slave_0: left promiscuous mode [ 369.591587][ T53] hsr_slave_1: left promiscuous mode [ 369.597863][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.605705][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.614281][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.621692][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.649282][ T53] veth1_macvtap: left promiscuous mode [ 369.655186][ T53] veth0_macvtap: left promiscuous mode [ 369.660807][ T53] veth1_vlan: left promiscuous mode [ 369.666714][ T53] veth0_vlan: left promiscuous mode [ 369.813261][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 370.089854][ T53] team0 (unregistering): Port device team_slave_1 removed [ 370.133865][ T53] team0 (unregistering): Port device team_slave_0 removed [ 370.734024][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3121'. [ 370.956785][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.975416][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.985434][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.003591][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.020326][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.030074][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.096500][ T5850] Bluetooth: hci2: command tx timeout [ 371.308200][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.323877][T17197] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.331217][T17197] bridge_slave_0: entered allmulticast mode [ 371.349436][T17229] Unknown options in mask 1f4 [ 371.369620][T17197] bridge_slave_0: entered promiscuous mode [ 371.380197][T17217] lo speed is unknown, defaulting to 1000 [ 371.380629][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.411224][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.453053][T17197] bridge_slave_1: entered allmulticast mode [ 371.477325][T17197] bridge_slave_1: entered promiscuous mode [ 371.488105][T17217] xfrm0 speed is unknown, defaulting to 1000 [ 371.619496][T17197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.657134][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'. [ 371.691515][T17197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.898411][T17239] vxcan1 (unregistering): left allmulticast mode [ 371.971616][T17197] team0: Port device team_slave_0 added [ 371.994662][T17197] team0: Port device team_slave_1 added [ 372.080951][T17197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.089872][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.116886][T17197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.129851][T17197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.137209][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.163987][T17197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.265621][T17197] hsr_slave_0: entered promiscuous mode [ 372.272271][T17197] hsr_slave_1: entered promiscuous mode [ 372.276316][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 372.304652][T17197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.323317][T17197] Cannot create hsr debugfs directory [ 372.413553][T17281] sctp: [Deprecated]: syz.4.3132 (pid 17281) Use of int in maxseg socket option. [ 372.413553][T17281] Use struct sctp_assoc_value instead [ 372.672547][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.713809][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 372.726910][T17217] chnl_net:caif_netlink_parms(): no params data found [ 372.743954][T17285] lo speed is unknown, defaulting to 1000 [ 372.750924][T17285] xfrm0 speed is unknown, defaulting to 1000 [ 372.827979][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.978447][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.074949][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.093357][ T5850] Bluetooth: hci4: command tx timeout [ 373.173585][ T5850] Bluetooth: hci2: command tx timeout [ 373.211478][T17315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3142'. [ 373.237556][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.245134][T17217] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.252330][T17217] bridge_slave_0: entered allmulticast mode [ 373.282463][T17217] bridge_slave_0: entered promiscuous mode [ 373.358275][T17316] lo speed is unknown, defaulting to 1000 [ 373.365946][T17316] xfrm0 speed is unknown, defaulting to 1000 [ 373.399445][T17317] lo speed is unknown, defaulting to 1000 [ 373.403775][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.412340][T17217] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.430453][T17217] bridge_slave_1: entered allmulticast mode [ 373.438192][T17217] bridge_slave_1: entered promiscuous mode [ 373.459484][T17317] xfrm0 speed is unknown, defaulting to 1000 [ 373.582924][T17217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.636151][T17217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.649724][ T53] bridge_slave_1: left allmulticast mode [ 373.657346][ T53] bridge_slave_1: left promiscuous mode [ 373.663872][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.680088][ T53] bridge_slave_0: left allmulticast mode [ 373.693248][ T53] bridge_slave_0: left promiscuous mode [ 373.699238][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.108955][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 374.166110][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.181532][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.192780][ T53] bond0 (unregistering): Released all slaves [ 374.311884][T17326] lo speed is unknown, defaulting to 1000 [ 374.350995][T17217] team0: Port device team_slave_0 added [ 374.392226][T17326] xfrm0 speed is unknown, defaulting to 1000 [ 374.420891][T17217] team0: Port device team_slave_1 added [ 374.489356][T17217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.503166][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.529783][T17217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.591743][T17197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.614462][T17217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.632108][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.661669][T17217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.661790][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'. [ 374.700577][T17197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.728910][T17197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.761571][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3144'. [ 374.787061][ T53] hsr_slave_0: left promiscuous mode [ 374.793379][ T53] hsr_slave_1: left promiscuous mode [ 374.799250][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.807609][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.818481][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.832761][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.895603][ T53] veth1_macvtap: left promiscuous mode [ 374.901296][ T53] veth0_macvtap: left promiscuous mode [ 374.907780][ T53] veth1_vlan: left promiscuous mode [ 374.913255][ T53] veth0_vlan: left promiscuous mode [ 375.177934][ T5850] Bluetooth: hci4: command tx timeout [ 375.257863][ T5850] Bluetooth: hci2: command tx timeout [ 375.409286][ T53] team0 (unregistering): Port device team_slave_1 removed [ 375.452886][ T53] team0 (unregistering): Port device team_slave_0 removed [ 375.852659][T17197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.938788][T17217] hsr_slave_0: entered promiscuous mode [ 375.949403][T17217] hsr_slave_1: entered promiscuous mode [ 376.417348][T17197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.482231][T17197] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.515339][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.522481][ T8105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.536857][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.544052][ T8105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.910899][T17217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.939011][T17197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.952816][T17217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.972735][T17217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.996229][T17217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.050454][T17197] veth0_vlan: entered promiscuous mode [ 377.090747][T17197] veth1_vlan: entered promiscuous mode [ 377.176724][T17197] veth0_macvtap: entered promiscuous mode [ 377.217169][T17217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.237243][T17197] veth1_macvtap: entered promiscuous mode [ 377.253641][ T5850] Bluetooth: hci4: command tx timeout [ 377.295749][T17217] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.324969][T17197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.334979][ T5850] Bluetooth: hci2: command tx timeout [ 377.347630][T17197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.388138][T17197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.415988][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3159'. [ 377.421363][T17197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.450898][T17197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.465686][T17391] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3158'. [ 377.483152][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.490338][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.502608][T17197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.514710][T17197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.532996][T17197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.544496][T17387] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3158'. [ 377.551220][T17395] openvswitch: netlink: IP tunnel TTL not specified. [ 377.593079][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.600256][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.636073][T17197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.646607][T17397] Cannot find add_set index 0 as target [ 377.652483][T17197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.671922][T17197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.680856][T17197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.856417][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.877657][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.940573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.957473][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.072723][T17217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.178867][T17217] veth0_vlan: entered promiscuous mode [ 378.198816][T17217] veth1_vlan: entered promiscuous mode [ 378.236105][T17217] veth0_macvtap: entered promiscuous mode [ 378.267472][T17217] veth1_macvtap: entered promiscuous mode [ 378.291661][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.313133][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.322965][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.334712][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.344942][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.355826][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.368013][T17217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.379108][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.389722][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.405975][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.416825][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.429339][T17217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.449397][T17217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.492333][T17217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.503079][T17217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.512205][T17217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.684782][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.718503][T17422] netlink: 'syz.4.3167': attribute type 10 has an invalid length. [ 378.721754][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.762351][T17422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3167'. [ 378.872516][ T8109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.895087][T17422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 378.963026][T17426] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 378.986364][ T8109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.053866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.062437][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.299083][ T8109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.333757][ T5834] Bluetooth: hci4: command tx timeout [ 379.987215][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 380.112228][ T8109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.184728][T17454] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 380.322749][ T8109] bridge_slave_1: left allmulticast mode [ 380.337309][ T8109] bridge_slave_1: left promiscuous mode [ 380.359531][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.381051][ T8109] bridge_slave_0: left allmulticast mode [ 380.398399][ T8109] bridge_slave_0: left promiscuous mode [ 380.412488][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.422658][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.432297][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.441228][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.452580][T17458] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3175'. [ 380.460721][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.463038][T17458] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.471330][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 380.495086][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.868935][ T8109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.879854][ T8109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.890747][ T8109] bond0 (unregistering): Released all slaves [ 380.930894][T17459] lo speed is unknown, defaulting to 1000 [ 380.964223][T17459] xfrm0 speed is unknown, defaulting to 1000 [ 381.448781][T17459] chnl_net:caif_netlink_parms(): no params data found [ 381.538229][T17502] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 381.711787][T17497] bond0 (unregistering): Released all slaves [ 381.759480][T17507] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 381.821584][ T8109] hsr_slave_0: left promiscuous mode [ 381.831126][ T8109] hsr_slave_1: left promiscuous mode [ 381.839656][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.856420][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.867524][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.875964][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.904996][ T8109] veth1_macvtap: left promiscuous mode [ 381.910541][ T8109] veth0_macvtap: left promiscuous mode [ 381.923046][ T8109] veth1_vlan: left promiscuous mode [ 381.929779][ T8109] veth0_vlan: left promiscuous mode [ 382.476766][ T8109] team0 (unregistering): Port device team_slave_1 removed [ 382.524279][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 382.545384][ T5147] Bluetooth: hci2: command tx timeout [ 383.140100][T17459] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.150195][T17459] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.173361][T17459] bridge_slave_0: entered allmulticast mode [ 383.193521][T17459] bridge_slave_0: entered promiscuous mode [ 383.228690][T17459] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.245170][T17459] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.252720][T17459] bridge_slave_1: entered allmulticast mode [ 383.274460][T17459] bridge_slave_1: entered promiscuous mode [ 383.381142][T17459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.393424][T17459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.468053][T17459] team0: Port device team_slave_0 added [ 383.478682][T17459] team0: Port device team_slave_1 added [ 383.515608][T17541] delete_channel: no stack [ 383.561371][T17459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.574273][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.607763][T17459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.621086][T17459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.628961][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.655994][T17459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.744742][T17459] hsr_slave_0: entered promiscuous mode [ 383.751128][T17459] hsr_slave_1: entered promiscuous mode [ 383.759350][T17459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.767682][T17459] Cannot create hsr debugfs directory [ 383.786805][T17544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3195'. [ 383.977121][T17552] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3197'. [ 384.191660][T17560] netlink: 'syz.2.3199': attribute type 9 has an invalid length. [ 384.202150][T17560] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3199'. [ 384.316529][T17459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.348064][T17459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.374210][T17459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.389536][T17459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.411235][T17566] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3201'. [ 384.430606][T17566] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 384.450219][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 384.609559][T17459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.617136][ T5834] Bluetooth: hci2: command tx timeout [ 384.661629][T17459] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.691261][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.698434][ T8109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.752293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.759513][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.845023][T17459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.862216][T17459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.269476][T17459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.367021][T17459] veth0_vlan: entered promiscuous mode [ 385.454318][T17459] veth1_vlan: entered promiscuous mode [ 385.497609][T17459] veth0_macvtap: entered promiscuous mode [ 385.508006][T17459] veth1_macvtap: entered promiscuous mode [ 385.530498][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.570233][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.593451][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.612343][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.629676][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.641759][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.674842][T17459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.712297][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.731543][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.761394][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.801897][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.841054][T17459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.884818][T17631] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 385.910242][T17459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.932588][T17459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.952489][T17459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.974733][T17459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.137473][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.158709][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.268550][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.287063][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.392350][T17648] dccp_v6_rcv: dropped packet with invalid checksum [ 386.693551][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 387.527315][T17705] syzkaller1: entered promiscuous mode [ 387.533018][T17705] syzkaller1: entered allmulticast mode [ 387.540967][T17705] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 26 [ 387.737146][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.714381][T17714] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3240'. [ 388.724294][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 388.815213][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.896012][T17717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.006117][T17722] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3243'. [ 389.019607][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.060781][T17722] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 389.118486][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.175982][T17728] bond0: (slave gretap2): making interface the new active one [ 389.186982][T17728] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 389.244347][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.257149][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.283275][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.295181][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.303074][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 389.313400][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.324193][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.403483][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3248'. [ 389.416858][T17731] lo speed is unknown, defaulting to 1000 [ 389.425464][T17731] xfrm0 speed is unknown, defaulting to 1000 [ 389.439369][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 389.678274][ T67] bridge_slave_1: left allmulticast mode [ 389.687968][ T67] bridge_slave_1: left promiscuous mode [ 389.695034][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.721336][ T67] bridge_slave_0: left allmulticast mode [ 389.743233][ T67] bridge_slave_0: left promiscuous mode [ 389.763481][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.469596][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.481294][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.491843][ T67] bond0 (unregistering): Released all slaves [ 390.509769][T17731] chnl_net:caif_netlink_parms(): no params data found [ 391.067744][T17787] netlink: 'syz.4.3261': attribute type 10 has an invalid length. [ 391.084063][T17787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3261'. [ 391.123443][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.138388][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.147625][T17731] bridge_slave_0: entered allmulticast mode [ 391.157450][T17731] bridge_slave_0: entered promiscuous mode [ 391.165484][T17787] dummy0: entered promiscuous mode [ 391.171700][T17787] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 391.203951][ T67] hsr_slave_0: left promiscuous mode [ 391.214757][ T67] hsr_slave_1: left promiscuous mode [ 391.220560][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.228736][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.246050][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.254381][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.295140][ T67] veth1_macvtap: left promiscuous mode [ 391.300780][ T67] veth0_macvtap: left promiscuous mode [ 391.306469][ T67] veth1_vlan: left promiscuous mode [ 391.311743][ T67] veth0_vlan: left promiscuous mode [ 391.421394][ T5147] Bluetooth: hci2: command tx timeout [ 391.758632][ T67] team0 (unregistering): Port device team_slave_1 removed [ 391.805191][ T67] team0 (unregistering): Port device team_slave_0 removed [ 392.259786][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.267554][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.293276][T17731] bridge_slave_1: entered allmulticast mode [ 392.300526][T17731] bridge_slave_1: entered promiscuous mode [ 392.361619][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.429643][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.439409][T17801] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3265'. [ 392.538532][T17731] team0: Port device team_slave_0 added [ 392.582316][T17731] team0: Port device team_slave_1 added [ 392.687388][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.706195][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.756516][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.772488][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.786723][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.815036][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.927250][T17731] hsr_slave_0: entered promiscuous mode [ 392.935192][T17731] hsr_slave_1: entered promiscuous mode [ 392.941449][T17731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.960612][T17731] Cannot create hsr debugfs directory [ 393.494848][ T5147] Bluetooth: hci2: command tx timeout [ 393.666863][T17731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.693961][T17731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.721564][T17731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.755324][T17731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.902492][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.948389][T17731] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.986102][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.993314][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.010241][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.017469][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.102234][T17731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.257637][T17864] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 394.300901][T17864] vlan4: entered promiscuous mode [ 394.307872][T17864] bond16: (slave vlan4): Opening slave failed [ 394.454977][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.505557][T17731] veth0_vlan: entered promiscuous mode [ 394.518852][T17731] veth1_vlan: entered promiscuous mode [ 394.546677][T17731] veth0_macvtap: entered promiscuous mode [ 394.579998][T17731] veth1_macvtap: entered promiscuous mode [ 394.602439][T17875] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 394.650371][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.680513][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.707519][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.719203][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.739585][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.764518][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.782172][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.800310][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.827962][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.847963][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.859093][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.871044][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.892455][T17731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.908576][T17731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.919634][T17731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.936856][T17731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.031392][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.070333][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.137237][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.172891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.186184][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'. [ 395.324230][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 395.474719][T17906] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3292'. [ 395.511845][T17906] vlan0: entered allmulticast mode [ 396.199513][T17947] veth0_to_hsr: invalid flags given to default FDB implementation [ 396.294067][T17949] netlink: 'syz.2.3306': attribute type 18 has an invalid length. [ 396.410494][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.358050][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.545417][T17965] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.777092][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.873326][T17980] netlink: 'syz.4.3314': attribute type 4 has an invalid length. [ 397.912816][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.950007][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.962072][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.969143][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 397.981979][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.997652][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.006522][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.016225][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.018937][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.054983][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.071572][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.084589][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.094097][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.103486][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 398.151341][T17980] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 398.174893][ T5916] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 398.237021][T17984] lo speed is unknown, defaulting to 1000 [ 398.284942][T17984] xfrm0 speed is unknown, defaulting to 1000 [ 398.344328][ T67] bridge_slave_1: left allmulticast mode [ 398.370597][ T67] bridge_slave_1: left promiscuous mode [ 398.379772][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.405166][ T67] bridge_slave_0: left allmulticast mode [ 398.421077][ T67] bridge_slave_0: left promiscuous mode [ 398.436004][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.951542][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.963321][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.974526][ T67] bond0 (unregistering): Released all slaves [ 399.094885][ T5884] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 399.352624][T18032] nft_compat: unsupported protocol 0 [ 399.417285][ T67] hsr_slave_0: left promiscuous mode [ 399.446755][ T67] hsr_slave_1: left promiscuous mode [ 399.452718][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.492441][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.536785][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.570641][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.577710][T18046] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 399.631511][ T67] veth1_macvtap: left promiscuous mode [ 399.644714][ T67] veth0_macvtap: left promiscuous mode [ 399.650386][ T67] veth1_vlan: left promiscuous mode [ 399.657648][ T67] veth0_vlan: left promiscuous mode [ 400.143483][ T5834] Bluetooth: hci2: command tx timeout [ 400.160921][ T67] team0 (unregistering): Port device team_slave_1 removed [ 400.209804][ T67] team0 (unregistering): Port device team_slave_0 removed [ 400.647715][T17984] chnl_net:caif_netlink_parms(): no params data found [ 400.844569][T17984] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.863669][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.870959][T17984] bridge_slave_0: entered allmulticast mode [ 400.887790][T17984] bridge_slave_0: entered promiscuous mode [ 400.905739][T17984] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.926644][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.944408][T17984] bridge_slave_1: entered allmulticast mode [ 400.964499][T17984] bridge_slave_1: entered promiscuous mode [ 401.152898][T17984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.196121][T17984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.275696][T17984] team0: Port device team_slave_0 added [ 401.302379][T17984] team0: Port device team_slave_1 added [ 401.386028][T17984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.400710][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.483750][T17984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.528858][T17984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.560842][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.620711][T17984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.721486][T17984] hsr_slave_0: entered promiscuous mode [ 401.730676][T17984] hsr_slave_1: entered promiscuous mode [ 401.740993][T17984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.752891][T17984] Cannot create hsr debugfs directory [ 402.008441][T18120] __nla_validate_parse: 61 callbacks suppressed [ 402.008467][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 402.213741][ T5834] Bluetooth: hci2: command tx timeout [ 402.471899][T17984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.489361][T18154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.498939][T18153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.511359][T17984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.527308][T17984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.548222][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 402.549538][T18159] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3359'. [ 402.572606][T17984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.594469][T18159] vlan0: entered allmulticast mode [ 402.745979][T17984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.787876][T17984] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.805543][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.812654][ T8105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.841045][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.848269][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.859467][T18168] netlink: 'syz.2.3363': attribute type 1 has an invalid length. [ 402.892125][T18168] 8021q: adding VLAN 0 to HW filter on device bond17 [ 402.931508][T18168] 8021q: adding VLAN 0 to HW filter on device bond17 [ 402.953714][T18168] bond17: (slave ipip1): The slave device specified does not support setting the MAC address [ 402.966032][T18168] bond17: (slave ipip1): Error -95 calling set_mac_address [ 403.172768][T18185] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3366'. [ 403.299767][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.365203][T17984] veth0_vlan: entered promiscuous mode [ 403.380584][T17984] veth1_vlan: entered promiscuous mode [ 403.415291][T17984] veth0_macvtap: entered promiscuous mode [ 403.427451][T17984] veth1_macvtap: entered promiscuous mode [ 403.445848][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.478192][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.500533][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.524093][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.541891][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.558166][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.575313][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.593265][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.641021][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.662734][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.687917][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.712622][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.725253][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 403.747640][T17984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.779151][T17984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.795755][T17984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.814620][T17984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.004459][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.012645][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.056535][T18217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3371'. [ 404.088111][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.101886][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.147536][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3370'. [ 404.165840][T18220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3371'. [ 404.190146][T18215] netlink: 'syz.2.3370': attribute type 7 has an invalid length. [ 404.223592][T18215] netlink: 'syz.2.3370': attribute type 8 has an invalid length. [ 404.250402][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 404.339080][T18229] netlink: 'syz.4.3373': attribute type 10 has an invalid length. [ 404.352353][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 404.758011][T18251] netlink: 'syz.1.3381': attribute type 1 has an invalid length. [ 404.766928][T18251] netlink: 'syz.1.3381': attribute type 1 has an invalid length. [ 404.785399][T18251] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.794786][T18251] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.803667][T18251] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.812394][T18251] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.877680][T18219] syz.2.3370 (18219) used greatest stack depth: 16368 bytes left [ 405.100762][T18266] nbd: couldn't find device at index 1255035857 [ 405.466770][T18287] xt_TCPMSS: Only works on TCP SYN packets [ 405.632447][ T8106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.634125][ T8106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.700889][ T8106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.770700][ T8106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.914110][ T8106] bridge_slave_1: left allmulticast mode [ 406.919883][ T8106] bridge_slave_1: left promiscuous mode [ 406.935834][T18300] netlink: 'syz.2.3398': attribute type 4 has an invalid length. [ 406.950409][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.961409][T18300] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 406.990125][ T8106] bridge_slave_0: left allmulticast mode [ 406.996330][ T8106] bridge_slave_0: left promiscuous mode [ 407.002105][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.326787][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.353311][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.368113][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.379405][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.399324][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.407213][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.620941][ T8106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.631904][ T8106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.647292][ T8106] bond0 (unregistering): Released all slaves [ 407.658422][T18310] tunl0: entered promiscuous mode [ 407.673417][T18310] netlink: 'syz.1.3401': attribute type 3 has an invalid length. [ 407.681327][T18310] __nla_validate_parse: 8 callbacks suppressed [ 407.681342][T18310] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3401'. [ 407.783176][T18317] lo speed is unknown, defaulting to 1000 [ 407.798302][T18317] xfrm0 speed is unknown, defaulting to 1000 [ 408.261399][ T8106] hsr_slave_0: left promiscuous mode [ 408.284343][ T8106] hsr_slave_1: left promiscuous mode [ 408.284998][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 408.290367][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.331399][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.347545][ T8106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.361729][ T8106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.417367][ T8106] veth1_macvtap: left promiscuous mode [ 408.423213][ T8106] veth0_macvtap: left promiscuous mode [ 408.428869][ T8106] veth1_vlan: left promiscuous mode [ 408.450145][ T8106] veth0_vlan: left promiscuous mode [ 409.125711][ T8106] team0 (unregistering): Port device team_slave_1 removed [ 409.194228][ T8106] team0 (unregistering): Port device team_slave_0 removed [ 409.504517][ T5834] Bluetooth: hci2: command tx timeout [ 409.791304][T18317] chnl_net:caif_netlink_parms(): no params data found [ 410.165026][T18317] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.172150][T18317] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.184397][T18317] bridge_slave_0: entered allmulticast mode [ 410.202667][T18317] bridge_slave_0: entered promiscuous mode [ 410.255016][T18317] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.266188][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.275905][T18317] bridge_slave_1: entered allmulticast mode [ 410.288947][T18317] bridge_slave_1: entered promiscuous mode [ 410.398170][T18424] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3425'. [ 410.410813][T18317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.414833][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 410.442847][T18317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.540126][T18317] team0: Port device team_slave_0 added [ 410.572398][T18317] team0: Port device team_slave_1 added [ 410.602771][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3427'. [ 410.612759][T18317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.633420][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.687321][T18317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.700649][T18317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.710424][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.739031][T18317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.924584][T18317] hsr_slave_0: entered promiscuous mode [ 410.931804][T18317] hsr_slave_1: entered promiscuous mode [ 410.952084][T18317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.960621][T18317] Cannot create hsr debugfs directory [ 411.148628][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 411.217025][T18469] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 411.463167][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3438'. [ 411.574261][ T5834] Bluetooth: hci2: command tx timeout [ 411.789987][T18317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.805475][T18499] syzkaller0: entered allmulticast mode [ 411.868874][T18499] syzkaller0 (unregistering): left allmulticast mode [ 411.949492][T18317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.968975][T18317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.986244][T18317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.990120][T18514] openvswitch: netlink: Missing key (keys=40, expected=80) [ 412.172968][T18317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.206429][T18317] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.227239][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.234513][ T8109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.265476][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.272637][ T8109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.328713][T18528] siw: device registration error -23 [ 412.504391][T18539] xt_time: unknown flags 0x4 [ 412.612474][T18539] syzkaller0: entered promiscuous mode [ 412.658036][T18539] syzkaller0: entered allmulticast mode [ 412.741311][T18552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3455'. [ 412.780065][T18554] ax25_connect(): syz.2.3457 uses autobind, please contact jreuter@yaina.de [ 413.656569][ T5834] Bluetooth: hci2: command tx timeout [ 414.520894][T18317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.632037][T18317] veth0_vlan: entered promiscuous mode [ 414.659898][T18317] veth1_vlan: entered promiscuous mode [ 414.728771][T18317] veth0_macvtap: entered promiscuous mode [ 414.738664][T18317] veth1_macvtap: entered promiscuous mode [ 414.764592][T18317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.793218][T18317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.804854][T18317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.816616][T18317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.827133][T18317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.837785][T18317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.849452][T18317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.864661][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 414.890539][T18559] sctp: [Deprecated]: syz.2.3458 (pid 18559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.890539][T18559] Use struct sctp_sack_info instead [ 414.908711][T18559] sctp: [Deprecated]: syz.2.3458 (pid 18559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.908711][T18559] Use struct sctp_sack_info instead [ 414.915744][T18317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.951547][T18317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.962117][T18317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.974399][T18317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.001730][T18317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.022518][T18317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.043518][T18317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.052279][T18317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.077256][T18317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.091530][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3463'. [ 415.121305][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3463'. [ 415.235439][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'. [ 415.384827][ T26] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 415.421497][T18589] bond0: (slave gretap2): Releasing active interface [ 415.510587][T18600] x_tables: duplicate underflow at hook 1 [ 415.553304][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.561255][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.684909][ T8109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.713158][ T8109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.733931][ T5834] Bluetooth: hci2: command tx timeout [ 415.840748][T18617] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.851319][T18617] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.863301][T18617] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.871706][T18617] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.881206][T18617] geneve2: entered promiscuous mode [ 415.887667][T18617] geneve2: entered allmulticast mode [ 415.933486][ T5881] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 415.949193][T18617] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.960289][T18617] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.970554][T18617] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.979538][T18617] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 416.054892][T18619] ip6tnl2: entered allmulticast mode [ 416.339947][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 416.636127][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.811016][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.058163][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.117718][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.211514][ T12] bridge_slave_1: left allmulticast mode [ 417.217884][ T12] bridge_slave_1: left promiscuous mode [ 417.224887][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.234462][ T12] bridge_slave_0: left allmulticast mode [ 417.240219][ T12] bridge_slave_0: left promiscuous mode [ 417.246285][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.568859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.580595][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.592736][ T12] bond0 (unregistering): Released all slaves [ 417.845389][ T12] hsr_slave_0: left promiscuous mode [ 417.856520][ T12] hsr_slave_1: left promiscuous mode [ 417.862485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.870603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.894252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.901710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.025988][ T12] veth1_macvtap: left promiscuous mode [ 418.063585][ T12] veth0_macvtap: left promiscuous mode [ 418.093484][ T12] veth1_vlan: left promiscuous mode [ 418.098850][ T12] veth0_vlan: left promiscuous mode [ 418.437797][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.448724][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.456959][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.470988][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.491307][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 418.498830][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.811837][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.855928][ T12] team0 (unregistering): Port device team_slave_0 removed [ 419.321319][T18673] lo speed is unknown, defaulting to 1000 [ 419.328340][T18673] xfrm0 speed is unknown, defaulting to 1000 [ 419.526050][T18683] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 419.614976][T18683] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 419.626210][T18683] bond12: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 419.644349][T18683] bond12: (slave vti0): making interface the new active one [ 419.654048][T18683] bond12: (slave vti0): Enslaving as an active interface with an up link [ 419.676933][T18687] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 419.694273][T18687] lo speed is unknown, defaulting to 1000 [ 419.786970][T18673] chnl_net:caif_netlink_parms(): no params data found [ 419.888897][T18673] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.896278][T18673] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.903675][T18673] bridge_slave_0: entered allmulticast mode [ 419.910577][T18673] bridge_slave_0: entered promiscuous mode [ 419.920179][T18673] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.928751][T18673] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.936670][T18673] bridge_slave_1: entered allmulticast mode [ 419.944322][T18673] bridge_slave_1: entered promiscuous mode [ 419.972923][T18673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.991459][T18673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.029599][T18673] team0: Port device team_slave_0 added [ 420.057244][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.075071][T18673] team0: Port device team_slave_1 added [ 420.098925][T18673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.110849][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.137880][T18673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.162714][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.178449][T18673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.185622][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.212010][T18673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.222629][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 420.265925][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.285319][T18673] hsr_slave_0: entered promiscuous mode [ 420.291503][T18673] hsr_slave_1: entered promiscuous mode [ 420.297787][T18673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.308847][T18673] Cannot create hsr debugfs directory [ 420.331741][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.470215][ T12] bridge_slave_1: left allmulticast mode [ 420.475971][ T12] bridge_slave_1: left promiscuous mode [ 420.481817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.494599][ T12] bridge_slave_0: left allmulticast mode [ 420.500270][ T12] bridge_slave_0: left promiscuous mode [ 420.507188][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.625002][ T5850] Bluetooth: hci2: command tx timeout [ 420.851066][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.862619][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.875644][ T12] bond0 (unregistering): Released all slaves [ 421.111693][ T12] hsr_slave_0: left promiscuous mode [ 421.118448][ T12] hsr_slave_1: left promiscuous mode [ 421.124632][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.132050][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.139849][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.147604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.175724][ T12] veth1_macvtap: left promiscuous mode [ 421.181251][ T12] veth0_macvtap: left promiscuous mode [ 421.186980][ T12] veth1_vlan: left promiscuous mode [ 421.192316][ T12] veth0_vlan: left promiscuous mode [ 421.600671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 421.649014][ T12] team0 (unregistering): Port device team_slave_0 removed [ 421.753902][T18697] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3494'. [ 421.859442][T18702] netlink: 'syz.2.3495': attribute type 3 has an invalid length. [ 422.305431][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.314458][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.324839][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.344434][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.355734][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 422.364212][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.693646][ T5850] Bluetooth: hci2: command tx timeout [ 422.770967][T18719] lo speed is unknown, defaulting to 1000 [ 422.844529][T18719] xfrm0 speed is unknown, defaulting to 1000 [ 422.998767][T18736] SET target dimension over the limit! [ 423.093931][T18673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.166272][T18673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.200884][T18673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.216049][T18673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.305682][T18749] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 423.324662][T18719] chnl_net:caif_netlink_parms(): no params data found [ 423.516727][T18719] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.525293][T18719] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.533675][T18719] bridge_slave_0: entered allmulticast mode [ 423.540899][T18719] bridge_slave_0: entered promiscuous mode [ 423.560263][T18719] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.571994][T18719] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.588598][T18719] bridge_slave_1: entered allmulticast mode [ 423.597415][T18719] bridge_slave_1: entered promiscuous mode [ 423.681022][T18719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.700169][T18673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.711660][T18719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.777648][T18719] team0: Port device team_slave_0 added [ 423.792925][T18719] team0: Port device team_slave_1 added [ 423.822372][T18673] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.865034][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.872193][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.888495][T18719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.896162][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.923384][T18719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.960377][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.967575][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.973935][T18778] netlink: 'syz.1.3515': attribute type 10 has an invalid length. [ 423.991608][T18780] sctp: [Deprecated]: syz.4.3513 (pid 18780) Use of int in max_burst socket option. [ 423.991608][T18780] Use struct sctp_assoc_value instead [ 424.020825][T18719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.039671][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.082933][T18719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.140127][T18778] bond0: (slave wlan1): Opening slave failed [ 424.253866][T18719] hsr_slave_0: entered promiscuous mode [ 424.260383][T18719] hsr_slave_1: entered promiscuous mode [ 424.453647][ T5850] Bluetooth: hci4: command tx timeout [ 424.489772][T18794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3520'. [ 424.641680][T18801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.662487][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 424.679758][T18801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.726156][T18806] tipc: Enabled bearer , priority 0 [ 424.733702][T18806] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 424.741604][T18806] tipc: Resetting bearer [ 424.752506][T18806] tipc: Resetting bearer [ 424.774711][ T5850] Bluetooth: hci2: command tx timeout [ 424.848986][T18673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.880754][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 424.898527][T18811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3526'. [ 424.980311][T18673] veth0_vlan: entered promiscuous mode [ 425.006334][T18719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.035974][T18673] veth1_vlan: entered promiscuous mode [ 425.045272][T18719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.061771][T18719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.069975][T18816] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3528'. [ 425.085385][T18719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.085841][T18816] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3528'. [ 425.111343][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3529'. [ 425.167904][T18673] veth0_macvtap: entered promiscuous mode [ 425.222742][T18673] veth1_macvtap: entered promiscuous mode [ 425.243789][T18823] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 425.270656][T18824] netlink: 'syz.1.3530': attribute type 1 has an invalid length. [ 425.319793][T18673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.335770][T18673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.345969][T18673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.357336][T18673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.368679][T18673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.379122][T18673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.402243][T18673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.425041][T18673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.516767][T18673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.541929][T18673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.566892][T18673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.584692][T18673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.607803][T18842] ip6gre2: entered promiscuous mode [ 425.718794][T18719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.789218][T18719] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.956813][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.993120][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.029699][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.036904][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.072027][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.079232][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.096222][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3536'. [ 426.137394][ T8106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.173855][ T8106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.371485][T18874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3541'. [ 426.491910][T18882] sctp: [Deprecated]: syz.4.3543 (pid 18882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.491910][T18882] Use struct sctp_sack_info instead [ 426.533996][ T5850] Bluetooth: hci4: command tx timeout [ 426.539881][T18882] sctp: [Deprecated]: syz.4.3543 (pid 18882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.539881][T18882] Use struct sctp_sack_info instead [ 426.676891][T18719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.798958][T18719] veth0_vlan: entered promiscuous mode [ 426.827365][T18719] veth1_vlan: entered promiscuous mode [ 426.992342][T18898] openvswitch: netlink: Message has 8 unknown bytes. [ 427.059953][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.116087][T18719] veth0_macvtap: entered promiscuous mode [ 427.135404][T18719] veth1_macvtap: entered promiscuous mode [ 427.170875][T18719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.182543][T18719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.199394][T18719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.210846][T18719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.221027][T18719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.231720][T18719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.245776][T18719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.259352][T18719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.270005][T18719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.280608][T18719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.291686][T18719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.303154][T18719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.320612][T18719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.329449][T18719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.339224][T18719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.348752][T18719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.390867][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.462097][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.472804][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.512173][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.531267][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.539476][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.582761][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.715726][ T12] bridge_slave_1: left allmulticast mode [ 427.721404][ T12] bridge_slave_1: left promiscuous mode [ 427.728004][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.740352][ T12] bridge_slave_0: left allmulticast mode [ 427.746540][ T12] bridge_slave_0: left promiscuous mode [ 427.752196][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.094346][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.106165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.117715][ T12] bond0 (unregistering): Released all slaves [ 428.451476][ T12] hsr_slave_0: left promiscuous mode [ 428.459827][ T12] hsr_slave_1: left promiscuous mode [ 428.471638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.481952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.496824][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.506591][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.523493][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.533963][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.542305][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.554840][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.562203][ T12] veth1_macvtap: left promiscuous mode [ 428.570503][ T12] veth0_macvtap: left promiscuous mode [ 428.570524][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.585716][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.587990][ T12] veth1_vlan: left promiscuous mode [ 428.598261][ T12] veth0_vlan: left promiscuous mode [ 429.029907][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.076714][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.480094][T18901] lo speed is unknown, defaulting to 1000 [ 429.489787][T18901] xfrm0 speed is unknown, defaulting to 1000 [ 429.628619][T18901] chnl_net:caif_netlink_parms(): no params data found [ 429.700521][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.708054][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.715996][T18901] bridge_slave_0: entered allmulticast mode [ 429.722767][T18901] bridge_slave_0: entered promiscuous mode [ 429.730892][T18901] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.739050][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.746666][T18901] bridge_slave_1: entered allmulticast mode [ 429.753725][T18901] bridge_slave_1: entered promiscuous mode [ 429.781278][T18901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.792637][T18901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.826698][T18901] team0: Port device team_slave_0 added [ 429.855252][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.872705][T18901] team0: Port device team_slave_1 added [ 429.898842][T18901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.905922][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.932721][T18901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.945171][T18901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.952114][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.978650][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 429.993471][T18901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.031679][T18901] hsr_slave_0: entered promiscuous mode [ 430.038724][T18901] hsr_slave_1: entered promiscuous mode [ 430.045044][T18901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.052635][T18901] Cannot create hsr debugfs directory [ 430.198542][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 430.252401][T18920] netlink: 'syz.1.3548': attribute type 2 has an invalid length. [ 430.263323][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.321592][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 430.450363][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.629476][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.641025][T18940] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 430.658324][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.668857][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.681901][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.691827][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 430.699000][ T5147] Bluetooth: hci2: command tx timeout [ 430.707192][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.709899][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.749753][T18937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3555'. [ 430.819264][T18940] 8021q: adding VLAN 0 to HW filter on device bond13 [ 430.881968][T18942] 8021q: adding VLAN 0 to HW filter on device bond13 [ 430.896519][T18942] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 430.908850][T18942] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 431.012648][T18939] lo speed is unknown, defaulting to 1000 [ 431.045760][T18939] xfrm0 speed is unknown, defaulting to 1000 [ 431.238847][ T12] bridge_slave_1: left allmulticast mode [ 431.259746][ T12] bridge_slave_1: left promiscuous mode [ 431.277047][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.325529][ T12] bridge_slave_0: left allmulticast mode [ 431.353360][ T12] bridge_slave_0: left promiscuous mode [ 431.359166][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.407941][T18976] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 431.424535][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.475974][T18983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3565'. [ 431.765015][T18996] netlink: 'syz.2.3565': attribute type 3 has an invalid length. [ 431.891636][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.907677][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.918575][ T12] bond0 (unregistering): Released all slaves [ 431.955637][T18986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3563'. [ 432.107178][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'. [ 432.260987][T18901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.331355][T18901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.370261][ T12] hsr_slave_0: left promiscuous mode [ 432.383231][ T12] hsr_slave_1: left promiscuous mode [ 432.394156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.411954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.432271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.445150][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.458717][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 432.511230][ T12] veth1_macvtap: left promiscuous mode [ 432.532088][ T12] veth0_macvtap: left promiscuous mode [ 432.554299][ T12] veth1_vlan: left promiscuous mode [ 432.560001][ T12] veth0_vlan: left promiscuous mode [ 432.668144][T19028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.783229][ T5147] Bluetooth: hci4: command tx timeout [ 432.783932][ T5850] Bluetooth: hci2: command tx timeout [ 433.080454][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.126568][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.561970][T18939] chnl_net:caif_netlink_parms(): no params data found [ 433.580570][T18901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.604361][T18901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.701458][T19033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3575'. [ 434.020378][T18939] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.034642][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.046580][T18939] bridge_slave_0: entered allmulticast mode [ 434.065279][T18939] bridge_slave_0: entered promiscuous mode [ 434.096528][T18939] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.117097][T18939] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.130100][T18939] bridge_slave_1: entered allmulticast mode [ 434.137864][T18939] bridge_slave_1: entered promiscuous mode [ 434.257202][T18939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.276986][T19065] netlink: 'syz.4.3580': attribute type 18 has an invalid length. [ 434.287251][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'. [ 434.305091][T18939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.405008][T18939] team0: Port device team_slave_0 added [ 434.430080][T18939] team0: Port device team_slave_1 added [ 434.451831][T19074] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 434.473952][ T26] skbuff: skb_under_panic: text:ffffffff8a83963b len:-1812855336 put:-1812855452 head:ffff88807e61b000 data:ffff887fea6fab5c tail:0x134 end:0x6c0 dev:bond0 [ 434.494957][T19074] bond0: (slave gre0): Error -95 calling set_mac_address [ 434.553541][ T26] ------------[ cut here ]------------ [ 434.559049][ T26] kernel BUG at net/core/skbuff.c:209! [ 434.597042][ T26] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 434.604025][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/1:0 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 434.614614][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.624668][ T26] Workqueue: mld mld_ifc_work [ 434.629375][ T26] RIP: 0010:skb_under_panic+0x14b/0x150 [ 434.634922][ T26] Code: 2e 8d 48 c7 c6 63 5b 4c 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 6a da 62 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 434.654542][ T26] RSP: 0018:ffffc90000a0f490 EFLAGS: 00010286 [ 434.660610][ T26] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 3997c0b68b919900 [ 434.668582][ T26] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 434.676547][ T26] RBP: ffff888028814510 R08: ffffffff81a1358c R09: fffffbfff1d3a69c [ 434.684516][ T26] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 00000000000006c0 [ 434.692487][ T26] R13: ffff88807e61b000 R14: ffff887fea6fab5c R15: 0000000000000134 [ 434.700453][ T26] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 434.709383][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.715963][ T26] CR2: 00007fdbb00d68e5 CR3: 0000000066a2e000 CR4: 00000000003526f0 [ 434.723952][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.731928][ T26] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.739902][ T26] Call Trace: [ 434.743187][ T26] [ 434.746114][ T26] ? __die_body+0x5f/0xb0 [ 434.750459][ T26] ? die+0x9e/0xc0 [ 434.754249][ T26] ? do_trap+0x15a/0x3a0 [ 434.758510][ T26] ? skb_under_panic+0x14b/0x150 [ 434.763455][ T26] ? do_error_trap+0x1dc/0x2c0 [ 434.768216][ T26] ? skb_under_panic+0x14b/0x150 [ 434.773176][ T26] ? __pfx_do_error_trap+0x10/0x10 [ 434.778303][ T26] ? handle_invalid_op+0x34/0x40 [ 434.783244][ T26] ? skb_under_panic+0x14b/0x150 [ 434.788182][ T26] ? exc_invalid_op+0x38/0x50 [ 434.792854][ T26] ? asm_exc_invalid_op+0x1a/0x20 [ 434.797987][ T26] ? __wake_up_klogd+0xcc/0x110 [ 434.802856][ T26] ? skb_under_panic+0x14b/0x150 [ 434.807809][ T26] ? ipgre_header+0x6b/0x290 [ 434.812411][ T26] ? ipgre_header+0x6b/0x290 [ 434.817006][ T26] skb_push+0xe5/0x100 [ 434.821084][ T26] ? __pfx_ipgre_header+0x10/0x10 [ 434.826110][ T26] ipgre_header+0x6b/0x290 [ 434.830530][ T26] ? __pfx_ipgre_header+0x10/0x10 [ 434.835576][ T26] neigh_connected_output+0x27f/0x450 [ 434.840955][ T26] ip6_finish_output2+0x12bc/0x17c0 [ 434.846156][ T26] ? ip6_finish_output2+0x63b/0x17c0 [ 434.851451][ T26] ? __pfx_ip6_finish_output2+0x10/0x10 [ 434.857004][ T26] ? ip6_mtu+0x81/0x3f0 [ 434.861168][ T26] ip6_finish_output+0x41e/0x840 [ 434.866134][ T26] NF_HOOK+0x9e/0x430 [ 434.870113][ T26] ? NF_HOOK+0xfa/0x430 [ 434.874265][ T26] ? __pfx_NF_HOOK+0x10/0x10 [ 434.878853][ T26] ? __pfx_dst_output+0x10/0x10 [ 434.883699][ T26] ? icmp6_dst_alloc+0x3aa/0x420 [ 434.888641][ T26] mld_sendpack+0x843/0xdb0 [ 434.893141][ T26] ? __pfx_mld_newpack+0x10/0x10 [ 434.898078][ T26] ? mld_sendpack+0x1e8/0xdb0 [ 434.902754][ T26] ? __pfx_mld_sendpack+0x10/0x10 [ 434.907782][ T26] mld_ifc_work+0x7d9/0xd90 [ 434.912296][ T26] ? process_scheduled_works+0x9c6/0x18e0 [ 434.918017][ T26] process_scheduled_works+0xabe/0x18e0 [ 434.923574][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.929584][ T26] ? assign_work+0x364/0x3d0 [ 434.934173][ T26] worker_thread+0x870/0xd30 [ 434.938767][ T26] ? __kthread_parkme+0x169/0x1d0 [ 434.943824][ T26] ? __pfx_worker_thread+0x10/0x10 [ 434.948936][ T26] kthread+0x7a9/0x920 [ 434.953004][ T26] ? __pfx_kthread+0x10/0x10 [ 434.957594][ T26] ? __pfx_worker_thread+0x10/0x10 [ 434.962703][ T26] ? __pfx_kthread+0x10/0x10 [ 434.967292][ T26] ? __pfx_kthread+0x10/0x10 [ 434.971896][ T26] ? __pfx_kthread+0x10/0x10 [ 434.976501][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.981737][ T26] ? lockdep_hardirqs_on+0x99/0x150 [ 434.986946][ T26] ? __pfx_kthread+0x10/0x10 [ 434.991558][ T26] ret_from_fork+0x4b/0x80 [ 434.996001][ T26] ? __pfx_kthread+0x10/0x10 [ 435.000599][ T26] ret_from_fork_asm+0x1a/0x30 [ 435.005378][ T26] [ 435.008391][ T26] Modules linked in: [ 435.013519][ T26] ---[ end trace 0000000000000000 ]--- [ 435.023991][ T5850] Bluetooth: hci2: command tx timeout [ 435.029421][ T5850] Bluetooth: hci4: command tx timeout [ 435.038004][ T26] RIP: 0010:skb_under_panic+0x14b/0x150 [ 435.043733][ T26] Code: 2e 8d 48 c7 c6 63 5b 4c 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 6a da 62 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 435.063778][ T26] RSP: 0018:ffffc90000a0f490 EFLAGS: 00010286 [ 435.069852][ T26] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 3997c0b68b919900 [ 435.077844][ T26] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 435.085929][ T26] RBP: ffff888028814510 R08: ffffffff81a1358c R09: fffffbfff1d3a69c [ 435.095376][ T26] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: 00000000000006c0 [ 435.103539][ T26] R13: ffff88807e61b000 R14: ffff887fea6fab5c R15: 0000000000000134 [ 435.111557][ T26] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 435.120559][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.127489][ T26] CR2: 00007fdbaff5e440 CR3: 000000000e938000 CR4: 00000000003526f0 [ 435.135509][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.143635][ T26] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.151639][ T26] Kernel panic - not syncing: Fatal exception [ 435.158056][ T26] Kernel Offset: disabled [ 435.162385][ T26] Rebooting in 86400 seconds..