last executing test programs: 1m5.471902048s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 56.546007448s ago: executing program 3 (id=704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="62daa1f3e2cf89479e33fd2f049c527341db5d1fe6513185a657858336a87de35f384024e8efcb63fd1c7ab1c501e7d3bf3f6118cd35e422445d9e2379dce8592e", 0x41}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x64, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x44, 0x2, @kck="ff2146b7d7fd6a52e2e12cb389e5ee92"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5eaa74a3db59ccc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7e823160bd0b95b614778bdf7a7f42640daf12c7c2e6e7c80b9b2c2f4a5e606f"}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)={0x20, r12, 0x515, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r13, 0x4040942c, &(0x7f0000000500)={0x0, 0x0, [0x0, 0x1, 0x5, 0x9, 0x9, 0x2]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x6, 0x8, {{0x35, 0x4, 0x3, 0x2d, 0xd4, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0xc, [{@local, 0x6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@remote, 0xffff}]}, @ssrr={0x89, 0x17, 0x19, [@dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @rand_addr=0x101, @remote]}, @ssrr={0x89, 0x1f, 0x6b, [@multicast1, @loopback, @multicast2, @broadcast, @loopback, @broadcast, @local]}, @end, @cipso={0x86, 0x56, 0x1, [{0x7, 0x9, "34dc18477b70ed"}, {0x0, 0x2}, {0xf247dc8596a45985, 0x8, "ab7160d7f179"}, {0x2, 0x11, "7b56d3a531e9b8fb977314531debcd"}, {0x7, 0xd, "4a4655d6346b8f700cc958"}, {0x7, 0x5, "6c63a3"}, {0x6, 0xb, "8ebf2cb570be0861db"}, {0x6, 0xf, "a5264c394ff748f982a6fb3e9f"}]}, @generic={0x94, 0x2}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0xf, [{@remote, 0x3d8f}, {@rand_addr=0x64010101, 0xf}]}]}}}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r15, 0x0) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @generic={0x8, 0x8, 0x2, 0x100, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x9f8c, 0xa4, &(0x7f0000000180)=""/164, 0x41100, 0x39, '\x00', r14, 0x25, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) write(r16, &(0x7f0000000480)="144a1cf51f497ed2ccfc0f588cebc0bf65801855ccd121023b7708a2658adf70831f27adf31e98a3b6f48d46b065800202f345ecaeff99b079642cdedcd503e2aca402c02fd26a75270bb20cc3781b17d9a3fbf4b73381c28fe41a4333e12eaeb1a86349839249dba6039560ba07fc", 0x6f) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r17, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x108, 0x300, 0xfeffffff, 0x300, 0x0, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 56.257375322s ago: executing program 3 (id=707): socket$nl_rdma(0x10, 0x3, 0x14) 55.939386483s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 43.026838397s ago: executing program 3 (id=707): socket$nl_rdma(0x10, 0x3, 0x14) 42.243423191s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 33.054412085s ago: executing program 3 (id=707): socket$nl_rdma(0x10, 0x3, 0x14) 30.656268534s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 22.830061685s ago: executing program 1 (id=995): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000900)="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", 0x69d}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b25, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000040)={0x7, 0x6, 0xe, 0x18, 0x4, 0x83, 0x5, 0x3}, &(0x7f00000000c0)={0x9, 0xfe, 0x9, 0xfffffffffffffffd, 0xdc, 0x8000000000000000, 0x8, 0x4}, &(0x7f0000000100)={0x991, 0x80000000, 0xa3, 0x9, 0x5, 0x886, 0x7, 0x5}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) 22.816178941s ago: executing program 3 (id=707): socket$nl_rdma(0x10, 0x3, 0x14) 22.201107811s ago: executing program 1 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0xc}, @preq={0x82, 0x3b, {{}, 0x6, 0x6, 0x6, @device_a, 0x0, @void, 0x4, 0xd1, 0x3, [{{0x1}, @device_a, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x412}, {{0x1}}]}}, @mic={0x8c, 0x18, {0xdf4, "3df3c29f9953", @long="36da34502d41eb8ed1c3555a4099b802"}}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0xc4, 0x8, 0x5, 0x200}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) (rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000000005f31"], &(0x7f0000001f80)=""/226, 0x1b, 0xe2, 0x2, 0x0, 0x0, @void, @value}, 0x20) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe}}) 21.915295775s ago: executing program 1 (id=1001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="020000000200"], 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = socket$isdn(0x22, 0x2, 0x3) close(r7) socket$nl_generic(0x10, 0x3, 0x10) 21.509923437s ago: executing program 1 (id=1006): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000120021b800000000ca23059110000000", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x4000000000000c0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$netrom(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0xa, 0x3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x48, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8c0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r4, 0x0, 0x54, &(0x7f00000004c0)='cg\x9a\xa88\x814\x00\x04j1\xed:SV?\x92\x80rJ.\xd4\f\x93\xf4\x8d5\x03\x00\xf7\f\xb2\x06\x88\xd4\xa0J\x84\x80cA-\xa5\x1bv\xa1 \xec\x00(\\\xbc[\xff\xf72M\xea\f\x12\x01(\xb5\x17\xcd#\x8b\x92\xffV0\x05\xdd4O\xc4\x93\x90\r\xd1\xc0~\xd3\xbf'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) ppoll(&(0x7f0000000200)=[{r9, 0x825f}, {r9, 0x8005}], 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x0) 21.201996542s ago: executing program 1 (id=1010): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000001a40), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bind$can_raw(r2, &(0x7f0000000040), 0x37) (async) close(r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100ff"], 0xc0}}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.01848147s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 10.420699956s ago: executing program 3 (id=707): socket$nl_rdma(0x10, 0x3, 0x14) 9.479055369s ago: executing program 1 (id=1010): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000001a40), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bind$can_raw(r2, &(0x7f0000000040), 0x37) (async) close(r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100ff"], 0xc0}}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.174088857s ago: executing program 4 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x54, 0x2, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ca}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x40805) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000002800)=ANY=[@ANYBLOB='8#\x00\x00', @ANYRES16=r4, @ANYBLOB="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"/9121], 0x2338}, 0x1, 0x0, 0x0, 0x40000840}, 0x80d0) 8.099658449s ago: executing program 4 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20044081, &(0x7f0000000140)={0xa, 0x4e20, 0x95c8, @loopback, 0xb}, 0x1c) recvmmsg(r6, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/17, 0x11}}], 0x1, 0x0, 0x0) 7.72024925s ago: executing program 2 (id=13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="ea6b17ea8864e3c1a0bd5a2ae785cbbc01f1068f", 0x14}, {&(0x7f0000000200)="19739f7fac52218cf2fc8f65b8d98c0f83933c81ac10eace439ec1179e6f6ac1805a7c2d71036c595c9a1d1a0da0902d34fe2e9c1d478316d7778ecd61faf050177f", 0x42}, {&(0x7f0000000380)="a79ac56190c9b80da78998536fde9fe74ae46b7826629c343fbd153a4c9feffd52", 0x21}, {&(0x7f0000000640)="358b3a55301453dd840f0ca83e9ffdfd8e6dfab7613a2e457738c296a2a1f406efdcd844491d21edc31ed3e43a5b315065d6d131907ea2be8f03466e842bbd2851f5c734246c50c98b9611f39f3c", 0x4e}, {0x0}], 0x5}}], 0x1, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xd3, [0x7, 0xffffffff, 0x0, 0x2, 0x7fffffff, 0x5f1], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/211}, &(0x7f0000000000)=0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff9", 0x22, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.473700414s ago: executing program 4 (id=1079): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) 6.354177381s ago: executing program 4 (id=1080): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x5, 0x0, 0x20000071) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x2}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 6.215057332s ago: executing program 4 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000001180)=""/4088, 0xff8}], 0x2}}], 0x1, 0x40002063, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0x5}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d4000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) setsockopt(r3, 0x88, 0x7f, &(0x7f0000000040)="020008000980ffff", 0x8) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000e5ff40001280e383fb", @ANYRES8=r1], 0x68}}, 0xc000) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf25060000006000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d7930000000000000000000000800030000000000140002006970766c616e300000000000000000001400020074756e6c300000000000000000000000340001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001fc000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="333dda2aca00e1ff", @ANYRES32, @ANYBLOB="93831454433929108f6a3ae57aad54a1b6a2af9b760275ba23dc2880d244f21f8fa3dac246eabb5acfa5753ab690a08d84964b5c0cb7a0e52e882a488671eee37e50b8e54e1e4e46f451e0458a6a78eda92efb6019df6fbcfd8e4b8b00e3a0bc1b5d45a818185fac018f54ab08f80bcccc17c88cdc11af6ffed302d4bbfe05c66a8915e83d7ca41f359fe6afbe25bb457f1cea4968b2", @ANYRES16=r9, @ANYBLOB="9dda73d8ba05d2ba0a5c1ac5b78457efd4f88f59", @ANYRES64=0x0], 0x20) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x1ff) sendto$inet(r9, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 5.166840403s ago: executing program 4 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r1, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4a4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x27}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d7}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x68a}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xe38}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x200c0041) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r1, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4a4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x27}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d7}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x68a}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xe38}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x200c0041) (async) 3.644217525s ago: executing program 0 (id=1095): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1a, 0x0, 0x20000000) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.546013191s ago: executing program 0 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4010001000090600001c00000000518eb80c432d3b9cb5a4da0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e640000000010000280040008800800070002000000"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4010001000090600001c00000000518eb80c432d3b9cb5a4da0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e640000000010000280040008800800070002000000"], 0x40}}, 0x0) 3.533589552s ago: executing program 0 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) openat$tun(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.465602216s ago: executing program 0 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0xd4, 0x0, 0x0, 0x2, 0x3379}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x2d, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x20, 0x40, 0xfffffffe, 0x5, {{0x14, 0x4, 0x3, 0x0, 0x50, 0x64, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0x1, [{@multicast2, 0xfff}, {@multicast2, 0xfffffffe}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x787}, {@local, 0xd}, {@multicast1, 0x4}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x8917, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x7, 0x16, &(0x7f0000000080)=""/22, 0x41100, 0x40, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000003c0)={0x0, 0xfffff042}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 977.974991ms ago: executing program 0 (id=1099): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000200), 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "725330451e7753bf"}, 0x10}, 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000200), 0x4) (async) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "725330451e7753bf"}, 0x10}, 0x2}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) (async) 0s ago: executing program 0 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x55, 0x0, r1}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe8e, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRESOCT=r2], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) kernel console output (not intermixed with test programs): f) already exists on: batadv_slave_1 [ 107.684182][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.718089][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.754868][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.786003][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.856882][ T7093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.910399][ T7093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.926095][ T7093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.935498][ T7093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.110058][ T7033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.150045][ T7033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.252491][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.280401][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.435625][ T7534] ax25_connect(): syz.1.509 uses autobind, please contact jreuter@yaina.de [ 108.731714][ T7552] __nla_validate_parse: 70 callbacks suppressed [ 108.731734][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 108.753492][ T7558] netdevsim netdevsim1 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 108.780223][ T7558] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 108.803470][ T7558] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 108.830901][ T7556] pimreg: entered allmulticast mode [ 109.027574][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.517'. [ 109.658660][ T7015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.891631][ T7015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.032362][ T7015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.121848][ T7015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.242352][ T7015] bridge_slave_1: left allmulticast mode [ 110.253502][ T7015] bridge_slave_1: left promiscuous mode [ 110.264659][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.290370][ T7015] bridge_slave_0: left allmulticast mode [ 110.297016][ T7015] bridge_slave_0: left promiscuous mode [ 110.306849][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.420975][ T7643] netlink: 76 bytes leftover after parsing attributes in process `syz.3.528'. [ 110.431180][ T7644] netlink: 'syz.3.528': attribute type 30 has an invalid length. [ 110.441528][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 111.013984][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.045113][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.053647][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.130687][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.146314][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.159272][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.343760][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.357319][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.368995][ T7015] bond0 (unregistering): Released all slaves [ 111.485785][ T7681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.534'. [ 111.640312][ T7692] netlink: 'syz.4.538': attribute type 9 has an invalid length. [ 111.761224][ T7698] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.539'. [ 111.770806][ T7698] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 112.123601][ T7015] hsr_slave_0: left promiscuous mode [ 112.139957][ T7015] hsr_slave_1: left promiscuous mode [ 112.159654][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.177349][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.195446][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.203084][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.233014][ T7015] veth1_macvtap: left promiscuous mode [ 112.242537][ T7015] veth0_macvtap: left promiscuous mode [ 112.248780][ T7015] veth1_vlan: left promiscuous mode [ 112.256192][ T7015] veth0_vlan: left promiscuous mode [ 112.433460][ T7732] netlink: 'syz.0.546': attribute type 11 has an invalid length. [ 112.780057][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 112.819781][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 113.195058][ T5239] Bluetooth: hci4: command tx timeout [ 113.438298][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.549'. [ 113.572253][ T7760] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 113.873760][ T7760] team0: Failed to send options change via netlink (err -105) [ 113.918273][ T7760] team0: Port device ÿÿÿÿ added [ 113.947106][ T7764] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 113.962117][ T7764] team0: Failed to send port change of device ÿÿÿÿ via netlink (err -105) [ 113.977035][ T7780] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.557'. [ 113.992090][ T7764] team0: Failed to send options change via netlink (err -105) [ 113.993675][ T7780] openvswitch: netlink: Multiple metadata blocks provided [ 114.020332][ T7764] team0: Failed to send port change of device ÿÿÿÿ via netlink (err -105) [ 114.046176][ T7764] team0: Port device ÿÿÿÿ removed [ 114.072636][ T7764] bond0: (slave ÿÿÿÿ): Enslaving as an active interface with an up link [ 114.110768][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 114.279570][ T7793] netlink: 'syz.1.559': attribute type 11 has an invalid length. [ 114.308704][ T7793] netlink: 'syz.1.559': attribute type 3 has an invalid length. [ 114.511433][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.520135][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.527915][ T7673] bridge_slave_0: entered allmulticast mode [ 114.536324][ T7673] bridge_slave_0: entered promiscuous mode [ 114.600982][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.618705][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.631755][ T7673] bridge_slave_1: entered allmulticast mode [ 114.641059][ T7673] bridge_slave_1: entered promiscuous mode [ 114.698310][ T7814] netlink: 'syz.4.563': attribute type 19 has an invalid length. [ 114.843589][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.863469][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.932549][ T7828] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 114.983099][ T7673] team0: Port device team_slave_0 added [ 114.992252][ T7673] team0: Port device team_slave_1 added [ 115.089984][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.134272][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.171929][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.231514][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.241522][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.275718][ T5239] Bluetooth: hci4: command tx timeout [ 115.290661][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.478615][ T7860] xt_ecn: cannot match TCP bits for non-tcp packets [ 115.618806][ T7673] hsr_slave_0: entered promiscuous mode [ 115.642511][ T7673] hsr_slave_1: entered promiscuous mode [ 115.651385][ T7673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.666539][ T7673] Cannot create hsr debugfs directory [ 115.702972][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 115.854634][ T7880] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 116.051233][ T7885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'. [ 116.178145][ T7892] x_tables: duplicate underflow at hook 1 [ 116.378324][ T7900] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 116.401041][ T7673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.411245][ T7673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.421356][ T7673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.439225][ T7673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.541303][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.581433][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.595912][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.603093][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.641993][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.649173][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.772853][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.588'. [ 116.783630][ T7915] netlink: 'syz.4.588': attribute type 32 has an invalid length. [ 116.792073][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 116.802790][ T7915] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 116.893455][ T7920] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 116.908700][ T7920] geneve0: entered promiscuous mode [ 116.945472][ T7920] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 116.983705][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.089066][ T7673] veth0_vlan: entered promiscuous mode [ 117.103545][ T7673] veth1_vlan: entered promiscuous mode [ 117.169099][ T7673] veth0_macvtap: entered promiscuous mode [ 117.198277][ T7673] veth1_macvtap: entered promiscuous mode [ 117.229975][ T7929] xt_ecn: cannot match TCP bits for non-tcp packets [ 117.258740][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.269992][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.288954][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.329456][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.349935][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.360362][ T5239] Bluetooth: hci4: command tx timeout [ 117.387930][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.399157][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.410340][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.421584][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.432093][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.443763][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.455027][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.466539][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.479902][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.492808][ T7673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.502187][ T7673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.518280][ T7673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.529034][ T7673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.686768][ T7944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.741838][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.756448][ T7032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.769747][ T7032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.817645][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.826812][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.841992][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 117.919021][ T5239] Bluetooth: hci3: command 0x0401 tx timeout [ 118.548958][ T7969] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 119.033127][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.615'. [ 119.065541][ T7990] TCP: TCP_TX_DELAY enabled [ 119.317342][ T8004] netlink: 104 bytes leftover after parsing attributes in process `syz.4.619'. [ 119.344705][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 119.373118][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 119.453249][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 119.463566][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 120.279034][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.295116][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.304646][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.319677][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.332380][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.340072][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.968519][ T7031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.458301][ T7031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.495134][ T8027] netlink: 96 bytes leftover after parsing attributes in process `syz.3.625'. [ 121.559408][ T8037] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 121.620554][ T8037] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.628'. [ 121.637798][ T8037] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 121.655870][ T7031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.732550][ T7031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.756644][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 121.930826][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.936382][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 121.938268][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.956156][ T8009] bridge_slave_0: entered allmulticast mode [ 121.962807][ T8009] bridge_slave_0: entered promiscuous mode [ 121.993797][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.003895][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.012030][ T8009] bridge_slave_1: entered allmulticast mode [ 122.019760][ T8009] bridge_slave_1: entered promiscuous mode [ 122.063008][ T7031] bridge_slave_1: left allmulticast mode [ 122.073574][ T7031] bridge_slave_1: left promiscuous mode [ 122.081051][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.092151][ T7031] bridge_slave_0: left allmulticast mode [ 122.098717][ T7031] bridge_slave_0: left promiscuous mode [ 122.105267][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.395349][ T5239] Bluetooth: hci4: command tx timeout [ 122.508332][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.523244][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.533850][ T7031] bond0 (unregistering): Released all slaves [ 122.566686][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.586661][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.832370][ T8009] team0: Port device team_slave_0 added [ 122.848271][ T8009] team0: Port device team_slave_1 added [ 122.909029][ T8082] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 122.928755][ T8082] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.640'. [ 122.965841][ T8083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.004109][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.021858][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.055400][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.138160][ T7031] hsr_slave_0: left promiscuous mode [ 123.151375][ T7031] hsr_slave_1: left promiscuous mode [ 123.165908][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.174888][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.182938][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.190615][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.208874][ T7031] veth1_macvtap: left promiscuous mode [ 123.214766][ T7031] veth0_macvtap: left promiscuous mode [ 123.220337][ T7031] veth1_vlan: left promiscuous mode [ 123.227733][ T7031] veth0_vlan: left promiscuous mode [ 123.609784][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 123.652489][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 124.010923][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.021395][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.049682][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.066782][ T8095] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 124.097038][ T8095] geneve0: entered promiscuous mode [ 124.133965][ T8095] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 124.330990][ T8009] hsr_slave_0: entered promiscuous mode [ 124.391227][ T8009] hsr_slave_1: entered promiscuous mode [ 124.410688][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.440281][ T8009] Cannot create hsr debugfs directory [ 124.474789][ T5239] Bluetooth: hci4: command tx timeout [ 124.587559][ T8123] __nla_validate_parse: 3 callbacks suppressed [ 124.587578][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 125.047524][ T8143] netlink: 128 bytes leftover after parsing attributes in process `syz.1.657'. [ 125.096853][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 125.120122][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 125.229572][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 125.253437][ T8009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.275543][ T8009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.298049][ T8009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.325854][ T8009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.492881][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.530207][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.573877][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.581068][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.613548][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.620757][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.736423][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.059604][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 126.122185][ T8188] x_tables: ip_tables: l2tp match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD/OUTPUT [ 126.137445][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.261435][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.405531][ T8210] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.438783][ T8009] veth0_vlan: entered promiscuous mode [ 126.499354][ T8009] veth1_vlan: entered promiscuous mode [ 126.533086][ T8212] SET target dimension over the limit! [ 126.564746][ T5239] Bluetooth: hci4: command tx timeout [ 126.580315][ T8009] veth0_macvtap: entered promiscuous mode [ 126.612642][ T8009] veth1_macvtap: entered promiscuous mode [ 126.630647][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.651801][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.662621][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.682240][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.692826][ T8222] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.682'. [ 126.718862][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.747013][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.781343][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.823119][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.865475][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.884696][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.904735][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.924040][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.954850][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.986805][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.040122][ T8009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.051223][ T8009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.078269][ T8009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.087730][ T8009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.353621][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.384306][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.459312][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.484311][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.576726][ T8277] syzkaller1: entered promiscuous mode [ 127.604282][ T8277] syzkaller1: entered allmulticast mode [ 127.762853][ T8279] macvtap0: entered promiscuous mode [ 127.796038][ T8279] macvtap0: left promiscuous mode [ 127.813146][ T8281] lo speed is unknown, defaulting to 1000 [ 127.819884][ T8281] lo speed is unknown, defaulting to 1000 [ 127.849439][ T8281] lo speed is unknown, defaulting to 1000 [ 127.879890][ T8281] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.901320][ T8281] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.926141][ T8288] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 127.978254][ T8281] lo speed is unknown, defaulting to 1000 [ 128.000456][ T8281] lo speed is unknown, defaulting to 1000 [ 128.010639][ T8281] lo speed is unknown, defaulting to 1000 [ 128.031596][ T8281] lo speed is unknown, defaulting to 1000 [ 128.054045][ T8281] lo speed is unknown, defaulting to 1000 [ 128.106585][ T8295] netlink: 64 bytes leftover after parsing attributes in process `syz.3.701'. [ 128.358295][ T7031] bond0: (slave bond_slave_0): interface is now down [ 128.365839][ T7031] bond0: (slave bond_slave_1): interface is now down [ 128.372547][ T7031] bond0: (slave geneve0): interface is now down [ 128.389669][ T7031] bond0: now running without any active interface! [ 128.527753][ T7003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.656289][ T7003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.788925][ T7003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.062188][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.092129][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.112573][ T7003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.128780][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.140259][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.165522][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.172832][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.253662][ T7003] bridge_slave_1: left allmulticast mode [ 129.261948][ T7003] bridge_slave_1: left promiscuous mode [ 129.267933][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.277963][ T7003] bridge_slave_0: left allmulticast mode [ 129.283639][ T7003] bridge_slave_0: left promiscuous mode [ 129.290451][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.450220][ T7003] dvmrp0 (unregistering): left allmulticast mode [ 129.599018][ T7003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.610799][ T7003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.623417][ T7003] bond0 (unregistering): Released all slaves [ 129.634514][ T7003] bond1 (unregistering): Released all slaves [ 129.647840][ T8323] lo speed is unknown, defaulting to 1000 [ 129.735568][ T8327] netlink: 'syz.4.713': attribute type 16 has an invalid length. [ 129.743630][ T8327] netlink: 'syz.4.713': attribute type 17 has an invalid length. [ 129.768192][ T8327] netlink: 'syz.4.713': attribute type 27 has an invalid length. [ 130.101852][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.133178][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.149619][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.161291][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.177135][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.188518][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.370161][ T8350] lo speed is unknown, defaulting to 1000 [ 130.527525][ T7003] hsr_slave_0: left promiscuous mode [ 130.536249][ T7003] hsr_slave_1: left promiscuous mode [ 130.542425][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.556689][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.566726][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.574592][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.591295][ T7003] veth1_macvtap: left promiscuous mode [ 130.597203][ T7003] veth0_macvtap: left promiscuous mode [ 130.602870][ T7003] veth1_vlan: left promiscuous mode [ 130.611770][ T7003] veth0_vlan: left promiscuous mode [ 131.020591][ T7003] team0 (unregistering): Port device team_slave_1 removed [ 131.058140][ T7003] team0 (unregistering): Port device team_slave_0 removed [ 131.277320][ T5246] Bluetooth: hci2: command tx timeout [ 131.413614][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 131.427223][ T8366] vlan1: entered promiscuous mode [ 131.432293][ T8366] gretap0: entered promiscuous mode [ 131.455213][ T8366] gretap0: left promiscuous mode [ 131.495153][ T8374] bond0: option updelay: invalid value (18446744073709551615) [ 131.503396][ T8374] bond0: option updelay: allowed values 0 - 2147483647 [ 131.559285][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 131.910494][ T8393] can: request_module (can-proto-0) failed. [ 131.966868][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.974001][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.986960][ T8323] bridge_slave_0: entered allmulticast mode [ 131.994007][ T8323] bridge_slave_0: entered promiscuous mode [ 132.045749][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.053378][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.061871][ T8323] bridge_slave_1: entered allmulticast mode [ 132.071185][ T8323] bridge_slave_1: entered promiscuous mode [ 132.109757][ T8350] chnl_net:caif_netlink_parms(): no params data found [ 132.133897][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.150895][ T8409] tipc: Enabling of bearer rejected, already enabled [ 132.168780][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.236748][ T5246] Bluetooth: hci4: command tx timeout [ 132.290370][ T8323] team0: Port device team_slave_0 added [ 132.359064][ T8323] team0: Port device team_slave_1 added [ 132.476103][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.489715][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.517906][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.538882][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.546815][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.555281][ T8350] bridge_slave_0: entered allmulticast mode [ 132.569859][ T8350] bridge_slave_0: entered promiscuous mode [ 132.604013][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.622185][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.648934][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.724594][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.731877][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.739678][ T8350] bridge_slave_1: entered allmulticast mode [ 132.748074][ T8350] bridge_slave_1: entered promiscuous mode [ 132.782501][ T7003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.909741][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.935337][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.966109][ T7003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.981498][ T8323] hsr_slave_0: entered promiscuous mode [ 132.990298][ T8323] hsr_slave_1: entered promiscuous mode [ 132.998213][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.008422][ T8323] Cannot create hsr debugfs directory [ 133.036754][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043273][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.083716][ T8443] IPv6: sit2: Disabled Multicast RS [ 133.237497][ T7003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.289814][ T8350] team0: Port device team_slave_0 added [ 133.316927][ T8350] team0: Port device team_slave_1 added [ 133.355169][ T5246] Bluetooth: hci2: command tx timeout [ 133.704794][ T8447] netlink: 'syz.4.745': attribute type 4 has an invalid length. [ 133.734041][ T7003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.771312][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.779972][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.811348][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.825655][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.833783][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.865656][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.883758][ T8467] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 133.938529][ T8465] netlink: 76 bytes leftover after parsing attributes in process `syz.0.747'. [ 134.039588][ T8470] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 134.048583][ T8470] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.749'. [ 134.063480][ T8350] hsr_slave_0: entered promiscuous mode [ 134.086688][ T8350] hsr_slave_1: entered promiscuous mode [ 134.094352][ T8350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.101959][ T8350] Cannot create hsr debugfs directory [ 134.204016][ T8476] netlink: 'syz.4.752': attribute type 96 has an invalid length. [ 134.316228][ T5246] Bluetooth: hci4: command tx timeout [ 134.368269][ T7003] bridge_slave_1: left allmulticast mode [ 134.394209][ T7003] bridge_slave_1: left promiscuous mode [ 134.399928][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.412718][ T7003] bridge_slave_0: left allmulticast mode [ 134.418543][ T7003] bridge_slave_0: left promiscuous mode [ 134.424329][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.762502][ T7003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.782577][ T7003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.803223][ T7003] bond0 (unregistering): Released all slaves [ 134.837423][ T8481] tipc: Bearer : already 2 bearers with priority 10 [ 134.846185][ T8481] tipc: Bearer : trying with adjusted priority [ 134.853290][ T8481] tipc: Enabling of bearer rejected, failed to enable media [ 135.042770][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 135.412020][ T7003] hsr_slave_0: left promiscuous mode [ 135.435077][ T5246] Bluetooth: hci2: command tx timeout [ 135.442000][ T7003] hsr_slave_1: left promiscuous mode [ 135.449170][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.476187][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.487223][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.497761][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.514498][ T7003] veth1_macvtap: left promiscuous mode [ 135.520082][ T7003] veth0_macvtap: left promiscuous mode [ 135.526017][ T7003] veth1_vlan: left promiscuous mode [ 135.531293][ T7003] veth0_vlan: left promiscuous mode [ 135.933124][ T7003] team0 (unregistering): Port device team_slave_1 removed [ 135.975543][ T7003] team0 (unregistering): Port device team_slave_0 removed [ 136.395911][ T5246] Bluetooth: hci4: command tx timeout [ 137.519762][ T5246] Bluetooth: hci2: command tx timeout [ 137.802852][ T8323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.852993][ T8323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.935282][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'. [ 137.946288][ T8323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.982042][ T8323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.056719][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 138.167534][ T8522] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 138.356449][ T8538] xt_limit: Overflow, try lower: 0/0 [ 138.411647][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.423351][ T8538] syzkaller1: entered promiscuous mode [ 138.450093][ T8538] syzkaller1: entered allmulticast mode [ 138.475248][ T5246] Bluetooth: hci4: command tx timeout [ 138.485576][ T8538] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 138.503659][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.514044][ T8538] tap0: tun_chr_ioctl cmd 1074025681 [ 138.627288][ T8548] netlink: 'syz.1.775': attribute type 27 has an invalid length. [ 138.647032][ T8548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.775'. [ 138.658547][ T8548] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 138.676209][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.683348][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.745323][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.752463][ T7033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.767579][ T8552] netlink: 92 bytes leftover after parsing attributes in process `syz.1.776'. [ 138.799182][ T8350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.837634][ T8350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.872756][ T8350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.941604][ T8350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.123816][ T8565] trusted_key: syz.1.779 sent an empty control message without MSG_MORE. [ 139.141096][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.208659][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.252927][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.260132][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.279845][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.287006][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.372450][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 139.381682][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 139.402080][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 139.426154][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.504569][ T8577] netlink: 56 bytes leftover after parsing attributes in process `syz.4.783'. [ 139.581201][ T8323] veth0_vlan: entered promiscuous mode [ 139.643328][ T8323] veth1_vlan: entered promiscuous mode [ 139.670199][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.784'. [ 139.751344][ T8323] veth0_macvtap: entered promiscuous mode [ 139.789112][ T8323] veth1_macvtap: entered promiscuous mode [ 139.850124][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.870484][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.898637][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.917581][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.960402][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.988974][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.001803][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.017263][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.037694][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.049733][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.062926][ T8595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.112414][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.141758][ T8323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.194706][ T8323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.203460][ T8323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.230919][ T8323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.481321][ T8350] veth0_vlan: entered promiscuous mode [ 140.557628][ T8350] veth1_vlan: entered promiscuous mode [ 140.567337][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.582727][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.692256][ T8350] veth0_macvtap: entered promiscuous mode [ 140.758034][ T8350] veth1_macvtap: entered promiscuous mode [ 140.775075][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.782953][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.833054][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.851427][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.859476][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 140.862064][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.884033][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.896297][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.949705][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.965323][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.984083][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.000946][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.018524][ T8641] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.804'. [ 141.020042][ T8639] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 141.041389][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.052175][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.066631][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.078522][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.090191][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.182782][ T8350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.206283][ T8350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.220172][ T8350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.241527][ T8350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.327537][ T8647] x_tables: duplicate underflow at hook 2 [ 141.412110][ T8651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.425961][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.444749][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.501397][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.516603][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.806132][ T8672] Bluetooth: MGMT ver 1.23 [ 141.901185][ T7031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.018128][ T8678] tipc: Enabling of bearer rejected, failed to enable media [ 142.057149][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.091296][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.288883][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.299913][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.308325][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.323256][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.343911][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.372571][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.383408][ T7031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.501100][ T8692] lo speed is unknown, defaulting to 1000 [ 142.628132][ T7031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.735032][ T7031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.853335][ T8692] chnl_net:caif_netlink_parms(): no params data found [ 142.878086][ T7031] bridge_slave_1: left allmulticast mode [ 142.883787][ T7031] bridge_slave_1: left promiscuous mode [ 142.890504][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.901601][ T7031] bridge_slave_0: left allmulticast mode [ 142.909134][ T7031] bridge_slave_0: left promiscuous mode [ 142.916570][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.189982][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.201359][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.211667][ T7031] bond0 (unregistering): Released all slaves [ 143.268521][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.277839][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.285267][ T8692] bridge_slave_0: entered allmulticast mode [ 143.303677][ T8692] bridge_slave_0: entered promiscuous mode [ 143.312579][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.322069][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.329979][ T8692] bridge_slave_1: entered allmulticast mode [ 143.337375][ T8692] bridge_slave_1: entered promiscuous mode [ 143.383600][ T8692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.401116][ T8692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.457921][ T8692] team0: Port device team_slave_0 added [ 143.471205][ T8692] team0: Port device team_slave_1 added [ 143.499404][ T7031] hsr_slave_0: left promiscuous mode [ 143.505565][ T7031] hsr_slave_1: left promiscuous mode [ 143.511523][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.521610][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.591125][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.599531][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.644029][ T7031] veth1_macvtap: left promiscuous mode [ 143.665514][ T7031] veth0_macvtap: left promiscuous mode [ 143.671236][ T7031] veth1_vlan: left promiscuous mode [ 143.688377][ T8716] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.719524][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.728269][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.732642][ T7031] veth0_vlan: left promiscuous mode [ 143.742887][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.751995][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.766001][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.773346][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.297956][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 144.345478][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 144.476206][ T5246] Bluetooth: hci2: command tx timeout [ 144.770542][ T8724] bridge0: entered promiscuous mode [ 144.777021][ T8724] macvlan4: entered allmulticast mode [ 144.782612][ T8724] bridge0: entered allmulticast mode [ 144.789252][ T8725] __nla_validate_parse: 10 callbacks suppressed [ 144.789269][ T8725] netlink: 52 bytes leftover after parsing attributes in process `syz.1.824'. [ 144.805493][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 144.931155][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.948694][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.978783][ T8692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.993155][ T8692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.001058][ T8692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.062139][ T8692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.124673][ T8717] lo speed is unknown, defaulting to 1000 [ 145.227122][ T8692] hsr_slave_0: entered promiscuous mode [ 145.245490][ T8692] hsr_slave_1: entered promiscuous mode [ 145.251812][ T8692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.267384][ T8692] Cannot create hsr debugfs directory [ 145.661283][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.838'. [ 145.711393][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 145.741369][ T8774] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 145.768307][ T8774] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.838'. [ 145.777014][ T8786] netlink: 'syz.1.841': attribute type 9 has an invalid length. [ 145.807767][ T8786] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.841'. [ 145.834395][ T5246] Bluetooth: hci4: command tx timeout [ 145.852203][ T8788] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.929645][ T7015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.011970][ T8794] netlink: 284 bytes leftover after parsing attributes in process `syz.4.844'. [ 146.077282][ T7015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.133254][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 146.232820][ T7015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.289842][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.315168][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.340938][ T8717] bridge_slave_0: entered allmulticast mode [ 146.366075][ T8717] bridge_slave_0: entered promiscuous mode [ 146.381933][ T8804] xt_NFQUEUE: number of total queues is 0 [ 146.412595][ T7015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.445366][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.462862][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.484972][ T8717] bridge_slave_1: entered allmulticast mode [ 146.502234][ T8717] bridge_slave_1: entered promiscuous mode [ 146.528210][ T8807] netlink: 'syz.4.847': attribute type 29 has an invalid length. [ 146.542634][ T8804] netlink: 'syz.4.847': attribute type 29 has an invalid length. [ 146.555518][ T5246] Bluetooth: hci2: command tx timeout [ 146.582398][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.622270][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.690944][ T8717] team0: Port device team_slave_0 added [ 146.702669][ T8717] team0: Port device team_slave_1 added [ 146.739278][ T8692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.766289][ T8692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.823231][ T8692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.833104][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 146.848677][ T8822] dummy0: entered promiscuous mode [ 146.858994][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.866853][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.909988][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.916595][ T8826] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 146.925362][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.938901][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.967034][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.982991][ T8692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.196592][ T8717] hsr_slave_0: entered promiscuous mode [ 147.209908][ T8717] hsr_slave_1: entered promiscuous mode [ 147.237088][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.246162][ T8717] Cannot create hsr debugfs directory [ 147.331845][ T7015] bridge_slave_1: left allmulticast mode [ 147.349704][ T7015] bridge_slave_1: left promiscuous mode [ 147.364882][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.408342][ T7015] bridge_slave_0: left allmulticast mode [ 147.414036][ T7015] bridge_slave_0: left promiscuous mode [ 147.425037][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.527089][ T8852] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.862'. [ 147.812337][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.823989][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.836334][ T7015] bond0 (unregistering): Released all slaves [ 147.849836][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'. [ 147.863629][ T8855] netlink: 'syz.1.860': attribute type 32 has an invalid length. [ 147.872118][ T8855] (unnamed net_device) (uninitialized): option coupled_control: invalid value (129) [ 147.914800][ T5246] Bluetooth: hci4: command tx timeout [ 148.193990][ T8870] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001 [ 148.199371][ T8871] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 148.242509][ T7015] hsr_slave_0: left promiscuous mode [ 148.249480][ T7015] hsr_slave_1: left promiscuous mode [ 148.258462][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.266022][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.273826][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.282566][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.301053][ T7015] veth1_macvtap: left promiscuous mode [ 148.306670][ T7015] veth0_macvtap: left promiscuous mode [ 148.312246][ T7015] veth1_vlan: left promiscuous mode [ 148.317720][ T7015] veth0_vlan: left promiscuous mode [ 148.648978][ T5246] Bluetooth: hci2: command tx timeout [ 148.741149][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 148.779794][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 149.296495][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.436723][ T8692] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.500814][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.508032][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.537163][ T8896] netlink: 'syz.0.873': attribute type 3 has an invalid length. [ 149.545266][ T8896] netlink: 'syz.0.873': attribute type 3 has an invalid length. [ 149.595338][ T8899] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.645741][ T8692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.664955][ T8692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.686769][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.693894][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.739164][ T8905] netlink: 'syz.4.877': attribute type 3 has an invalid length. [ 149.905840][ T8915] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 149.934248][ T8915] __nla_validate_parse: 5 callbacks suppressed [ 149.934266][ T8915] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.878'. [ 149.959361][ T8915] netlink: 1 bytes leftover after parsing attributes in process `syz.1.878'. [ 149.978124][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.995077][ T5246] Bluetooth: hci4: command tx timeout [ 150.002159][ T8917] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.878'. [ 150.003306][ T8717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.030815][ T8717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.082044][ T8717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.165970][ T8717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.207220][ T8692] veth0_vlan: entered promiscuous mode [ 150.258553][ T8692] veth1_vlan: entered promiscuous mode [ 150.338412][ T8692] veth0_macvtap: entered promiscuous mode [ 150.371022][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.386926][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.417362][ T8717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.427969][ T8717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.439954][ T8692] veth1_macvtap: entered promiscuous mode [ 150.468163][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.475349][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.522575][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.529764][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.612504][ T8692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.652532][ T8692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.657609][ T8946] netlink: 128 bytes leftover after parsing attributes in process `syz.4.884'. [ 150.664930][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.693462][ T8692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.705066][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 150.709228][ T8947] xt_hashlimit: size too large, truncated to 1048576 [ 150.720806][ T5246] Bluetooth: hci2: command tx timeout [ 150.721060][ T8692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.734468][ T8947] xt_hashlimit: max too large, truncated to 1048576 [ 150.736870][ T8692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.743391][ T8947] xt_hashlimit: overflow, try lower: 0/0 [ 150.753453][ T8692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.754638][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.780129][ T8692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.788984][ T8692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.798233][ T8692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.807065][ T8692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.856699][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 150.875888][ T8945] IPv6: sit2: Disabled Multicast RS [ 150.948709][ T8955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.956228][ T8955] IPv6: NLM_F_CREATE should be set when creating new route [ 150.963495][ T8955] IPv6: NLM_F_CREATE should be set when creating new route [ 151.042878][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.112197][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.145827][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.166747][ T8717] veth0_vlan: entered promiscuous mode [ 151.205693][ T7031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.220185][ T8717] veth1_vlan: entered promiscuous mode [ 151.231755][ T7031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.373726][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 151.396333][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 151.629945][ T8717] veth0_macvtap: entered promiscuous mode [ 151.796343][ T8988] Bluetooth: MGMT ver 1.23 [ 151.977891][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 151.991013][ T9006] netlink: 68 bytes leftover after parsing attributes in process `syz.1.899'. [ 151.997816][ T7003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.016022][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.036721][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.047351][ T8717] veth1_macvtap: entered promiscuous mode [ 152.074527][ T5239] Bluetooth: hci4: command tx timeout [ 152.087152][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.097390][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.101306][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.115617][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.125506][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.136085][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.147190][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.147879][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.164068][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.251387][ T7003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.357801][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.368609][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.379465][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.390594][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.429556][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.460978][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.510827][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.568122][ T7003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.602301][ T8717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.614335][ T8717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.629038][ T8717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.661816][ T8717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.681568][ T9003] lo speed is unknown, defaulting to 1000 [ 152.686639][ T9033] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 152.918274][ T7003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.125235][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.141181][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.203295][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.211806][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.245175][ T9056] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20000 [ 153.516285][ T9067] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 153.537131][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 153.548338][ T7003] bridge_slave_1: left allmulticast mode [ 153.554905][ T7003] bridge_slave_1: left promiscuous mode [ 153.574572][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.624611][ T7003] bridge_slave_0: left allmulticast mode [ 153.637776][ T7003] bridge_slave_0: left promiscuous mode [ 153.643691][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.998232][ T7003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.010208][ T7003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.022374][ T7003] bond0 (unregistering): Released all slaves [ 154.212835][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.221087][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.228358][ T9003] bridge_slave_0: entered allmulticast mode [ 154.234917][ T5239] Bluetooth: hci2: command tx timeout [ 154.242894][ T9003] bridge_slave_0: entered promiscuous mode [ 154.253424][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.265961][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.273196][ T9003] bridge_slave_1: entered allmulticast mode [ 154.280821][ T9003] bridge_slave_1: entered promiscuous mode [ 154.329990][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.346743][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.384322][ T9003] team0: Port device team_slave_0 added [ 154.392756][ T9003] team0: Port device team_slave_1 added [ 154.402171][ T7003] hsr_slave_0: left promiscuous mode [ 154.410466][ T7003] hsr_slave_1: left promiscuous mode [ 154.418723][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.426647][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.434675][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.442197][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.459506][ T7003] veth1_macvtap: left promiscuous mode [ 154.465381][ T7003] veth0_macvtap: left promiscuous mode [ 154.470984][ T7003] veth1_vlan: left promiscuous mode [ 154.476435][ T7003] veth0_vlan: left promiscuous mode [ 154.847302][ T7003] team0 (unregistering): Port device team_slave_1 removed [ 154.888836][ T7003] team0 (unregistering): Port device team_slave_0 removed [ 155.199853][ T9093] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 155.339858][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.352232][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.361665][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.372949][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.384435][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.392099][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.513071][ T9100] __nla_validate_parse: 6 callbacks suppressed [ 155.513087][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 155.565062][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.572976][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.601651][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.633939][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.652822][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.678712][ T9105] xt_TCPMSS: Only works on TCP SYN packets [ 155.688500][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.797523][ T9098] lo speed is unknown, defaulting to 1000 [ 155.809141][ T9003] hsr_slave_0: entered promiscuous mode [ 155.817366][ T9003] hsr_slave_1: entered promiscuous mode [ 155.823477][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.834971][ T9003] Cannot create hsr debugfs directory [ 155.836895][ T9108] netlink: 228 bytes leftover after parsing attributes in process `syz.0.925'. [ 155.851971][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 156.067074][ T9112] netlink: 'syz.4.927': attribute type 2 has an invalid length. [ 156.083401][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 156.115150][ T9112] sctp: [Deprecated]: syz.4.927 (pid 9112) Use of int in maxseg socket option. [ 156.115150][ T9112] Use struct sctp_assoc_value instead [ 156.322628][ T5239] Bluetooth: hci2: command tx timeout [ 156.407896][ T7015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.465673][ T9142] lo speed is unknown, defaulting to 1000 [ 156.559827][ T9150] netlink: 'syz.4.935': attribute type 7 has an invalid length. [ 156.574481][ T7015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.589448][ T9150] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.935'. [ 156.638478][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 156.672381][ T7015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.760917][ T9162] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 156.853370][ T7015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.026693][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.054642][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.061916][ T9098] bridge_slave_0: entered allmulticast mode [ 157.084077][ T9098] bridge_slave_0: entered promiscuous mode [ 157.101634][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.116027][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.116519][ T9181] netlink: 'syz.4.944': attribute type 3 has an invalid length. [ 157.123378][ T9098] bridge_slave_1: entered allmulticast mode [ 157.139509][ T9098] bridge_slave_1: entered promiscuous mode [ 157.195342][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.217921][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.242388][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 157.266794][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.345148][ T9098] team0: Port device team_slave_0 added [ 157.376939][ T9098] team0: Port device team_slave_1 added [ 157.416531][ T9003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.430056][ T7015] bridge_slave_1: left allmulticast mode [ 157.436046][ T5239] Bluetooth: hci4: command tx timeout [ 157.443520][ T7015] bridge_slave_1: left promiscuous mode [ 157.449737][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.459838][ T7015] bridge_slave_0: left allmulticast mode [ 157.466681][ T7015] bridge_slave_0: left promiscuous mode [ 157.469028][ T9194] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 157.473280][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.486772][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 157.816725][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.828050][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.842072][ T7015] bond0 (unregistering): Released all slaves [ 157.859024][ T9003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.871997][ T9003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.904494][ T9003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.981415][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.994603][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.052605][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.102419][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.115203][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.122039][ T9213] netlink: 'syz.0.953': attribute type 9 has an invalid length. [ 158.142142][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.168659][ T9213] netlink: 134636 bytes leftover after parsing attributes in process `syz.0.953'. [ 158.239115][ T9213] macvtap0: entered promiscuous mode [ 158.245922][ T9213] macvtap0: entered allmulticast mode [ 158.252060][ T9213] veth0_macvtap: entered allmulticast mode [ 158.340172][ T9219] netlink: 168 bytes leftover after parsing attributes in process `syz.1.956'. [ 158.351476][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 158.394907][ T5239] Bluetooth: hci2: command tx timeout [ 158.419022][ T9098] hsr_slave_0: entered promiscuous mode [ 158.427442][ T9098] hsr_slave_1: entered promiscuous mode [ 158.442106][ T9098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.450064][ T9098] Cannot create hsr debugfs directory [ 158.565146][ T7015] hsr_slave_0: left promiscuous mode [ 158.583171][ T7015] hsr_slave_1: left promiscuous mode [ 158.591540][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.611431][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.658556][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.672364][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.690966][ T7015] veth1_macvtap: left promiscuous mode [ 158.696733][ T7015] veth0_macvtap: left promiscuous mode [ 158.702278][ T7015] veth1_vlan: left promiscuous mode [ 158.707651][ T7015] veth0_vlan: left promiscuous mode [ 159.131756][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 159.169201][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 159.524694][ T5239] Bluetooth: hci4: command tx timeout [ 159.545958][ T9242] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.875959][ T9265] netdevsim netdevsim4 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 159.909408][ T9265] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 159.999037][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.081360][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.100492][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.107654][ T7002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.149794][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.156947][ T7033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.290859][ T9278] xt_CT: No such helper "syz1" [ 160.367988][ T9003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.474534][ T5239] Bluetooth: hci2: command tx timeout [ 160.622689][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.716255][ T9098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.747232][ T9098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.769845][ T9311] __nla_validate_parse: 4 callbacks suppressed [ 160.769864][ T9311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.979'. [ 160.780917][ T9313] netlink: 'syz.4.981': attribute type 3 has an invalid length. [ 160.785499][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.793360][ T9313] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.981'. [ 160.813010][ T9098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.825358][ T9098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.845614][ T9003] veth0_vlan: entered promiscuous mode [ 160.875036][ T9003] veth1_vlan: entered promiscuous mode [ 160.920041][ T9003] veth0_macvtap: entered promiscuous mode [ 160.947574][ T9003] veth1_macvtap: entered promiscuous mode [ 160.980812][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.993991][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.006668][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.032017][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.049218][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.059459][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.070203][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.082397][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.098547][ T9003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.111135][ T9003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.121713][ T9003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.131017][ T9003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.169272][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.246330][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.302341][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.309534][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.326965][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.329425][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.341993][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.344458][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.418900][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.443846][ T9329] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 161.464957][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.595710][ T5239] Bluetooth: hci4: command tx timeout [ 161.746617][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 161.777484][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.790273][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 161.877440][ T9348] netlink: 'syz.4.993': attribute type 3 has an invalid length. [ 161.915405][ T9348] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 161.940205][ T9348] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.993'. [ 162.016916][ T7030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.060164][ T9098] veth0_vlan: entered promiscuous mode [ 162.115762][ T7030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.133687][ T9098] veth1_vlan: entered promiscuous mode [ 162.170272][ T9098] veth0_macvtap: entered promiscuous mode [ 162.182627][ T9098] veth1_macvtap: entered promiscuous mode [ 162.208095][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.224612][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.236003][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.249684][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.261179][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.275590][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.286219][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.296589][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.307174][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.317418][ T9098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.328435][ T9098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.339395][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.351404][ T9098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.360632][ T9098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.369409][ T9098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.378565][ T9098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.440156][ T7030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.472146][ T7032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.482463][ T7032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.517576][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.526880][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.581124][ T9358] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 162.932726][ T9371] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.009276][ T7030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.123032][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.137301][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.148244][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.156313][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.164104][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.175723][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.310464][ T9381] lo speed is unknown, defaulting to 1000 [ 163.439938][ T9391] xt_CT: No such helper "snmp" [ 163.573929][ T7030] bridge_slave_1: left allmulticast mode [ 163.589720][ T7030] bridge_slave_1: left promiscuous mode [ 163.609402][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.636790][ T7030] bridge_slave_0: left allmulticast mode [ 163.652811][ T7030] bridge_slave_0: left promiscuous mode [ 163.673243][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.029572][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.048393][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.062833][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.072580][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.087200][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.097075][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.207736][ T7030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.218687][ T7030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.229531][ T7030] bond0 (unregistering): Released all slaves [ 164.246602][ T9400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.253860][ T9400] IPv6: NLM_F_CREATE should be set when creating new route [ 164.279217][ T9381] chnl_net:caif_netlink_parms(): no params data found [ 164.381695][ T9402] lo speed is unknown, defaulting to 1000 [ 164.412197][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.420730][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.428258][ T9381] bridge_slave_0: entered allmulticast mode [ 164.435632][ T9381] bridge_slave_0: entered promiscuous mode [ 164.454295][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.461493][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.471649][ T9381] bridge_slave_1: entered allmulticast mode [ 164.479422][ T9381] bridge_slave_1: entered promiscuous mode [ 164.527125][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.541894][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.592941][ T9381] team0: Port device team_slave_0 added [ 164.602618][ T7030] hsr_slave_0: left promiscuous mode [ 164.610258][ T7030] hsr_slave_1: left promiscuous mode [ 164.618973][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.626537][ T7030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.635528][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.642954][ T7030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.661805][ T7030] veth1_macvtap: left promiscuous mode [ 164.667490][ T7030] veth0_macvtap: left promiscuous mode [ 164.673103][ T7030] veth1_vlan: left promiscuous mode [ 164.678503][ T7030] veth0_vlan: left promiscuous mode [ 165.214762][ T7030] team0 (unregistering): Port device team_slave_1 removed [ 165.229966][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.246877][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.263006][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.265358][ T7030] team0 (unregistering): Port device team_slave_0 removed [ 165.277614][ T5246] Bluetooth: hci2: command tx timeout [ 165.285140][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.292884][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.310295][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.660024][ T9381] team0: Port device team_slave_1 added [ 165.770054][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.778210][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.806180][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.828898][ T9418] lo speed is unknown, defaulting to 1000 [ 165.854966][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.869265][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.896884][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.919690][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 166.053536][ T9381] hsr_slave_0: entered promiscuous mode [ 166.066804][ T9381] hsr_slave_1: entered promiscuous mode [ 166.081394][ T9381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.089467][ T9381] Cannot create hsr debugfs directory [ 166.096669][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 166.155702][ T5246] Bluetooth: hci3: command tx timeout [ 166.371708][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.389939][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.406232][ T9402] bridge_slave_0: entered allmulticast mode [ 166.423445][ T9402] bridge_slave_0: entered promiscuous mode [ 166.511780][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 166.552558][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.560251][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.567525][ T9402] bridge_slave_1: entered allmulticast mode [ 166.574540][ T9402] bridge_slave_1: entered promiscuous mode [ 166.678540][ T7014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.809370][ T7014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.830240][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 166.843096][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.856660][ T9451] netlink: 'syz.0.1022': attribute type 11 has an invalid length. [ 166.857412][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.874049][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 167.030347][ T7014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.043857][ T9460] x_tables: ip_tables: ah match: only valid for protocol 51 [ 167.105892][ T9402] team0: Port device team_slave_0 added [ 167.145976][ T7014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.162312][ T9402] team0: Port device team_slave_1 added [ 167.275521][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.282516][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.311061][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.325287][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.332264][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.363969][ T5246] Bluetooth: hci4: command tx timeout [ 167.364002][ T5239] Bluetooth: hci2: command tx timeout [ 167.372818][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.399680][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.407760][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.415635][ T9418] bridge_slave_0: entered allmulticast mode [ 167.422854][ T9418] bridge_slave_0: entered promiscuous mode [ 167.432410][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.441257][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.448790][ T9418] bridge_slave_1: entered allmulticast mode [ 167.455847][ T9418] bridge_slave_1: entered promiscuous mode [ 167.523190][ T9402] hsr_slave_0: entered promiscuous mode [ 167.531272][ T9402] hsr_slave_1: entered promiscuous mode [ 167.540646][ T9402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.548517][ T9402] Cannot create hsr debugfs directory [ 167.666862][ T7014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.713653][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.732201][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.758427][ T9478] lo speed is unknown, defaulting to 1000 [ 167.793374][ T7014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.837128][ T9381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.881256][ T7014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.897598][ T9381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.919158][ T9418] team0: Port device team_slave_0 added [ 167.926471][ T9381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.958994][ T9418] team0: Port device team_slave_1 added [ 167.971412][ T9381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.993510][ T7014] bond0: (slave ÿÿÿÿ): Releasing backup interface [ 168.003261][ T7014] netdevsim netdevsim1 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.074860][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.081811][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.138050][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.153046][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.160748][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.187929][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.234709][ T5246] Bluetooth: hci3: command tx timeout [ 168.278022][ T9418] hsr_slave_0: entered promiscuous mode [ 168.287266][ T9418] hsr_slave_1: entered promiscuous mode [ 168.293353][ T9418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.302934][ T9418] Cannot create hsr debugfs directory [ 168.494596][ T7014] bridge_slave_1: left allmulticast mode [ 168.500314][ T7014] bridge_slave_1: left promiscuous mode [ 168.506624][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.516057][ T7014] bridge_slave_0: left allmulticast mode [ 168.521732][ T7014] bridge_slave_0: left promiscuous mode [ 168.528762][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.549443][ T7014] bridge_slave_1: left allmulticast mode [ 168.564220][ T7014] bridge_slave_1: left promiscuous mode [ 168.569946][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.599171][ T7014] bridge_slave_0: left allmulticast mode [ 168.614184][ T7014] bridge_slave_0: left promiscuous mode [ 168.619911][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.245356][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.258567][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.269462][ T7014] bond0 (unregistering): Released all slaves [ 169.296097][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.306493][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.320422][ T7014] bond0 (unregistering): Released all slaves [ 169.420667][ T7014] bond1 (unregistering): Released all slaves [ 169.432190][ T7014] bond2 (unregistering): Released all slaves [ 169.438456][ T5246] Bluetooth: hci2: command tx timeout [ 169.444418][ T5246] Bluetooth: hci4: command tx timeout [ 169.450587][ T7014] bond3 (unregistering): Released all slaves [ 169.685198][ T7014] tipc: Left network mode [ 169.780060][ T9518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.848412][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.947375][ T9381] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.007909][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.015087][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.073850][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.081051][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.319824][ T5246] Bluetooth: hci3: command tx timeout [ 170.354472][ T9402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.365949][ T9402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.437273][ T9402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.477125][ T9402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.507988][ T7014] hsr_slave_0: left promiscuous mode [ 170.519084][ T7014] hsr_slave_1: left promiscuous mode [ 170.528422][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.536949][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.560839][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.570555][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.580955][ T9540] sctp: [Deprecated]: syz.4.1044 (pid 9540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.580955][ T9540] Use struct sctp_sack_info instead [ 170.601509][ T7014] hsr_slave_0: left promiscuous mode [ 170.610778][ T7014] hsr_slave_1: left promiscuous mode [ 170.620502][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.628666][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.651480][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.659512][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.697859][ T7014] veth1_macvtap: left promiscuous mode [ 170.703505][ T7014] veth0_macvtap: left promiscuous mode [ 170.709278][ T7014] veth1_vlan: left promiscuous mode [ 170.716702][ T7014] veth0_vlan: left promiscuous mode [ 170.722921][ T7014] dummy0: left promiscuous mode [ 170.728855][ T7014] veth1_macvtap: left promiscuous mode [ 170.734613][ T7014] veth0_macvtap: left promiscuous mode [ 171.157746][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 171.200349][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 171.514564][ T5239] Bluetooth: hci2: command tx timeout [ 171.522996][ T5246] Bluetooth: hci4: command tx timeout [ 171.782376][ T7014] team0 (unregistering): Port device team_slave_1 removed [ 171.820968][ T7014] team0 (unregistering): Port device team_slave_0 removed [ 172.282296][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.404392][ T5246] Bluetooth: hci3: command tx timeout [ 172.504897][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 172.535317][ T9381] veth0_vlan: entered promiscuous mode [ 172.573873][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.643167][ T9381] veth1_vlan: entered promiscuous mode [ 172.681116][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.732212][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.739395][ T7002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.771250][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.778412][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.794558][ T9418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.803727][ T9418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.840015][ T9558] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 172.852654][ T9418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.870122][ T9418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.989415][ T9381] veth0_macvtap: entered promiscuous mode [ 173.027053][ T9381] veth1_macvtap: entered promiscuous mode [ 173.045326][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.057588][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.068372][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.080500][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.130578][ T9381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.140395][ T9381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.149710][ T9381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.158533][ T9381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.326404][ T9579] IPv6: sit4: Disabled Multicast RS [ 173.463099][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.485355][ T7030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.510311][ T7030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.547479][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.568781][ T7003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.578431][ T7003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.588548][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.607253][ T5246] Bluetooth: hci4: command tx timeout [ 173.716401][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 173.735668][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.742937][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.794717][ T9596] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 173.815445][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.822571][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.888791][ T9402] veth0_vlan: entered promiscuous mode [ 173.912077][ T9402] veth1_vlan: entered promiscuous mode [ 173.978091][ T9402] veth0_macvtap: entered promiscuous mode [ 174.012370][ T9402] veth1_macvtap: entered promiscuous mode [ 174.052757][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.054862][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 174.098488][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.126538][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.149788][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.163916][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.178498][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.189674][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.201004][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.233253][ T9402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.247757][ T9402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.267233][ T9402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.281001][ T9402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.431747][ T7031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.515979][ T7031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.541681][ T7002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.550173][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.553550][ T7002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.589384][ T7003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.598948][ T7003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.664583][ T7031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.729204][ T7031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.748567][ T9418] veth0_vlan: entered promiscuous mode [ 174.765638][ T9418] veth1_vlan: entered promiscuous mode [ 174.801596][ T9418] veth0_macvtap: entered promiscuous mode [ 174.810716][ T9418] veth1_macvtap: entered promiscuous mode [ 174.824953][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.836658][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.850011][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.860475][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.873640][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.913840][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.931423][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.942622][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.953536][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.964053][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.974953][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.998201][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.007559][ T9621] netlink: 'syz.4.1065': attribute type 2 has an invalid length. [ 175.038522][ T9418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.067903][ T9418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.083277][ T9418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.108680][ T9418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.135128][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 175.206652][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 175.260613][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.284402][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.300581][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.303162][ T7031] bridge_slave_1: left allmulticast mode [ 175.314913][ T7031] bridge_slave_1: left promiscuous mode [ 175.320743][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.330426][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.340180][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.357796][ T7031] bridge_slave_0: left allmulticast mode [ 175.358740][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.363457][ T7031] bridge_slave_0: left promiscuous mode [ 175.363615][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.767167][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.777244][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.786420][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.823848][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.835263][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.843184][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.927735][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.941018][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.952656][ T7031] bond0 (unregistering): Released all slaves [ 176.076046][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 176.191042][ T9637] lo speed is unknown, defaulting to 1000 [ 176.199545][ T9627] lo speed is unknown, defaulting to 1000 [ 176.205684][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.213523][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.260765][ T9647] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 176.277152][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.285608][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.543439][ T7031] hsr_slave_0: left promiscuous mode [ 176.552903][ T7031] hsr_slave_1: left promiscuous mode [ 176.567868][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.575473][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.583452][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.591781][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.613987][ T7031] veth1_macvtap: left promiscuous mode [ 176.619900][ T7031] veth0_macvtap: left promiscuous mode [ 176.625932][ T7031] veth1_vlan: left promiscuous mode [ 176.631370][ T7031] veth0_vlan: left promiscuous mode [ 177.073739][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 177.120732][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 177.437980][ T5246] Bluetooth: hci2: command tx timeout [ 177.489377][ T9659] unknown channel width for channel at 909000KHz? [ 177.653240][ T9637] chnl_net:caif_netlink_parms(): no params data found [ 177.719732][ T9627] chnl_net:caif_netlink_parms(): no params data found [ 177.788632][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.796721][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.803898][ T9637] bridge_slave_0: entered allmulticast mode [ 177.810639][ T9637] bridge_slave_0: entered promiscuous mode [ 177.818821][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.826028][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.833175][ T9637] bridge_slave_1: entered allmulticast mode [ 177.840316][ T9637] bridge_slave_1: entered promiscuous mode [ 177.886981][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.897705][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.905894][ T9627] bridge_slave_0: entered allmulticast mode [ 177.912445][ T9627] bridge_slave_0: entered promiscuous mode [ 177.918434][ T5246] Bluetooth: hci3: command tx timeout [ 177.928735][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.940626][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.957830][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.965299][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.972565][ T9627] bridge_slave_1: entered allmulticast mode [ 177.979881][ T9627] bridge_slave_1: entered promiscuous mode [ 178.012612][ T9637] team0: Port device team_slave_0 added [ 178.022707][ T9637] team0: Port device team_slave_1 added [ 178.031788][ T9627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.043915][ T9627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.099842][ T7031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.123330][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.130956][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.160189][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.177004][ T9627] team0: Port device team_slave_0 added [ 178.183460][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.190838][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.235223][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.270420][ T9627] team0: Port device team_slave_1 added [ 178.376640][ T7031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.420141][ T9683] netlink: 'syz.4.1080': attribute type 4 has an invalid length. [ 178.458706][ T9637] hsr_slave_0: entered promiscuous mode [ 178.477515][ T9637] hsr_slave_1: entered promiscuous mode [ 178.484353][ T9637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.492179][ T9637] Cannot create hsr debugfs directory [ 178.504948][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.511910][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.544843][ T9627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.558308][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.568218][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.577381][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.591232][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.605025][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.613392][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.613991][ T7031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.702189][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.707169][ T9693] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1083'. [ 178.709560][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.721642][ T9693] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 178.746338][ T9627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.822449][ T7031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.842837][ T9627] hsr_slave_0: entered promiscuous mode [ 178.850770][ T9627] hsr_slave_1: entered promiscuous mode [ 178.857006][ T9627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.864651][ T9627] Cannot create hsr debugfs directory [ 178.911129][ T9687] lo speed is unknown, defaulting to 1000 [ 179.117823][ T7031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.223630][ T7031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.248479][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 179.264486][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1086'. [ 179.317308][ T7031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.342197][ T9687] chnl_net:caif_netlink_parms(): no params data found [ 179.409925][ T7031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.514530][ T5238] Bluetooth: hci2: command tx timeout [ 179.521364][ T9687] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.538166][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.568740][ T9687] bridge_slave_0: entered allmulticast mode [ 179.586121][ T9687] bridge_slave_0: entered promiscuous mode [ 179.595438][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.603801][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.611791][ T9687] bridge_slave_1: entered allmulticast mode [ 179.619384][ T9687] bridge_slave_1: entered promiscuous mode [ 179.653615][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.693344][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.731842][ T7031] bridge_slave_1: left allmulticast mode [ 179.743672][ T7031] bridge_slave_1: left promiscuous mode [ 179.749580][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.762024][ T7031] bridge_slave_0: left allmulticast mode [ 179.768223][ T7031] bridge_slave_0: left promiscuous mode [ 179.774024][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.786632][ T7031] bridge_slave_1: left allmulticast mode [ 179.792435][ T7031] bridge_slave_1: left promiscuous mode [ 179.798528][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.807425][ T7031] bridge_slave_0: left allmulticast mode [ 179.813102][ T7031] bridge_slave_0: left promiscuous mode [ 179.819383][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.004773][ T5238] Bluetooth: hci3: command tx timeout [ 180.412165][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.426575][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.438813][ T7031] bond0 (unregistering): Released all slaves [ 180.540705][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.557258][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.567704][ T7031] bond0 (unregistering): Released all slaves [ 180.638725][ T5238] Bluetooth: hci4: command tx timeout [ 180.646779][ T9728] netlink: 'syz.0.1093': attribute type 5 has an invalid length. [ 180.670931][ T9687] team0: Port device team_slave_0 added [ 180.723387][ T9687] team0: Port device team_slave_1 added [ 180.799444][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'. [ 180.818004][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.826463][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.853209][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.907974][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.919242][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.951680][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.072712][ T9687] hsr_slave_0: entered promiscuous mode [ 181.079503][ T9687] hsr_slave_1: entered promiscuous mode [ 181.089589][ T9687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.098538][ T9687] Cannot create hsr debugfs directory [ 181.269550][ T7031] hsr_slave_0: left promiscuous mode [ 181.276333][ T7031] hsr_slave_1: left promiscuous mode [ 181.282173][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.293790][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.301558][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.309398][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.319569][ T7031] hsr_slave_0: left promiscuous mode [ 181.329532][ T7031] hsr_slave_1: left promiscuous mode [ 181.595158][ T5238] Bluetooth: hci2: command tx timeout [ 181.855589][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.874252][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.074464][ T5238] Bluetooth: hci3: command tx timeout [ 182.105071][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.112508][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.139471][ T7031] veth1_macvtap: left promiscuous mode [ 182.145703][ T7031] veth0_macvtap: left promiscuous mode [ 182.151248][ T7031] veth1_vlan: left promiscuous mode [ 182.156816][ T7031] veth0_vlan: left promiscuous mode [ 182.163199][ T7031] veth1_macvtap: left promiscuous mode [ 182.172650][ T7031] veth0_macvtap: left promiscuous mode [ 182.178314][ T7031] veth1_vlan: left promiscuous mode [ 182.183560][ T7031] veth0_vlan: left promiscuous mode [ 182.619101][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 182.658904][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 182.724441][ T5238] Bluetooth: hci4: command tx timeout [ 183.273966][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 183.313277][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 183.684507][ T5238] Bluetooth: hci2: command tx timeout [ 184.158664][ T5238] Bluetooth: hci3: command tx timeout [ 185.017050][ T5238] Bluetooth: hci4: command tx timeout [ 208.914682][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.926166][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.794387][ T5238] Bluetooth: hci4: command tx timeout [ 216.314145][ C1] sched: DL replenish lagged too much [ 267.826682][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.835679][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 299.175824][ T4620] Bluetooth: hci2: command 0x0406 tx timeout [ 299.181939][ T4620] Bluetooth: hci3: command 0x0406 tx timeout [ 315.650754][ T4620] Bluetooth: hci4: command 0x0406 tx timeout [ 324.906146][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.915264][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.448130][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.372324][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.493753][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.561682][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.573498][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.222553][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.290374][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.927737][ T5238] Bluetooth: hci1: Opcode 0x1009 failed: -110 [ 342.937742][ T9758] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 343.021951][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.039252][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.053708][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.089961][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.100699][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.145418][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.152532][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.163273][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.458286][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.932826][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.012500][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.509929][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.724607][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.736407][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.277471][ T5232] Bluetooth: hci5: command tx timeout [ 346.725920][ T5232] Bluetooth: hci6: command tx timeout [ 347.009945][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.064104][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.090584][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.102756][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.118444][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.136031][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.704252][ T5246] Bluetooth: hci5: command tx timeout [ 348.837072][ T5246] Bluetooth: hci6: command tx timeout [ 350.734728][ T5246] Bluetooth: hci5: command tx timeout [ 350.945248][ T5246] Bluetooth: hci6: command tx timeout [ 356.729224][ T30] INFO: task syz-executor:9627 blocked for more than 146 seconds. [ 356.739997][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 357.775596][ T5246] Bluetooth: hci5: command tx timeout [ 357.784584][ T5238] Bluetooth: hci6: command tx timeout [ 358.396780][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.205865][ T30] task:syz-executor state:D stack:21728 pid:9627 tgid:9627 ppid:1 flags:0x00000004 [ 362.242226][ T30] Call Trace: [ 362.298387][ T30] [ 362.301379][ T30] __schedule+0x1895/0x4b30 [ 362.358156][ T30] ? __pfx___schedule+0x10/0x10 [ 362.498231][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.503330][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 363.317937][ T30] ? schedule+0x90/0x320 [ 363.322432][ T30] schedule+0x14b/0x320 [ 363.924686][ T30] schedule_preempt_disabled+0x13/0x30 [ 363.930229][ T30] __mutex_lock+0x6a7/0xd70 [ 364.296912][ T30] ? __mutex_lock+0x52a/0xd70 [ 364.301654][ T30] ? new_device_store+0x1b4/0x890 [ 364.447844][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.452952][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 364.507401][ T30] new_device_store+0x1b4/0x890 [ 364.512322][ T30] ? kernfs_fop_write_iter+0x1ea/0x500 [ 364.718220][ T30] ? __pfx_new_device_store+0x10/0x10 [ 364.723676][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 364.777286][ T30] ? bus_attr_store+0x4f/0xa0 [ 364.782032][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 364.824719][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 364.830079][ T30] vfs_write+0xa6d/0xc90 [ 365.177669][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 365.183555][ T30] ? __pfx_vfs_write+0x10/0x10 [ 365.404315][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 365.409248][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.623748][ T30] ? __pfx_call_rcu+0x10/0x10 [ 365.787258][ T30] ? fdget_pos+0x265/0x320 [ 365.791755][ T30] ksys_write+0x183/0x2b0 [ 365.847501][ T30] ? __pfx_ksys_write+0x10/0x10 [ 365.852430][ T30] ? do_syscall_64+0x100/0x230 [ 365.921261][ T30] ? do_syscall_64+0xb6/0x230 [ 365.938169][ T30] do_syscall_64+0xf3/0x230 [ 365.942740][ T30] ? clear_bhb_loop+0x35/0x90 [ 366.064964][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.070941][ T30] RIP: 0033:0x7f6cd2f7cadf [ 366.205410][ T30] RSP: 002b:00007ffe14a955e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 366.213900][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6cd2f7cadf [ 366.437944][ T30] RDX: 0000000000000003 RSI: 00007ffe14a95630 RDI: 0000000000000005 [ 366.477194][ T30] RBP: 00007f6cd2ff13d2 R08: 0000000000000000 R09: 00007ffe14a95437 [ 366.525213][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.706118][ T30] R13: 00007ffe14a95630 R14: 00007f6cd3c64620 R15: 0000000000000003