last executing test programs: 1m7.679728012s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 54.340904987s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 52.643936429s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 42.555683388s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 40.991740251s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 31.200007925s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 30.294952421s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 19.876164696s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 18.92889976s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 9.122769924s ago: executing program 2 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 7.38673924s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5.052161371s ago: executing program 4 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x31}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.508200288s ago: executing program 0 (id=2923): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x87c0, 0x9, 0x0, {{0x26, 0x4, 0x0, 0x14, 0x98, 0x66, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x44, 0x8, "fdbbc0675e8f"}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0xb5, 0x3, 0x6, [{@local, 0x8}, {@local, 0x80000000}, {@private=0xa010102, 0x2}, {@empty, 0xb}]}, @noop, @rr={0x7, 0x1f, 0xbe, [@dev={0xac, 0x14, 0x14, 0x26}, @local, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast]}, @generic={0x89, 0x6, "abb70e0b"}, @timestamp_prespec={0x44, 0x2c, 0x1a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@broadcast}, {@private=0xa010100, 0x8c}, {@loopback, 0x400}, {@empty, 0x40}]}]}}}}}) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e22, 0xfffe, 0x4e24, 0x0, 0x2, 0x20, 0xa0, 0x87, r1, r2}, {0xffffffff7fffffff, 0x5, 0x1, 0x16d, 0x0, 0x9, 0x3, 0x7fffffff}, {0x10000, 0x8001}, 0x3fb2, 0x6e6bb7, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d3, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3505, 0x2, 0x1, 0x1, 0x5, 0x7ff, 0x9927}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x46, "1ab7510ebcc4224dd0136c028556bd9127292aceb56d336e00d3c4c8eda91d9d590f3022cd6b90c6882830b79f80a2f3c7bc67146ef8ea35323e94b889f3fa0358e5c70ad55d"}, &(0x7f0000000100)=0x4e) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r7, 0x9}, &(0x7f0000000180)=0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x54, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x54}}, 0x0) 1.188104227s ago: executing program 3 (id=2924): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x0, 0x4, &(0x7f0000000080)='fou\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x21, 0x0, &(0x7f0000003c00)) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$FOU_CMD_GET(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 1.071445191s ago: executing program 0 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14}]}}}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14}]}}}]}, 0x60}}, 0x0) (async) 999.934912ms ago: executing program 3 (id=2928): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_pedit={0xf0, 0x6, 0x0, 0x0, {{0xa}, {0x4}, {0xc3, 0x6, "f5d6f473e66d2692cd2339ca58266021ebb69b618207f41cefa2e452f14c6f87b949bc1e010d9195433ad85c7e65636f2d514288496900a322c6c0f96cd71ff38286ca9a664050f76819bbcfb1a16035082a3c46ebf3a3765c5058631f3f59c7d09795824b21d97a8385fb0d08ed6ea310212935c8424ef712473debfb3752d1c718096d9667831c04b747949f6b22db11c6ccd223c1a28c21f3578ccfb69fb093341d1d5e508d043dfc206951b0da40231ecbe38f8642a1a907261c5a1d02"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x108}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x30}}, 0x4010) 976.74576ms ago: executing program 1 (id=2929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xc}, {0xffe0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1b0, 0x2, [@TCA_ROUTE4_ACT={0x194, 0x6, [@m_vlan={0xc8, 0xc, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x79, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63ee91d436d5e5274cf2315f3b29b8d213540cd7f7d65f7d0ff8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xc8, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x81, 0x1238a420b501100d, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xc71, 0x2, 0x2, 0x5d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x479, 0x7, 0x5, 0xc, 0x3b9}}]}, {0x51, 0x6, "1f0e42743fd4de959d8095ee21c5b98a848927401be89d82100500000000000000ae67026b1864b8470ccc5d77f30a84717dc2983d0cdd4a71b0ec050713f8c92117adde36f8aeaeeca8af0000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 895.15279ms ago: executing program 3 (id=2930): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000008) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001f"], 0x28}], 0x1}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) close(r4) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r6 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r4, r6, 0x0, 0x7fff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0xfffffffd, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x44845}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113900000000008510353802000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000026bd7000fcdbdf250a0000000c000600030000000300000008000300", @ANYRES32=r9, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=r10, @ANYBLOB="060009000300000006000900feff000008000300", @ANYRES32=r11, @ANYBLOB="0c0006e90100000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x8000040) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x12, &(0x7f0000000080)=0xf, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) 783.853974ms ago: executing program 0 (id=2931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) (async) bind$alg(r1, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) (async) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000008d52b4b016a9bbb008000300", @ANYRES32=r5, @ANYBLOB="060066008e8800000a0006"], 0x4c}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x21) getpeername$inet6(r0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 763.184806ms ago: executing program 3 (id=2932): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)=0x1) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3f25, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3f25, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x3, 0xed, {{0x32, 0x4, 0x1, 0x5, 0xc8, 0x64, 0x0, 0x7a, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x13, 0xbb, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast]}, @cipso={0x86, 0x4f, 0x1, [{0x5, 0xb, "b4d4a0442e8913a61a"}, {0x2, 0xf, "ca1ac737fd576205828c174535"}, {0x2, 0x2}, {0x7, 0x4, "fec9"}, {0x0, 0x8, "c5b9bbbff5f9"}, {0x7, 0xd, "b3e3046b9a3a217e3b7603"}, {0x1, 0x3, 'S'}, {0x6, 0x11, "79c05ed28211a5580e531bb444d3fd"}]}, @lsrr={0x83, 0x27, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}]}, @cipso={0x86, 0x2b, 0x3, [{0x0, 0xa, "d8057b592ee007b4"}, {0x5, 0xd, "ff912b50b91d6beaf07675"}, {0x0, 0xe, "207ffb30f1727a2a923608e6"}]}]}}}}}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) (async) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={r10, 0x8, 0x30}, &(0x7f00000000c0)=0xc) listen(r6, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r6, 0x0, 0x0) (async) r12 = accept(r6, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b41a553ed8731254fd50294ded4246d8650e097af614dcd33063c77cf3b23b73c952500c2117c0d5b38a6fae5f8cfdd8b642d7a35f5632a3416e2663d1f384df0a1384afe96f03a95e56c0425cd22b87439c16c2eeef753104f71383876c1a76bd4457e5f5fe25c513e2c239f1cbd779d570f1d68724bab92dda", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r12}, 0x47) shutdown(r12, 0x0) recvmsg$can_bcm(r12, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x39}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r5, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 685.879989ms ago: executing program 1 (id=2933): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a331286dd", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130, @void, @value}, 0x90) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4}}, 0xe8) (async) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 535.891433ms ago: executing program 0 (id=2934): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd8, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00}\x00', 0xa2, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}, @mcast2, {[], {0x4e22, 0xe22, 0xa2, 0x0, @gue={{0x2, 0x0, 0x2, 0x3, 0x0, @val=0x80}, "b22349f08e336eab2cfb1625e87cebccffc30e9ef173cdad7fb9135c2d99cebc8925875ad3c5318e1f7272eaa51245f42cbdb8cbe09bef236caa53090aad5ad371efe9001334c414fe32d12d727823c85fe2e1273e33219e916d218864dcac7a1ff9fee7a5a0fe82a47d7a66de71cb4ef3f2982353ca86ab74fc6127e3ad587042985f08c17fbea885413d186c60517ecece"}}}}}}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x60008080) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@dev}, &(0x7f0000000300)=0x14) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1}, 0x4000}], 0x1, 0x0, 0x0) sendto$inet(r5, &(0x7f00000000c0)="ca710ffd822188875fe5ea1a4eac8e01b60be9c0339a33c46713b01a3983c141e4b6543943218418f2a0fde1348bb11b00837fcc27d162f5a822d869031dc38ee3e3639ace466fb67c8f7f23487621e104ce902456e51b115ef67f77928f6267e7d27d710396a88207c189c1bc02e9d417887fbf5b403060fd1c8b4e38f7f1c65844730ecd3775672a47b8d599418238dd4f6210a7e90869c443c823da5d7be306c2a7ab7ec6e0f107", 0xa9, 0x800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x90) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) 534.642092ms ago: executing program 1 (id=2935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x2) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) syz_emit_ethernet(0x80, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585d", 0x7b}, {&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c751263a6048a6cc870c57ef079cfb94f1992cf5f8477c193de19ba52e949b73ff7cb3bb8b81dac1679408e377ed2ee99f8b90b9834cfbce43615f550f1153dc48", 0x59}], 0x2}, 0x8010) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/45, 0x2d}], 0x2}, 0x7ff}], 0x1, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000002, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 435.887443ms ago: executing program 1 (id=2936): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x1, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='GPL\x00', 0xd, 0x5, &(0x7f0000000280)=""/5, 0x41100, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0x9, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x3, 0x100003, 0x3}, {0x4, 0x3, 0xa, 0x8}, {0x1, 0x4, 0x8, 0x6}], 0x10, 0x7, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x5f, 0x85, 0x62, 0x12, @loopback, @private2, 0x80, 0x8, 0x2674, 0x3e66}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d80)={0xffffffffffffffff, 0x20, &(0x7f0000001d40)={&(0x7f0000000c40)=""/4096, 0x1000, 0x0, &(0x7f0000001c40)=""/230, 0xe6}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001dc0)={0xffffffffffffffff, 0x0, 0x14}, 0xc) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000003c0)=[{&(0x7f0000000580)="db", 0x1}, {&(0x7f00000002c0)='+', 0x1}], 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ffefffffffbfa200000000000007020000f8ffffffb70300000800820000009500"/72], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r10, &(0x7f0000000400), 0x20000000}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e00)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={0x0, 0x6, 0x8}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000590000000200000010010000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000003000000000000000000000000008000000000000dceb2956c902117e0625c5fe9358d362f0000d41081cb2a"], 0x50) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0xa, 0x25, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@alu={0x7, 0x1, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x1}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @call={0x85, 0x0, 0x0, 0x3f}, @jmp={0x5, 0x0, 0x6, 0x6, 0x8, 0x20, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0xcd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x2, 0x52, &(0x7f0000000ac0)=""/82, 0x40f00, 0x10, '\x00', r3, @fallback, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x10, 0x3, 0xd}, 0x10, r6, 0xffffffffffffffff, 0x9, &(0x7f0000001f40)=[r7, r8, r9, 0xffffffffffffffff, r10, r11, r12, r13, r14], &(0x7f0000001f80)=[{0x5, 0x1, 0x4, 0x5}, {0x0, 0x3, 0x10, 0x2}, {0x1, 0x2, 0x8}, {0x4, 0x3, 0xf, 0x5}, {0x1, 0x1, 0xc}, {0x3, 0x3, 0x3, 0x6}, {0x4, 0x5, 0x4, 0x8}, {0x2, 0x5, 0xb, 0x7}, {0x5, 0x4, 0x4, 0x6}], 0x10, 0xffff7fff, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000440)=r1, 0x4) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 351.443974ms ago: executing program 3 (id=2937): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 231.974097ms ago: executing program 1 (id=2938): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) 158.891963ms ago: executing program 0 (id=2939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140005000303000000000000005dc00000000001080002000500000014000600ff01000000f2f3f31f00000000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) close(r3) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, 0x0, 0x0) (async) listen(r5, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 137.038877ms ago: executing program 1 (id=2940): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xc40a4d16a275e548}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) shutdown(r0, 0x2) 3.76951ms ago: executing program 0 (id=2941): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) getpeername(r0, 0x0, &(0x7f0000000380)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x2, @loopback, 0x400}, {0xa, 0x4e21, 0x800, @loopback, 0x9}, 0xffffffffffffffff, {[0x6, 0x3, 0x40, 0x0, 0x80, 0x2, 0xa5d, 0xb]}}, 0x5c) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2000000000010a00000000000095d557890000008916c9c99f366d42b7393f577edbd05fdced5f61583f69e28820d9c2f335cce457201162c289f4a83d1525fc44088193fb391897c5c55d643e89fb06661e4cdbfac933be1172f3014c2bdabd0c326d61fa183a4e9018cbe73a4c822818567396ccb8f33393b5510edf8ebaee8bef414e02a0b008c74670700ccdc641212aa99ef7c5d21fbdd3ad549807af6216225f261f855f0c799802b8bf5811d2e78d0edaf6e2e3b2ec5686ebb55e2d239311685012eb464ed1"], 0x26}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0xf0, 0x11, 0x1, 0x0, 0x0, {{@in, @in=@remote}, {@in=@local}, @in6=@mcast1}}, 0xf0}}, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000180)="d15b58ea6f8fe534fdeb9055ad870743a42bba0db7049835be6a5b549078df2fdeec28a61d1447c011431b19e681ac6cc9aaf6b2e3bf301b32717eace5b6c2bebac360d01a159083119a4d780568d4246cd5b55e600d45d18147ee7498a4cadc3ea829cb93287d2c5d09bcbd60b4c3", 0x6f}, {&(0x7f0000000440)="97f187850c7697a7b1994e9a153c1c75952d2f0a76901df655b51ec128362124028ebec83fcc49e402df1fef20b49808b374e35afb86b76496c076877955ea634756b7382801a243ce37884fc8a3d9ce607cac00dcfba21c114230f34fce92378ae07d8c78bdb3a4ac49ca5b4fdec427ec15dbb683b44597118b72efe7212ce2b932975bb4681027fdade87fd75f48d89533531069a53dbcaff0855d7a85295726cd220e75c2b283642898d7c762ab159121564c83d1dea810ea26b62b2116bcfa57275937", 0xc5}, {&(0x7f0000000200)="e71ab640694d2502b367b80165a43075c855f327fadd0b8e7b70385d36289bd6d1ea26778a72095b6bcd648f445607345fb855a436880e5a4a52842996b78b9343096d6e49bf85608d8d16195ad2a8b2ccd090ac5d1b35f3c6eb91fd9fe264f0d4c600780ae0bd7c9ea8e4e4db0773387512007de4796d", 0x77}, {&(0x7f0000000540)="acad28bc0472fe260185d02c5292048b4336d772ac2febc4caf58f2f968c261f90945c5d1ce71f2b7ddcb9fe2e36b570edd5a0a2a43a2055f14839e0d964ac77d221b7f8c8dce100f9fddf6bb56d48b134931bb7d43f0c35fa4f73202e99b7364c04687ab7ef9444fdecac6f1dc495c7b6717193bff663b8cd5d52ee3b8a67f05128ce08a95a2aa19344f020a880f9b8137f7abbf18eaf91425ddd3523bc8cbbf4432a275c2eb55bfbcd96cc386479eb001d9134142c2b7f712dbb2f9ec46822d1fcc403c16388ef3135d4147437006867cbe9a8faa7ad2a8a1adb126a7c13", 0xdf}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="5ba764dd1a709385acd7b56e23549b982535e9be120635ac77502c57287b8c8d1e65d5dc5cdf23edb3fc73ecaf4c3b6a7c1687a954d310558b2c020dfdfaf6b2cb788cd88f6a2b", 0x47}, {&(0x7f00000016c0)="1f66c00614d1e76fd45a3a2997c48deea95c73f38adbd07fd4ce19a78b901df1683724bd9e845dd64f72961cb8151b5760848dfc54c2431264741112fa2994a11b5e134b7d2b76ca9cba692705cba76fbceeb276d111c9c79825fb15aeca", 0x5e}], 0x7) 0s ago: executing program 3 (id=2942): r0 = socket$kcm(0x10, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 275.436642][T14756] netlink: 'syz.1.2405': attribute type 11 has an invalid length. [ 275.450497][T13347] team0 (unregistering): Port device team_slave_1 removed [ 275.495343][T13347] team0 (unregistering): Port device team_slave_0 removed [ 275.956256][T14739] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 275.984621][T14746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 276.020335][ T54] Bluetooth: hci0: command tx timeout [ 276.164968][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.192278][T14726] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.212771][T14726] bridge_slave_0: entered allmulticast mode [ 276.256454][T14726] bridge_slave_0: entered promiscuous mode [ 276.272881][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.284997][T14726] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.309238][T14726] bridge_slave_1: entered allmulticast mode [ 276.324870][T14726] bridge_slave_1: entered promiscuous mode [ 276.435179][T14726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.460425][T14748] lo speed is unknown, defaulting to 1000 [ 276.468131][T14726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.549754][T14781] __nla_validate_parse: 4 callbacks suppressed [ 276.549774][T14781] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2416'. [ 276.587405][T14781] netem: invalid attributes len -24 [ 276.597926][T14781] netem: change failed [ 276.614558][T14726] team0: Port device team_slave_0 added [ 276.637973][T14726] team0: Port device team_slave_1 added [ 276.701079][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2418'. [ 276.817675][T13347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.846113][T14794] ebtables: ebtables: counters copy to user failed while replacing table [ 276.855731][T14726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.862965][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.890998][T14726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.906215][T14726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.913709][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.940346][T14726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.056005][T13347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.104424][T14803] netlink: 'syz.0.2423': attribute type 5 has an invalid length. [ 277.197326][T13347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.225566][T14726] hsr_slave_0: entered promiscuous mode [ 277.234532][T14726] hsr_slave_1: entered promiscuous mode [ 277.243397][T14726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.264414][T14726] Cannot create hsr debugfs directory [ 277.296923][T13347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.308403][ T54] Bluetooth: hci2: command tx timeout [ 277.467770][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2431'. [ 277.546975][T14748] chnl_net:caif_netlink_parms(): no params data found [ 277.764876][T13347] bridge_slave_1: left allmulticast mode [ 277.772258][T13347] bridge_slave_1: left promiscuous mode [ 277.778310][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.788473][T13347] bridge_slave_0: left allmulticast mode [ 277.794506][T13347] bridge_slave_0: left promiscuous mode [ 277.802991][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.877036][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 277.916814][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 278.096431][ T54] Bluetooth: hci0: command tx timeout [ 278.298179][T13347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.309538][T13347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.321765][T13347] bond0 (unregistering): Released all slaves [ 278.397995][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.408409][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.434720][T14748] bridge_slave_0: entered allmulticast mode [ 278.445913][T14748] bridge_slave_0: entered promiscuous mode [ 278.511220][T14846] netlink: 'syz.3.2436': attribute type 21 has an invalid length. [ 278.519376][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.527204][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.536554][T14748] bridge_slave_1: entered allmulticast mode [ 278.547967][T14748] bridge_slave_1: entered promiscuous mode [ 278.668766][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.721224][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.814984][T13347] hsr_slave_0: left promiscuous mode [ 278.878359][T13347] hsr_slave_1: left promiscuous mode [ 278.900767][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.908551][T13347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.918104][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.925862][T13347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.945285][T13347] veth1_macvtap: left promiscuous mode [ 278.951228][T13347] veth0_macvtap: left promiscuous mode [ 278.956837][T13347] veth1_vlan: left promiscuous mode [ 278.962299][T13347] veth0_vlan: left promiscuous mode [ 279.379749][ T54] Bluetooth: hci2: command tx timeout [ 279.399328][T13347] team0 (unregistering): Port device team_slave_1 removed [ 279.446437][T13347] team0 (unregistering): Port device team_slave_0 removed [ 279.883588][T14748] team0: Port device team_slave_0 added [ 279.942202][T14726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.952342][T14726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.970770][T14748] team0: Port device team_slave_1 added [ 279.990621][T14726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.028927][T14726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.063291][T14868] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.123427][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2445'. [ 280.136247][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.157201][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.188820][ T54] Bluetooth: hci0: command tx timeout [ 280.203192][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.209221][T14873] xt_l2tp: invalid flags combination: 4 [ 280.221702][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.228687][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.255238][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.280385][T14871] ip6t_srh: unknown srh match flags 4001 [ 280.326390][T14868] netlink: 'syz.3.2445': attribute type 7 has an invalid length. [ 280.340029][T14868] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2445'. [ 280.357226][T14748] hsr_slave_0: entered promiscuous mode [ 280.371620][T14748] hsr_slave_1: entered promiscuous mode [ 280.394107][T14748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.403011][T14748] Cannot create hsr debugfs directory [ 280.441147][T14881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2448'. [ 280.614425][T14891] netlink: 'syz.3.2452': attribute type 10 has an invalid length. [ 280.647196][T14891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2452'. [ 280.654800][T14895] xt_limit: Overflow, try lower: 2147483649/4096 [ 280.658944][T14891] bridge0: port 1(dummy0) entered blocking state [ 280.684746][T14891] bridge0: port 1(dummy0) entered disabled state [ 280.696557][T14891] dummy0: entered allmulticast mode [ 280.702778][T14891] dummy0: entered promiscuous mode [ 280.724333][T14898] bond0: left promiscuous mode [ 280.729263][T14898] bond_slave_0: left promiscuous mode [ 280.736017][T14898] bond_slave_1: left promiscuous mode [ 280.742688][T14898] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 280.754569][T14898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.764718][T14898] team0: Port device bond0 added [ 280.884876][T14726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.995332][T14726] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.022884][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.030116][T13347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.058080][T14910] netlink: 'syz.1.2458': attribute type 11 has an invalid length. [ 281.067976][T14910] netlink: 'syz.1.2458': attribute type 1 has an invalid length. [ 281.076097][T14910] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2458'. [ 281.110696][T13345] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.117861][T13345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.308436][T14918] netlink: 'syz.3.2461': attribute type 7 has an invalid length. [ 281.326999][T14748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.348380][T14748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.368407][T14748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.411016][T14726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.429099][T14748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.451267][ T54] Bluetooth: hci2: command tx timeout [ 281.486398][T14726] veth0_vlan: entered promiscuous mode [ 281.512865][T14726] veth1_vlan: entered promiscuous mode [ 281.535713][T14925] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 281.596491][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 281.607209][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2464'. [ 281.646455][T14726] veth0_macvtap: entered promiscuous mode [ 281.681929][T14726] veth1_macvtap: entered promiscuous mode [ 281.792506][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.805924][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.816845][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.828073][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.840476][T14726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.860917][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.921468][T14950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2468'. [ 281.932017][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.951904][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.971536][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.982219][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.010727][T14726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.038488][T14726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.069733][T14726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.078493][T14726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.132034][T14726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.155073][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.167463][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.190944][T14961] IPVS: Unknown mcast interface: pim6reg0 [ 282.247530][T13345] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.254737][T13345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.263472][ T54] Bluetooth: hci0: command tx timeout [ 282.298735][T13345] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.305945][T13345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.372193][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.373561][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.393184][T14976] batman_adv: batadv0: Adding interface: team0 [ 282.394432][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.400671][T14976] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.418608][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.437184][T14976] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 282.447785][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.473133][T14980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.525259][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.574241][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.590286][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.611480][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.646871][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'. [ 282.680815][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.704777][T14984] lo speed is unknown, defaulting to 1000 [ 282.712209][T13338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.720315][T13338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.751862][T14748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.774273][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.782664][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.791664][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.821267][T14976] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 282.882926][T13345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.902188][T13345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.008296][T15000] hsr0: entered allmulticast mode [ 283.019755][T15000] hsr_slave_0: entered allmulticast mode [ 283.025473][T15000] hsr_slave_1: entered allmulticast mode [ 283.070277][T15002] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2481'. [ 283.083982][T15000] hsr_slave_0: left promiscuous mode [ 283.116959][T15000] hsr_slave_1: left promiscuous mode [ 283.188827][T15000] hsr0 (unregistering): left allmulticast mode [ 283.384476][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.529640][ T54] Bluetooth: hci2: command tx timeout [ 283.786012][T13338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.922745][T14748] veth0_vlan: entered promiscuous mode [ 283.935102][T14748] veth1_vlan: entered promiscuous mode [ 283.962187][T14748] veth0_macvtap: entered promiscuous mode [ 283.972537][T14748] veth1_macvtap: entered promiscuous mode [ 283.986561][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.998079][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.008745][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.021676][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.031878][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.042725][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.054336][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.068655][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.083845][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.098272][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.109121][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.119306][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.130487][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.141898][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.157377][T14748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.166325][T14748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.175924][T14748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.185297][T14748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.258503][T13338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.293047][T13334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.304336][T13334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.339363][T13338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.356077][T13345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.365162][T13345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.402964][T13338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.513404][T13338] bridge_slave_1: left allmulticast mode [ 284.519663][T13338] bridge_slave_1: left promiscuous mode [ 284.525394][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.543661][T13338] bridge_slave_0: left allmulticast mode [ 284.549926][T13338] bridge_slave_0: left promiscuous mode [ 284.555690][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.900639][T15033] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2488'. [ 285.059119][T15045] xt_ecn: cannot match TCP bits for non-tcp packets [ 285.234369][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.253063][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.276647][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.302082][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.311714][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.324065][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.374949][T13338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.408734][T13338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.422472][T13338] bond0 (unregistering): Released all slaves [ 285.452318][T15048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.474415][T15052] lo speed is unknown, defaulting to 1000 [ 285.554653][T15058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2492'. [ 285.567238][T15058] ipt_rpfilter: unknown options [ 285.656824][T15060] ip6tnl0: entered promiscuous mode [ 285.685182][T15059] ip6tnl0: left promiscuous mode [ 285.845522][T13338] hsr_slave_0: left promiscuous mode [ 285.853805][T13338] hsr_slave_1: left promiscuous mode [ 285.861560][T13338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.869007][T13338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.880214][T13338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.887647][T13338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.904683][T13338] veth1_macvtap: left promiscuous mode [ 285.910822][T13338] veth0_macvtap: left promiscuous mode [ 285.916379][T13338] veth1_vlan: left promiscuous mode [ 285.921825][T13338] veth0_vlan: left promiscuous mode [ 286.361854][T13338] team0 (unregistering): Port device team_slave_1 removed [ 286.405721][T13338] team0 (unregistering): Port device team_slave_0 removed [ 286.807234][T15052] chnl_net:caif_netlink_parms(): no params data found [ 286.898893][T15052] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.906100][T15052] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.914208][T15052] bridge_slave_0: entered allmulticast mode [ 286.921498][T15052] bridge_slave_0: entered promiscuous mode [ 286.928962][T15052] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.940573][T15052] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.947852][T15052] bridge_slave_1: entered allmulticast mode [ 286.967156][T15052] bridge_slave_1: entered promiscuous mode [ 286.990655][T15052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.010989][T15052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.166856][T15073] syzkaller0: entered promiscuous mode [ 287.181237][T15073] syzkaller0: entered allmulticast mode [ 287.207843][T15052] team0: Port device team_slave_0 added [ 287.227085][T15052] team0: Port device team_slave_1 added [ 287.370284][ T5848] Bluetooth: hci0: command tx timeout [ 287.385728][T15052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.392931][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.430677][T15052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.444313][T15052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.451962][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.480739][T15052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.559294][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.583496][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.602973][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.613286][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.629766][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.637294][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.341469][T15052] hsr_slave_0: entered promiscuous mode [ 289.348158][T15052] hsr_slave_1: entered promiscuous mode [ 289.354692][T15052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.377640][T15052] Cannot create hsr debugfs directory [ 289.460181][ T54] Bluetooth: hci0: command tx timeout [ 289.555694][T15092] lo speed is unknown, defaulting to 1000 [ 289.691700][ T54] Bluetooth: hci2: command tx timeout [ 289.749327][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 289.763534][T13338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.953303][T13338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.074705][T13338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.163405][T13338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.222852][T15136] team0: No ports can be present during mode change [ 290.578730][T15092] chnl_net:caif_netlink_parms(): no params data found [ 290.836842][T13338] bridge_slave_1: left allmulticast mode [ 290.866767][T13338] bridge_slave_1: left promiscuous mode [ 290.872999][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.928771][T13338] bridge_slave_0: left allmulticast mode [ 290.940301][T13338] bridge_slave_0: left promiscuous mode [ 290.946079][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.017590][T15158] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2511'. [ 291.059054][T15165] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2514'. [ 291.476977][T13338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.488079][T13338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.500454][T13338] bond0 (unregistering): Released all slaves [ 291.516181][T15170] validate_nla: 57 callbacks suppressed [ 291.516199][T15170] netlink: 'syz.1.2515': attribute type 13 has an invalid length. [ 291.529843][ T54] Bluetooth: hci0: command tx timeout [ 291.531105][T15170] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2515'. [ 291.545380][T15172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 291.573260][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 291.734944][T15185] openvswitch: netlink: Actions may not be safe on all matching packets [ 291.765455][T15182] tipc: Enabling of bearer rejected, media not registered [ 291.771662][ T54] Bluetooth: hci2: command tx timeout [ 291.903966][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.924020][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.936704][T15092] bridge_slave_0: entered allmulticast mode [ 291.961818][T15092] bridge_slave_0: entered promiscuous mode [ 291.963451][T15194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2521'. [ 291.977681][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.986539][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.988593][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 292.006779][T15092] bridge_slave_1: entered allmulticast mode [ 292.007486][T15194] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 292.015770][T15092] bridge_slave_1: entered promiscuous mode [ 292.123597][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.195913][T13338] hsr_slave_0: left promiscuous mode [ 292.216026][T13338] hsr_slave_1: left promiscuous mode [ 292.234106][T13338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.243025][T13338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.260568][T13338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.268060][T13338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.275971][T15207] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2524'. [ 292.293371][T15207] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 292.323033][T13338] veth1_macvtap: left promiscuous mode [ 292.328586][T13338] veth0_macvtap: left promiscuous mode [ 292.338016][T13338] veth1_vlan: left promiscuous mode [ 292.343391][T13338] veth0_vlan: left promiscuous mode [ 292.783993][T13338] team0 (unregistering): Port device team_slave_1 removed [ 292.836752][T13338] team0 (unregistering): Port device team_slave_0 removed [ 293.066221][T15223] IPVS: set_ctl: invalid protocol: 11612 172.20.20.38:20001 [ 293.347365][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.356775][T15052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.369222][T15052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.388088][T15209] hsr0: entered promiscuous mode [ 293.497021][T15052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.542120][T15052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.559140][T15092] team0: Port device team_slave_0 added [ 293.597919][T15092] team0: Port device team_slave_1 added [ 293.609600][ T54] Bluetooth: hci0: command tx timeout [ 293.684768][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.699807][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.743941][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.757127][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.772915][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.817535][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.841704][T15242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2535'. [ 293.850824][ T54] Bluetooth: hci2: command tx timeout [ 293.869498][T15238] lo speed is unknown, defaulting to 1000 [ 293.944661][T15092] hsr_slave_0: entered promiscuous mode [ 293.951805][T15092] hsr_slave_1: entered promiscuous mode [ 293.967162][T15092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.976042][T15092] Cannot create hsr debugfs directory [ 293.986365][T15244] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 293.995573][T15244] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 294.007705][T15244] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 294.345247][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.642788][T15052] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.671970][T13345] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.679138][T13345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.745203][T13345] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.752432][T13345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.810873][T15052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.958766][T15288] pim6reg1: entered promiscuous mode [ 294.966208][T15288] pim6reg1: entered allmulticast mode [ 294.982450][T15297] __nla_validate_parse: 2 callbacks suppressed [ 294.982469][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'. [ 295.016438][T15092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.031506][T15092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.072592][T15092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.148633][T15092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.222937][T15052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.265308][T15287] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.287292][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.377332][T15306] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 295.384197][T15052] veth0_vlan: entered promiscuous mode [ 295.418398][T15052] veth1_vlan: entered promiscuous mode [ 295.429657][T15306] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 295.455587][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.490560][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.515433][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.528662][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.535809][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.577639][T15052] veth0_macvtap: entered promiscuous mode [ 295.607557][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.614757][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.634846][T15052] veth1_macvtap: entered promiscuous mode [ 295.710833][T15320] Cannot find del_set index 4 as target [ 295.718036][T15321] Cannot find del_set index 4 as target [ 295.777272][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.804728][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.816950][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.834086][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.848037][T15052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.894440][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.914257][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.928438][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.939206][ T54] Bluetooth: hci2: command tx timeout [ 295.945392][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.957101][T15052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.989497][T15052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.998940][T15052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.009535][T15052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.018893][T15052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.216031][T13347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.228305][T13347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.270995][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.284622][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.379039][T15347] : renamed from ipvlan1 [ 296.530557][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.710931][T15380] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 296.719342][T15380] netlink: 636 bytes leftover after parsing attributes in process `syz.1.2567'. [ 296.755894][T15380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2567'. [ 296.795488][T15390] tap0: tun_chr_ioctl cmd 1074025675 [ 296.806973][T15390] tap0: persist disabled [ 297.148262][T13334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.247792][T15092] veth0_vlan: entered promiscuous mode [ 297.309347][T15092] veth1_vlan: entered promiscuous mode [ 297.351581][T13334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.387482][T15092] veth0_macvtap: entered promiscuous mode [ 297.396132][T15092] veth1_macvtap: entered promiscuous mode [ 297.413662][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.424196][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.434698][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.445259][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.455694][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.466504][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.477487][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.490389][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.501236][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.511232][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.522055][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.532158][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.543172][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.555828][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.570255][T15092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.578993][T15092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.589318][T15092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.598269][T15092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.634103][T13334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.704054][T13349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.718494][T13349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.741096][T15375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.748985][T15375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.777161][T13334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.930624][T13334] bridge_slave_1: left allmulticast mode [ 297.942297][T13334] bridge_slave_1: left promiscuous mode [ 297.948698][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.957809][T13334] bridge_slave_0: left allmulticast mode [ 297.964650][T13334] bridge_slave_0: left promiscuous mode [ 297.971456][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.334474][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.346367][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.357606][T13334] bond0 (unregistering): Released all slaves [ 298.692407][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 298.767504][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 298.768397][T15429] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2580'. [ 298.819969][T15429] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 298.854952][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.872245][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.881379][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.905235][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.913408][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.921046][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.005384][T15433] lo speed is unknown, defaulting to 1000 [ 299.067491][T13334] hsr_slave_0: left promiscuous mode [ 299.075356][T13334] hsr_slave_1: left promiscuous mode [ 299.083086][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.090666][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.098485][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.106692][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.125205][T13334] veth1_macvtap: left promiscuous mode [ 299.131517][T13334] veth0_macvtap: left promiscuous mode [ 299.137116][T13334] veth1_vlan: left promiscuous mode [ 299.143192][T13334] veth0_vlan: left promiscuous mode [ 299.588344][T13334] team0 (unregistering): Port device team_slave_1 removed [ 299.641047][T13334] team0 (unregistering): Port device team_slave_0 removed [ 300.165316][T15433] chnl_net:caif_netlink_parms(): no params data found [ 300.273858][T15433] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.281269][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.288420][T15433] bridge_slave_0: entered allmulticast mode [ 300.295530][T15433] bridge_slave_0: entered promiscuous mode [ 300.306821][T15433] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.314441][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.322100][T15433] bridge_slave_1: entered allmulticast mode [ 300.328738][T15433] bridge_slave_1: entered promiscuous mode [ 300.425871][T15433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.468123][T15433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.599282][T15433] team0: Port device team_slave_0 added [ 300.647519][T15452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2586'. [ 300.696270][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.706340][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.717537][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.738446][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.747685][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 300.751589][T15433] team0: Port device team_slave_1 added [ 300.762623][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.891339][T15467] x_tables: duplicate underflow at hook 1 [ 300.976483][ T5848] Bluetooth: hci0: command tx timeout [ 301.014021][T13334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.165340][T15433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.198505][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.230498][T15433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.321597][T13334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.360872][T15488] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 301.433495][T15490] bond6: entered promiscuous mode [ 301.447408][T15490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.472704][T15433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.490422][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.520635][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.577154][T13334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.593656][T15457] lo speed is unknown, defaulting to 1000 [ 301.610236][T15508] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2596'. [ 301.619373][T15508] ip6gretap0: entered promiscuous mode [ 301.674354][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 301.735058][T15433] hsr_slave_0: entered promiscuous mode [ 301.760318][T15433] hsr_slave_1: entered promiscuous mode [ 301.806664][T15433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.820412][T15433] Cannot create hsr debugfs directory [ 301.865970][T13334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.022661][T15529] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 302.052089][T15530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.268550][T15547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.298993][T13334] bridge_slave_1: left allmulticast mode [ 302.305053][T13334] bridge_slave_1: left promiscuous mode [ 302.310901][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.328826][T13334] bridge_slave_0: left allmulticast mode [ 302.339729][T13334] bridge_slave_0: left promiscuous mode [ 302.345812][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.713991][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.726764][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.738671][T13334] bond0 (unregistering): Released all slaves [ 302.886097][T15457] chnl_net:caif_netlink_parms(): no params data found [ 302.889853][ T5848] Bluetooth: hci2: command tx timeout [ 303.018682][T15565] netlink: 'syz.3.2609': attribute type 4 has an invalid length. [ 303.051240][ T5848] Bluetooth: hci0: command tx timeout [ 303.159055][ T5845] lo speed is unknown, defaulting to 1000 [ 303.427875][T15457] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.436909][T15457] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.451056][T15457] bridge_slave_0: entered allmulticast mode [ 303.463339][T15457] bridge_slave_0: entered promiscuous mode [ 303.475372][T13334] hsr_slave_0: left promiscuous mode [ 303.486894][T13334] hsr_slave_1: left promiscuous mode [ 303.495533][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.503184][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.514447][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.529714][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.559481][T13334] veth1_macvtap: left promiscuous mode [ 303.570312][T13334] veth0_macvtap: left promiscuous mode [ 303.572176][T15597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2620'. [ 303.576150][T13334] veth1_vlan: left promiscuous mode [ 303.597842][T13334] veth0_vlan: left promiscuous mode [ 304.131131][T13334] team0 (unregistering): Port device team_slave_1 removed [ 304.184220][T13334] team0 (unregistering): Port device team_slave_0 removed [ 304.688832][T15594] team0: left allmulticast mode [ 304.706947][T15594] team_slave_0: left allmulticast mode [ 304.716505][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 304.729729][T15594] team_slave_1: left allmulticast mode [ 304.739945][T15594] team0: left promiscuous mode [ 304.744773][T15594] team_slave_0: left promiscuous mode [ 304.750709][T15594] team_slave_1: left promiscuous mode [ 304.756469][T15594] bridge0: port 3(team0) entered disabled state [ 304.767740][T15594] bridge_slave_0: left allmulticast mode [ 304.773782][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.784661][T15594] –eth0_vlan: left allmulticast mode [ 304.791432][T15594] –eth0_vlan: left promiscuous mode [ 304.796801][T15594] bridge0: port 2(–eth0_vlan) entered disabled state [ 304.808359][T15594] : (slave bond_slave_0): Releasing backup interface [ 304.823135][T15594] : (slave bond_slave_1): Releasing backup interface [ 304.860647][T15594] team0: Port device team_slave_0 removed [ 304.873864][T15594] team0: Port device team_slave_1 removed [ 304.885696][T15594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.894952][T15594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.903304][T15594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.911284][T15594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.925548][T15594] : (slave wlan1): Releasing backup interface [ 304.936503][T15457] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.945199][T15457] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.953374][T15457] bridge_slave_1: entered allmulticast mode [ 304.960770][T15457] bridge_slave_1: entered promiscuous mode [ 304.968542][T15595] wg2: entered promiscuous mode [ 304.979594][ T5848] Bluetooth: hci2: command tx timeout [ 305.003520][T15595] team0: Port device wg2 added [ 305.130027][ T5848] Bluetooth: hci0: command tx timeout [ 305.153157][T15457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.224824][T15457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.246183][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2625'. [ 305.341551][T15457] team0: Port device team_slave_0 added [ 305.405198][T15457] team0: Port device team_slave_1 added [ 305.454232][T15433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.488390][T15433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.526507][T15457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.539307][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.572120][T15457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.594744][T15433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.605515][T15433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.619638][T15457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.627228][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.654072][T15457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.755379][T15457] hsr_slave_0: entered promiscuous mode [ 305.768176][T15457] hsr_slave_1: entered promiscuous mode [ 305.775586][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 305.793895][T15457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.806896][T15457] Cannot create hsr debugfs directory [ 306.186255][T15653] netlink: 'syz.1.2634': attribute type 4 has an invalid length. [ 306.207825][T15433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.275684][T15433] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.295601][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.302856][T15381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.330875][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.338024][T15381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.365540][T15656] netlink: 'syz.0.2635': attribute type 21 has an invalid length. [ 306.388531][T15656] netlink: 'syz.0.2635': attribute type 10 has an invalid length. [ 306.398954][T15656] team0: Device netdevsim0 is of different type [ 306.505724][T15433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.602493][T15666] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2638'. [ 306.661730][T15666] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 306.710163][T15671] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2639'. [ 306.730988][T15672] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2639'. [ 306.748488][T15433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.766001][T15457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.783513][T15457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.794977][T15457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.805909][T15457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.852952][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 306.954465][T15457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.975590][T15457] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.001846][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.009042][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.027427][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.034716][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.088004][T15433] veth0_vlan: entered promiscuous mode [ 307.094159][ T5848] Bluetooth: hci2: command tx timeout [ 307.155392][T15433] veth1_vlan: entered promiscuous mode [ 307.211123][ T5848] Bluetooth: hci0: command tx timeout [ 307.308676][T15433] veth0_macvtap: entered promiscuous mode [ 307.350520][T15697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2644'. [ 307.375397][T15433] veth1_macvtap: entered promiscuous mode [ 307.412136][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.434017][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.456921][T15433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.502686][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.527561][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 307.549369][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.561569][T15433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.606787][T15433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.623609][T15433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.647300][T15433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.670432][T15433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.711635][T15457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.793731][T15709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2647'. [ 307.896477][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2650'. [ 307.931672][T15724] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 307.945232][T15375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.969684][T15375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.081073][T15375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.104315][T15375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.183507][T15736] sctp: [Deprecated]: syz.0.2652 (pid 15736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.183507][T15736] Use struct sctp_sack_info instead [ 308.206129][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 308.337814][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2655'. [ 308.364832][T15457] veth0_vlan: entered promiscuous mode [ 308.382412][T15457] veth1_vlan: entered promiscuous mode [ 308.476851][T15457] veth0_macvtap: entered promiscuous mode [ 308.509118][T15457] veth1_macvtap: entered promiscuous mode [ 308.572618][T15457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.604926][T15457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.615658][T15457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.626661][T15457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.638374][T15457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.662612][T15457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.673432][T15457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.683601][T15457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.694257][T15457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.707886][T15457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.729220][T15457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.738949][T15457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.747753][T15457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.756632][T15457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.945235][T13334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.035251][T13351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.066821][T13351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.077273][T13334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.114260][T15375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.124121][T15375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.133500][ T5848] Bluetooth: hci2: command tx timeout [ 309.506871][T13334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.707160][T13334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.803332][T13334] bridge_slave_1: left allmulticast mode [ 309.809063][T13334] bridge_slave_1: left promiscuous mode [ 309.816412][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.827168][T13334] bridge_slave_0: left allmulticast mode [ 309.833616][T13334] bridge_slave_0: left promiscuous mode [ 309.839277][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.328037][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.345505][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.353558][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.355163][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.375301][T13334] bond0 (unregistering): Released all slaves [ 310.390331][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.399172][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.409302][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.419181][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.430777][T15772] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 310.439363][T15772] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 310.463842][T15773] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 310.528956][T15773] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 310.684220][T15778] lo speed is unknown, defaulting to 1000 [ 310.815985][T13334] hsr_slave_0: left promiscuous mode [ 310.825331][T13334] hsr_slave_1: left promiscuous mode [ 310.831614][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.839023][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.847932][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.856306][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.874902][T13334] veth1_macvtap: left promiscuous mode [ 310.880621][T13334] veth0_macvtap: left promiscuous mode [ 310.886219][T13334] veth1_vlan: left promiscuous mode [ 310.892361][T13334] veth0_vlan: left promiscuous mode [ 311.351452][T13334] team0 (unregistering): Port device team_slave_1 removed [ 311.397957][T13334] team0 (unregistering): Port device team_slave_0 removed [ 311.837956][T15778] chnl_net:caif_netlink_parms(): no params data found [ 311.928101][T15778] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.935518][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.942956][T15778] bridge_slave_0: entered allmulticast mode [ 311.950162][T15778] bridge_slave_0: entered promiscuous mode [ 311.958764][T15778] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.966232][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.974036][T15778] bridge_slave_1: entered allmulticast mode [ 311.981806][T15778] bridge_slave_1: entered promiscuous mode [ 312.020304][T15778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.032104][T15778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.057356][T15778] team0: Port device team_slave_0 added [ 312.066969][T15778] team0: Port device team_slave_1 added [ 312.127972][T15790] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 312.158670][T15778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.180401][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.206788][T15778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.232437][T15790] __nla_validate_parse: 1 callbacks suppressed [ 312.232454][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 312.286337][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 312.306684][T15778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.329274][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.372803][T15778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.488372][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2667'. [ 312.497758][ T54] Bluetooth: hci0: command tx timeout [ 312.504335][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2667'. [ 312.509373][T15810] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 312.521141][T15810] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2666'. [ 312.563191][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.577074][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.582974][T13334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.597121][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.607957][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.614141][T15778] hsr_slave_0: entered promiscuous mode [ 312.622240][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 312.629984][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.630079][T15778] hsr_slave_1: entered promiscuous mode [ 312.647883][T15778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.674362][T15778] Cannot create hsr debugfs directory [ 312.751290][T13334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.888782][T13334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.048975][T15812] lo speed is unknown, defaulting to 1000 [ 313.093210][T13334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.113377][T15832] netlink: 'syz.0.2670': attribute type 10 has an invalid length. [ 313.142559][T15832] : (slave batadv_slave_0): Enslaving as an active interface with an up link [ 313.244420][T15840] tipc: Enabling of bearer rejected, already enabled [ 313.270395][T15847] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.626455][T13334] bridge_slave_1: left allmulticast mode [ 313.633091][T13334] bridge_slave_1: left promiscuous mode [ 313.642011][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.659919][T13334] bridge_slave_0: left allmulticast mode [ 313.665664][T13334] bridge_slave_0: left promiscuous mode [ 313.671609][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.108113][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.120577][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.132726][T13334] bond0 (unregistering): Released all slaves [ 314.154919][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 314.165683][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2678'. [ 314.211890][T15812] chnl_net:caif_netlink_parms(): no params data found [ 314.498424][T15897] x_tables: ip_tables: CT target: only valid in raw table, not memory.events [ 314.573067][ T5848] Bluetooth: hci0: command tx timeout [ 314.640182][T13334] hsr_slave_0: left promiscuous mode [ 314.675434][T13334] hsr_slave_1: left promiscuous mode [ 314.675564][T15907] netlink: 'syz.0.2687': attribute type 9 has an invalid length. [ 314.689171][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.693844][T15907] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.2687'. [ 314.705140][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.718347][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.729590][ T5848] Bluetooth: hci2: command tx timeout [ 314.733675][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.782870][T13334] veth1_macvtap: left promiscuous mode [ 314.788537][T13334] veth0_macvtap: left promiscuous mode [ 314.803271][T13334] veth1_vlan: left promiscuous mode [ 314.808750][T13334] veth0_vlan: left promiscuous mode [ 315.354735][T13334] team0 (unregistering): Port device team_slave_1 removed [ 315.408545][T13334] team0 (unregistering): Port device team_slave_0 removed [ 315.828058][T15812] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.835618][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.853625][T15812] bridge_slave_0: entered allmulticast mode [ 315.863009][T15812] bridge_slave_0: entered promiscuous mode [ 315.871541][T15812] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.878864][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.886591][T15812] bridge_slave_1: entered allmulticast mode [ 315.894349][T15812] bridge_slave_1: entered promiscuous mode [ 315.906909][T15914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.978635][T15812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.997886][T15812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.154108][T15812] team0: Port device team_slave_0 added [ 316.208170][T15812] team0: Port device team_slave_1 added [ 316.326553][T15812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.348616][T15948] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2693'. [ 316.364159][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.405718][T15812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.427784][T15812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.435277][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.461725][T15812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.473167][T15778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.486112][T15778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.498161][T15778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.540336][T15778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.614614][T15812] hsr_slave_0: entered promiscuous mode [ 316.628336][T15812] hsr_slave_1: entered promiscuous mode [ 316.636845][T15812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.646675][T15812] Cannot create hsr debugfs directory [ 316.664926][ T5848] Bluetooth: hci0: command tx timeout [ 316.808766][T15962] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 316.817309][ T5848] Bluetooth: hci2: command tx timeout [ 316.820921][T15962] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 316.857638][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 317.157918][T15778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.260136][T15778] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.345545][T15375] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.352735][T15375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.385564][T15375] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.392901][T15375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.463310][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.550487][T15778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.732767][T15812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.765473][T15812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.791342][T15812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.899776][T15812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.070654][T15778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.177278][T15812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.234440][T15812] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.263920][T15778] veth0_vlan: entered promiscuous mode [ 318.296737][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.303959][T15360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.379263][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.386498][T15360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.442537][T15778] veth1_vlan: entered promiscuous mode [ 318.603910][T15778] veth0_macvtap: entered promiscuous mode [ 318.640576][T16060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2723'. [ 318.688451][T15778] veth1_macvtap: entered promiscuous mode [ 318.730410][ T5848] Bluetooth: hci0: command tx timeout [ 318.777649][T16064] openvswitch: netlink: Flow key attribute not present in set flow. [ 318.811580][T15778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.830519][T16064] netlink: 'syz.3.2725': attribute type 4 has an invalid length. [ 318.833674][T15778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.882224][T15778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.889735][ T5848] Bluetooth: hci2: command tx timeout [ 318.956111][T15778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.973597][T15778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.981937][T16079] netlink: 'syz.0.2727': attribute type 3 has an invalid length. [ 318.990754][T15778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.019033][T16079] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2727'. [ 319.029093][T15812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.046184][T15778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.065747][T15778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.071026][T16083] netlink: 'syz.0.2727': attribute type 3 has an invalid length. [ 319.076039][T15778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.092143][T15778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.104708][T16083] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2727'. [ 319.145043][T16079] netlink: 'syz.0.2727': attribute type 64 has an invalid length. [ 319.173839][T16079] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2727'. [ 319.283043][T15376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.302599][T15376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.390439][T15376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.405554][T15376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.475693][T15812] veth0_vlan: entered promiscuous mode [ 319.511736][T15812] veth1_vlan: entered promiscuous mode [ 319.621058][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'. [ 319.663455][T15812] veth0_macvtap: entered promiscuous mode [ 319.694456][T15812] veth1_macvtap: entered promiscuous mode [ 319.741873][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.753413][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.770462][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.785042][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.796782][T15812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.807904][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.818610][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.832902][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.844608][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.856898][T15812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.883118][T15812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.892406][T15812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.902756][T15812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.911872][T15812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.015295][T15375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.034486][T15375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.083865][T15381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.100104][T15381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.288074][T13334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.421361][T13334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.556294][T13334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.725298][T13334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.837632][T13334] bridge_slave_1: left allmulticast mode [ 320.844559][T13334] bridge_slave_1: left promiscuous mode [ 320.850748][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.859287][T13334] bridge_slave_0: left allmulticast mode [ 320.865627][T13334] bridge_slave_0: left promiscuous mode [ 320.879995][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.369006][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.391112][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.414107][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.435944][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.453448][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.465081][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.509950][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.523451][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.536300][T13334] bond0 (unregistering): Released all slaves [ 321.586872][T16131] lo speed is unknown, defaulting to 1000 [ 321.728050][T16131] chnl_net:caif_netlink_parms(): no params data found [ 321.847244][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.864604][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.872473][T16131] bridge_slave_0: entered allmulticast mode [ 321.879060][T16131] bridge_slave_0: entered promiscuous mode [ 321.889158][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.896616][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.903913][T16131] bridge_slave_1: entered allmulticast mode [ 321.911372][T16131] bridge_slave_1: entered promiscuous mode [ 321.923000][T13334] hsr_slave_0: left promiscuous mode [ 321.928984][T13334] hsr_slave_1: left promiscuous mode [ 321.937261][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.945750][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.955134][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.962768][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.986458][T13334] veth1_macvtap: left promiscuous mode [ 321.992188][T13334] veth0_macvtap: left promiscuous mode [ 321.997719][T13334] veth1_vlan: left promiscuous mode [ 322.003136][T13334] veth0_vlan: left promiscuous mode [ 322.421893][T13334] team0 (unregistering): Port device team_slave_1 removed [ 322.468411][T13334] team0 (unregistering): Port device team_slave_0 removed [ 322.620819][T16142] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 322.961233][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.971643][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.981068][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.081187][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.088983][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.141369][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.532597][ T5848] Bluetooth: hci0: command tx timeout [ 323.731600][T16131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.776222][T16131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.788464][T16160] lo speed is unknown, defaulting to 1000 [ 323.903882][T16131] team0: Port device team_slave_0 added [ 323.923240][T16131] team0: Port device team_slave_1 added [ 323.981910][T16131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.988909][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.046891][T16131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.139370][T16131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.146952][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.174004][T16131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.260594][T16203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.349022][T16131] hsr_slave_0: entered promiscuous mode [ 324.368885][T16131] hsr_slave_1: entered promiscuous mode [ 324.377503][T16131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.391599][T16131] Cannot create hsr debugfs directory [ 324.605142][T16221] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2759'. [ 324.619209][T13334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.768165][T13334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.784227][T16231] netlink: 'syz.1.2761': attribute type 4 has an invalid length. [ 324.893840][T16160] chnl_net:caif_netlink_parms(): no params data found [ 324.921184][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2765'. [ 324.959055][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 324.974324][T13334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.976004][T16238] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2763'. [ 324.996175][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 325.030256][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 325.123944][T13334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.210681][ T5848] Bluetooth: hci2: command tx timeout [ 325.256067][T16160] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.275669][T16160] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.308811][T16160] bridge_slave_0: entered allmulticast mode [ 325.317373][T16160] bridge_slave_0: entered promiscuous mode [ 325.344003][T16160] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.344380][T16256] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 325.351857][T16160] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.360652][T16256] openvswitch: netlink: Actions may not be safe on all matching packets [ 325.377327][T16160] bridge_slave_1: entered allmulticast mode [ 325.385952][T16160] bridge_slave_1: entered promiscuous mode [ 325.585789][T16160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.596999][T16261] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 325.609953][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 325.619080][T16261] netlink: 'syz.3.2771': attribute type 3 has an invalid length. [ 325.627029][T13334] bridge_slave_1: left allmulticast mode [ 325.627057][T13334] bridge_slave_1: left promiscuous mode [ 325.627196][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.642964][T16261] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2771'. [ 325.695077][T13334] bridge_slave_0: left allmulticast mode [ 325.711122][T13334] bridge_slave_0: left promiscuous mode [ 325.719823][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.920308][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2777'. [ 325.974916][T16289] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 325.990043][T16289] netlink: 9260 bytes leftover after parsing attributes in process `syz.3.2778'. [ 325.999226][T16289] netlink: 'syz.3.2778': attribute type 2 has an invalid length. [ 326.019946][T16289] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 326.325237][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.337926][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.349041][T13334] bond0 (unregistering): Released all slaves [ 326.364946][T16160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.545822][T16160] team0: Port device team_slave_0 added [ 326.632775][T16160] team0: Port device team_slave_1 added [ 326.737729][T16160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.762539][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.792102][T16311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 326.805708][T16160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.841380][T16131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.914302][T16160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.929818][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.956447][T16160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.986871][T16317] IPVS: Unknown mcast interface: rose0 [ 327.009858][T16131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.086785][T16131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.131253][T13334] hsr_slave_0: left promiscuous mode [ 327.154080][T13334] hsr_slave_1: left promiscuous mode [ 327.167785][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.177234][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.194556][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.213002][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.253860][T13334] veth1_macvtap: left promiscuous mode [ 327.260425][T13334] veth0_macvtap: left promiscuous mode [ 327.266517][T13334] veth1_vlan: left promiscuous mode [ 327.272896][T13334] veth0_vlan: left promiscuous mode [ 327.290376][ T5848] Bluetooth: hci2: command tx timeout [ 327.692677][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 327.768232][T13334] team0 (unregistering): Port device team_slave_1 removed [ 327.813842][T13334] team0 (unregistering): Port device team_slave_0 removed [ 328.328771][T16160] hsr_slave_0: entered promiscuous mode [ 328.337360][T16160] hsr_slave_1: entered promiscuous mode [ 328.344558][T16160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.353453][T16160] Cannot create hsr debugfs directory [ 328.359207][T16131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.368054][T16334] netlink: 'syz.1.2791': attribute type 8 has an invalid length. [ 328.383351][T16334] erspan0: entered promiscuous mode [ 328.392661][T16334] batadv_slave_1: entered promiscuous mode [ 328.399049][T16334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.408188][T16334] Cannot create hsr debugfs directory [ 328.418140][T16334] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.514807][T16353] netlink: 'syz.1.2797': attribute type 10 has an invalid length. [ 328.530699][T16353] bridge0: port 3(dummy0) entered blocking state [ 328.537209][T16353] bridge0: port 3(dummy0) entered forwarding state [ 328.544386][T16353] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.551579][T16353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.607427][T16353] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 328.727412][T16356] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 328.855033][T16366] xt_nat: multiple ranges no longer supported [ 328.861605][T16368] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 329.019843][T16373] batman_adv: batadv0: Removing interface: team0 [ 329.027099][T16373] dummy0: left allmulticast mode [ 329.034897][T16373] dummy0: left promiscuous mode [ 329.044557][T16373] bridge0: port 1(dummy0) entered disabled state [ 329.057088][T16373] bridge_slave_1: left allmulticast mode [ 329.062969][T16373] bridge_slave_1: left promiscuous mode [ 329.068781][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.082547][T16373] bond0: (slave bond_slave_1): Releasing backup interface [ 329.125813][T16373] team0: Port device team_slave_0 removed [ 329.145588][T16373] team0: Port device team_slave_1 removed [ 329.152296][T16373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.160099][T16373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.168303][T16373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.176075][T16373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.188513][T16373] team0: Port device  removed [ 329.197863][T16373] bond4: (slave xfrm2): Releasing backup interface [ 329.217013][T16372] wg2: entered promiscuous mode [ 329.240858][T16372] team0: Port device wg2 added [ 329.293817][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.358583][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.370754][ T5848] Bluetooth: hci2: command tx timeout [ 329.391915][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.399128][T15360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.432747][T16386] openvswitch: netlink: Missing key (keys=40, expected=100) [ 329.444801][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.452032][T15360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.628786][T16160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.647140][T16160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.665023][T16160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.697539][T16160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.720612][T16399] __nla_validate_parse: 10 callbacks suppressed [ 329.720634][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 329.748186][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 329.770212][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 329.848457][T16160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.893362][T16160] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.907663][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.914832][T15377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.953092][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.977993][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.985189][T15360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.057387][T16131] veth0_vlan: entered promiscuous mode [ 330.091367][T16131] veth1_vlan: entered promiscuous mode [ 330.127453][T16409] validate_nla: 5 callbacks suppressed [ 330.127471][T16409] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 330.178821][T16131] veth0_macvtap: entered promiscuous mode [ 330.207744][T16131] veth1_macvtap: entered promiscuous mode [ 330.244153][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.273131][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.297281][T16131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.308699][T16131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.321460][T16131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.331716][T16131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.342714][T16419] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 330.392412][T16419] netlink: 'syz.1.2817': attribute type 11 has an invalid length. [ 330.446199][T16160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.535411][T16426] netlink: 'syz.1.2818': attribute type 29 has an invalid length. [ 330.545937][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 330.557170][T16426] netlink: 'syz.1.2818': attribute type 29 has an invalid length. [ 330.567956][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 330.635101][T13334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.662278][T13334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.703556][T13334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.720453][T13334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.791910][T16160] veth0_vlan: entered promiscuous mode [ 330.856728][T16160] veth1_vlan: entered promiscuous mode [ 330.887054][T16160] veth0_macvtap: entered promiscuous mode [ 330.898787][T16160] veth1_macvtap: entered promiscuous mode [ 330.916426][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.928936][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.941423][T16160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.956592][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.967711][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.987063][T16160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.004134][T16160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.013357][T16160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.026881][T16160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.036619][T16160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.108047][T15377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.125438][T15377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.154185][T15375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.162528][T15375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.562895][T13334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.049636][T13334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.458005][T16438] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.2822'. [ 332.490934][T16440] netlink: 'syz.0.2821': attribute type 16 has an invalid length. [ 332.504527][T16440] netlink: 'syz.0.2821': attribute type 3 has an invalid length. [ 332.520254][T16440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2821'. [ 332.651968][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.663886][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.674169][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.684812][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.692942][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.705728][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.742318][T13334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.774520][T16441] lo speed is unknown, defaulting to 1000 [ 332.812179][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.872331][T16441] chnl_net:caif_netlink_parms(): no params data found [ 332.926826][T13334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.973753][T16441] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.981636][T16441] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.988853][T16441] bridge_slave_0: entered allmulticast mode [ 332.998571][T16441] bridge_slave_0: entered promiscuous mode [ 333.006789][T16441] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.015379][T16441] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.022976][T16441] bridge_slave_1: entered allmulticast mode [ 333.034337][T16441] bridge_slave_1: entered promiscuous mode [ 333.108718][T13334] bridge_slave_1: left allmulticast mode [ 333.114604][T13334] bridge_slave_1: left promiscuous mode [ 333.120960][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.131896][T13334] bridge_slave_0: left allmulticast mode [ 333.137547][T13334] bridge_slave_0: left promiscuous mode [ 333.147973][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.496985][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.508434][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.519618][T13334] bond0 (unregistering): Released all slaves [ 333.531888][T16441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.548106][T16441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.618161][T16441] team0: Port device team_slave_0 added [ 333.647949][T16441] team0: Port device team_slave_1 added [ 333.676047][T16441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.683291][T16441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.712775][T16441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.747693][T16441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.755443][T16441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.782105][T16441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.828749][T16441] hsr_slave_0: entered promiscuous mode [ 333.835761][T16441] hsr_slave_1: entered promiscuous mode [ 333.844373][T16441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.853309][T16441] Cannot create hsr debugfs directory [ 333.864761][T13334] hsr_slave_0: left promiscuous mode [ 333.871322][T13334] hsr_slave_1: left promiscuous mode [ 333.877000][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.888618][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.896716][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.905092][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.925117][T13334] veth1_macvtap: left promiscuous mode [ 333.932219][T13334] veth0_macvtap: left promiscuous mode [ 333.937781][T13334] veth1_vlan: left promiscuous mode [ 333.943382][T13334] veth0_vlan: left promiscuous mode [ 334.248590][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.264959][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.274292][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.282763][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.293075][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.308024][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.706326][T13334] team0 (unregistering): Port device team_slave_1 removed [ 334.734326][ T54] Bluetooth: hci0: command tx timeout [ 334.760489][T13334] team0 (unregistering): Port device team_slave_0 removed [ 335.320980][T16460] lo speed is unknown, defaulting to 1000 [ 335.365531][T16477] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 335.374800][T16477] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 335.397474][T16478] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 335.405882][T16477] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 335.414159][T16477] netlink: 'syz.3.2830': attribute type 2 has an invalid length. [ 335.422626][T16477] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2830'. [ 335.451824][T16478] x_tables: duplicate underflow at hook 2 [ 335.471177][T16477] netlink: 'syz.3.2830': attribute type 21 has an invalid length. [ 335.480356][T16477] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 335.776579][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'. [ 335.878886][T16460] chnl_net:caif_netlink_parms(): no params data found [ 335.908209][T16499] vlan1: entered allmulticast mode [ 335.932195][T16499] bond0: entered allmulticast mode [ 335.951006][T16499] bond0: left allmulticast mode [ 336.196871][T13334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.239365][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.257527][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.268579][T16460] bridge_slave_0: entered allmulticast mode [ 336.282337][T16460] bridge_slave_0: entered promiscuous mode [ 336.295008][T16516] veth1_macvtap: left promiscuous mode [ 336.306099][T16516] macsec0: entered promiscuous mode [ 336.312496][T16516] macsec0: entered allmulticast mode [ 336.356325][T16517] veth1_macvtap: entered promiscuous mode [ 336.365402][T16517] veth1_macvtap: entered allmulticast mode [ 336.380403][T16517] macsec0: left promiscuous mode [ 336.400633][T16517] macsec0: left allmulticast mode [ 336.405718][T16517] veth1_macvtap: left allmulticast mode [ 336.420482][ T54] Bluetooth: hci2: command tx timeout [ 336.446102][T13334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.464640][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.472115][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.480095][T16460] bridge_slave_1: entered allmulticast mode [ 336.487278][T16460] bridge_slave_1: entered promiscuous mode [ 336.548157][T13334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.649057][T13334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.682285][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.713246][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.810865][ T54] Bluetooth: hci0: command tx timeout [ 336.895238][T16460] team0: Port device team_slave_0 added [ 336.905190][T16441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.923849][T16460] team0: Port device team_slave_1 added [ 336.960841][T16441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.983447][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.996412][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.024889][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.037203][T16441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.049053][T16441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.065105][T16538] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 337.084628][T16538] geneve0: entered promiscuous mode [ 337.102482][T16538] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 337.114466][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.123815][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.161847][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.308554][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2854'. [ 337.327168][T16561] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2855'. [ 337.352091][T16460] hsr_slave_0: entered promiscuous mode [ 337.359312][T16460] hsr_slave_1: entered promiscuous mode [ 337.366000][T16460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.376965][T16460] Cannot create hsr debugfs directory [ 337.394070][T16562] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2855'. [ 337.477839][T13334] bridge_slave_1: left allmulticast mode [ 337.492243][T13334] bridge_slave_1: left promiscuous mode [ 337.498132][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.517512][T13334] bridge_slave_0: left allmulticast mode [ 337.525593][T13334] bridge_slave_0: left promiscuous mode [ 337.538402][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.948934][T13334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.963189][T13334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.974854][T13334] bond0 (unregistering): Released all slaves [ 337.995169][T16576] netlink: 'syz.1.2859': attribute type 10 has an invalid length. [ 338.445112][T16595] IPv6: sit4: Disabled Multicast RS [ 338.490051][ T5848] Bluetooth: hci2: command tx timeout [ 338.558312][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 338.582231][T16603] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 338.595541][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 338.604931][T16441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.624074][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2865'. [ 338.690107][T13334] hsr_slave_0: left promiscuous mode [ 338.696807][T13334] hsr_slave_1: left promiscuous mode [ 338.704792][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.714273][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.726707][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.734874][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.770891][T13334] veth1_macvtap: left promiscuous mode [ 338.776474][T13334] veth0_macvtap: left promiscuous mode [ 338.782669][T13334] veth1_vlan: left promiscuous mode [ 338.788064][T13334] veth0_vlan: left promiscuous mode [ 338.889876][ T5848] Bluetooth: hci0: command tx timeout [ 339.273796][T13334] team0 (unregistering): Port device team_slave_1 removed [ 339.323998][T13334] team0 (unregistering): Port device team_slave_0 removed [ 339.848835][T16441] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.970934][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.978081][T15381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.990863][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.998000][T15381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.075701][T16622] netlink: 'syz.1.2873': attribute type 29 has an invalid length. [ 340.107105][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'. [ 340.278807][T16460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.338401][T16460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.356464][T16639] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2876'. [ 340.386834][T16460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.442599][T16460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.493388][T16647] __nla_validate_parse: 2 callbacks suppressed [ 340.493407][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 340.548484][T16441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.570131][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 340.729366][T16656] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 340.769099][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.794453][T16656] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 340.796005][T16441] veth0_vlan: entered promiscuous mode [ 340.852145][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.861725][T16656] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 340.909086][T16441] veth1_vlan: entered promiscuous mode [ 340.934945][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.942143][T15377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.961955][T15377] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.969132][T15377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.977332][ T54] Bluetooth: hci0: command 0x0419 tx timeout [ 340.986721][T16667] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 341.057869][T16441] veth0_macvtap: entered promiscuous mode [ 341.069417][T16441] veth1_macvtap: entered promiscuous mode [ 341.094774][T16441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.123495][T16441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.150911][T16441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.160153][T16441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.176002][T16441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.194018][T16441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.351071][T16681] netlink: 'syz.1.2886': attribute type 3 has an invalid length. [ 341.358860][T16681] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2886'. [ 341.382671][T15377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.405735][T15377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.457177][T13349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.473829][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.488407][T13349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.632344][T16693] netlink: 'syz.0.2889': attribute type 3 has an invalid length. [ 341.644378][T16693] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2889'. [ 341.673450][T16695] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2890'. [ 341.798731][T16701] xt_ecn: cannot match TCP bits for non-tcp packets [ 341.807577][T16701] netlink: 'syz.0.2892': attribute type 4 has an invalid length. [ 341.935432][T16460] veth0_vlan: entered promiscuous mode [ 341.944027][T16707] xt_ecn: cannot match TCP bits for non-tcp packets [ 341.968095][T16460] veth1_vlan: entered promiscuous mode [ 342.025711][T16710] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2894'. [ 342.042249][T16710] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 342.055844][T16460] veth0_macvtap: entered promiscuous mode [ 342.065105][T16711] x_tables: duplicate underflow at hook 2 [ 342.104372][T16710] syzkaller0: entered promiscuous mode [ 342.110663][T16710] syzkaller0: entered allmulticast mode [ 342.128215][T16460] veth1_macvtap: entered promiscuous mode [ 342.215990][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.246877][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.288227][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.305299][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.326877][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.352660][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.449148][T15372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.499008][T16460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.510650][T16460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.519769][T16460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.528503][T16460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.637952][T15381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.646747][T15381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.649822][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 342.687340][T13334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.695417][T13334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.791724][T15372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.059140][T15372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.316426][T15372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.437986][T15372] bridge_slave_1: left allmulticast mode [ 343.445398][T15372] bridge_slave_1: left promiscuous mode [ 343.452832][T15372] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.461892][T15372] bridge_slave_0: left allmulticast mode [ 343.467534][T15372] bridge_slave_0: left promiscuous mode [ 343.474790][T15372] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.797957][T15372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.813810][T15372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.826759][T15372] bond0 (unregistering): Released all slaves [ 344.031761][T16728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2901'. [ 344.256943][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.276686][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.299960][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.310144][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.319169][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.326582][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.398420][T16734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2902'. [ 344.457138][T16735] lo speed is unknown, defaulting to 1000 [ 344.466370][T15372] hsr_slave_0: left promiscuous mode [ 344.473103][T15372] hsr_slave_1: left promiscuous mode [ 344.479003][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.487150][T15372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.495654][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.503336][T15372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.525466][T15372] veth1_macvtap: left promiscuous mode [ 344.531349][T15372] veth0_macvtap: left promiscuous mode [ 344.537155][T15372] veth1_vlan: left promiscuous mode [ 344.542795][T15372] veth0_vlan: left promiscuous mode [ 345.015516][T15372] team0 (unregistering): Port device team_slave_1 removed [ 345.069745][T15372] team0 (unregistering): Port device team_slave_0 removed [ 345.628644][T16735] chnl_net:caif_netlink_parms(): no params data found [ 345.757568][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.765558][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.773539][T16735] bridge_slave_0: entered allmulticast mode [ 345.781038][T16735] bridge_slave_0: entered promiscuous mode [ 345.798028][T16747] netlink: 'syz.0.2903': attribute type 15 has an invalid length. [ 345.811407][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.818606][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.836287][T16735] bridge_slave_1: entered allmulticast mode [ 345.847404][T16735] bridge_slave_1: entered promiscuous mode [ 345.932608][T16749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2905'. [ 345.955707][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.993223][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.100810][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.127929][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.138301][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.202481][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.210238][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.218800][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.238771][T16758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.320401][ T5845] hid-generic 0005:0458:FFF9.0002: unknown main item tag 0xe [ 346.348529][ T5845] hid-generic 0005:0458:FFF9.0002: item fetching failed at offset 3/4 [ 346.361019][ T5845] hid-generic 0005:0458:FFF9.0002: probe with driver hid-generic failed with error -22 [ 346.411347][ T54] Bluetooth: hci0: command tx timeout [ 346.895642][T16756] tipc: Bearer : already 2 bearers with priority 10 [ 346.910315][T16756] tipc: Bearer : trying with adjusted priority [ 346.917709][T16756] tipc: Enabling of bearer rejected, failed to enable media [ 346.937354][T16735] team0: Port device team_slave_0 added [ 346.992795][T15372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.010668][T16735] team0: Port device team_slave_1 added [ 347.055399][T15372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.077734][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.085061][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.111698][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.124672][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.132387][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.158537][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.200321][T15372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.223301][T16735] hsr_slave_0: entered promiscuous mode [ 347.229621][T16735] hsr_slave_1: entered promiscuous mode [ 347.235945][T16735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.243828][T16735] Cannot create hsr debugfs directory [ 347.276229][T15372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.428896][T15372] bridge_slave_1: left allmulticast mode [ 347.434774][T15372] bridge_slave_1: left promiscuous mode [ 347.441819][T15372] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.452849][T15372] bridge_slave_0: left allmulticast mode [ 347.458525][T15372] bridge_slave_0: left promiscuous mode [ 347.465761][T15372] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.784297][T15372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.796423][T15372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.807392][T15372] bond0 (unregistering): Released all slaves [ 348.053047][T16735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.062791][T16735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.075658][T16735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.102906][T15372] hsr_slave_0: left promiscuous mode [ 348.108759][T15372] hsr_slave_1: left promiscuous mode [ 348.116017][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.124088][T15372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.132188][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.139782][T15372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.159764][T15372] veth1_macvtap: left promiscuous mode [ 348.165339][T15372] veth0_macvtap: left promiscuous mode [ 348.171354][T15372] veth1_vlan: left promiscuous mode [ 348.176643][T15372] veth0_vlan: left promiscuous mode [ 348.489978][ T54] Bluetooth: hci0: command tx timeout [ 348.677147][T16787] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 348.685845][T16787] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2915'. [ 348.696219][T16787] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2915'. [ 348.725431][T16788] ipt_ECN: cannot use operation on non-tcp rule [ 348.739195][T15372] team0 (unregistering): Port device team_slave_1 removed [ 348.803123][T15372] team0 (unregistering): Port device team_slave_0 removed [ 348.927636][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.938742][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.955590][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.967927][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.985231][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.994512][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.364912][T16735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.376202][T16784] tipc: Enabling of bearer rejected, already enabled [ 349.447960][T16790] lo speed is unknown, defaulting to 1000 [ 349.491804][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.603459][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.654454][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 349.720422][T13349] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.727569][T13349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.821136][T13349] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.828258][T13349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.067342][T16735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.099085][T16790] chnl_net:caif_netlink_parms(): no params data found [ 350.319612][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.326760][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.367971][T16790] bridge_slave_0: entered allmulticast mode [ 350.385983][T16790] bridge_slave_0: entered promiscuous mode [ 350.396281][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.411232][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.422946][T16790] bridge_slave_1: entered allmulticast mode [ 350.431907][T16790] bridge_slave_1: entered promiscuous mode [ 350.519037][T16790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.560278][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.578045][ T54] Bluetooth: hci0: command tx timeout [ 350.587852][T16790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.677150][T16790] team0: Port device team_slave_0 added [ 350.690526][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'. [ 350.706998][T16790] team0: Port device team_slave_1 added [ 350.815172][T16790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.830238][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.873918][T16790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.874279][T16880] netlink: 'syz.0.2934': attribute type 1 has an invalid length. [ 350.928679][T16790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.947509][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.983722][T16790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.010200][T16735] veth0_vlan: entered promiscuous mode [ 351.050785][ T54] Bluetooth: hci2: command tx timeout [ 351.070594][T16790] hsr_slave_0: entered promiscuous mode [ 351.077333][T16790] hsr_slave_1: entered promiscuous mode [ 351.093105][T16790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.109490][T16790] Cannot create hsr debugfs directory [ 351.133828][T16735] veth1_vlan: entered promiscuous mode [ 351.134824][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 351.158998][T16890] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 351.216502][T16887] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 351.264444][T16886] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 351.281620][T16886] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 351.419114][ C1] ------------[ cut here ]------------ [ 351.425098][ C1] refcount_t: underflow; use-after-free. [ 351.431239][ C1] WARNING: CPU: 1 PID: 5831 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 351.440725][ C1] Modules linked in: [ 351.444679][ C1] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.12.0-rc6-syzkaller-00169-g252e01e68241 #0 [ 351.455620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 351.465769][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 351.472037][ C1] Code: 60 c4 60 8c e8 17 6e 98 fc 90 0f 0b 90 90 eb 99 e8 eb 77 d7 fc c6 05 ec 6d 49 0b 01 90 48 c7 c7 c0 c4 60 8c e8 f7 6d 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 c8 77 d7 fc c6 05 c6 6d 49 0b 01 90 [ 351.491730][ C1] RSP: 0018:ffffc90000a186e0 EFLAGS: 00010246 [ 351.497844][ C1] RAX: 9e5b3c77e9dd5b00 RBX: ffff88807bae00e4 RCX: ffff888033fb1e00 [ 351.505886][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.513909][ C1] RBP: 0000000000000003 R08: ffffffff8155d312 R09: fffffbfff1cf9fd0 [ 351.521974][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888024769000 [ 351.530060][ C1] R13: ffff88807bae00e4 R14: ffff888024769000 R15: ffff8880283a8f18 [ 351.538071][ C1] FS: 00005555946c4500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 351.547084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.553743][ C1] CR2: 000000110c27b37c CR3: 000000003382a000 CR4: 00000000003526f0 [ 351.561815][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.569877][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.577885][ C1] Call Trace: [ 351.581244][ C1] [ 351.584109][ C1] ? __warn+0x168/0x4e0 [ 351.588272][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 351.593912][ C1] ? report_bug+0x2b3/0x500 [ 351.598451][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 351.604093][ C1] ? handle_bug+0x60/0x90 [ 351.608453][ C1] ? exc_invalid_op+0x1a/0x50 [ 351.613220][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 351.618285][ C1] ? __warn_printk+0x292/0x360 [ 351.623148][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 351.628735][ C1] j1939_xtp_rx_cts+0x552/0xc70 [ 351.633692][ C1] j1939_tp_recv+0x8ae/0x1050 [ 351.638423][ C1] j1939_can_recv+0x732/0xb20 [ 351.643161][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 351.648386][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 351.653663][ C1] can_rcv_filter+0x359/0x7f0 [ 351.658365][ C1] ? can_receive+0x1cd/0x470 [ 351.663016][ C1] can_receive+0x31c/0x470 [ 351.667483][ C1] can_rcv+0x144/0x260 [ 351.671607][ C1] ? __pfx_can_rcv+0x10/0x10 [ 351.676223][ C1] __netif_receive_skb+0x2e0/0x650 [ 351.681407][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 351.686454][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 351.692140][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.698165][ C1] ? __pfx_lock_release+0x10/0x10 [ 351.703271][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 351.708412][ C1] process_backlog+0x662/0x15b0 [ 351.713346][ C1] ? process_backlog+0x33b/0x15b0 [ 351.718398][ C1] ? __pfx_process_backlog+0x10/0x10 [ 351.723739][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.729816][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.736183][ C1] __napi_poll+0xcb/0x490 [ 351.740598][ C1] net_rx_action+0x89b/0x1240 [ 351.745333][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 351.750529][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.756575][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.763016][ C1] handle_softirqs+0x2c5/0x980 [ 351.767830][ C1] ? do_softirq+0x11b/0x1e0 [ 351.772440][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 351.777746][ C1] do_softirq+0x11b/0x1e0 [ 351.782129][ C1] [ 351.785077][ C1] [ 351.788001][ C1] ? __pfx_do_softirq+0x10/0x10 [ 351.792906][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 351.798594][ C1] ? rcu_is_watching+0x15/0xb0 [ 351.803426][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 351.808653][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 351.813833][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 351.819630][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 351.824858][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 351.830056][ C1] __dev_queue_xmit+0x171d/0x3ed0 [ 351.835112][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 351.840286][ C1] ? __lock_acquire+0x1384/0x2050 [ 351.845351][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 351.850860][ C1] ? ip_finish_output2+0xa14/0x1390 [ 351.856090][ C1] ? ip_finish_output2+0x45f/0x1390 [ 351.861361][ C1] ip_finish_output2+0xd41/0x1390 [ 351.866407][ C1] ? ip_finish_output2+0x45f/0x1390 [ 351.871696][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 351.877189][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 351.882136][ C1] ? __ip_finish_output+0x349/0x400 [ 351.887360][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 351.892379][ C1] ? __pfx___tcp_select_window+0x10/0x10 [ 351.898082][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 351.903133][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 351.908287][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 351.913586][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 351.919153][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 351.925452][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 351.932128][ C1] ? ktime_get+0x3c/0xb0 [ 351.936425][ C1] ? read_tsc+0x9/0x20 [ 351.940574][ C1] ? tcp_small_queue_check+0x206/0x410 [ 351.946067][ C1] tcp_write_xmit+0x17b5/0x6bf0 [ 351.951032][ C1] ? __alloc_skb+0x2d5/0x440 [ 351.955674][ C1] ? __virt_addr_valid+0x183/0x530 [ 351.960861][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 351.966453][ C1] tcp_sendmsg_locked+0x45f9/0x50a0 [ 351.971813][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 351.977214][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 351.982857][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 351.988281][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 351.993570][ C1] tcp_sendmsg+0x30/0x50 [ 351.997848][ C1] __sock_sendmsg+0x1a6/0x270 [ 352.002633][ C1] sock_write_iter+0x2d7/0x3f0 [ 352.007430][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 352.012800][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 352.018201][ C1] ? security_file_permission+0x74/0x280 [ 352.023916][ C1] vfs_write+0xaeb/0xd30 [ 352.028209][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 352.033593][ C1] ? __pfx_vfs_write+0x10/0x10 [ 352.038419][ C1] ? rcu_is_watching+0x15/0xb0 [ 352.043283][ C1] ? fdget_pos+0x19a/0x320 [ 352.047721][ C1] ksys_write+0x183/0x2b0 [ 352.052105][ C1] ? __pfx_ksys_write+0x10/0x10 [ 352.057000][ C1] ? do_syscall_64+0x100/0x230 [ 352.061843][ C1] ? do_syscall_64+0xb6/0x230 [ 352.066557][ C1] do_syscall_64+0xf3/0x230 [ 352.071157][ C1] ? clear_bhb_loop+0x35/0x90 [ 352.075870][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.081865][ C1] RIP: 0033:0x7fec1a77d1c0 [ 352.086302][ C1] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d 81 03 19 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 352.105986][ C1] RSP: 002b:00007ffe91b69b78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 352.114576][ C1] RAX: ffffffffffffffda RBX: 0000000003fe56c0 RCX: 00007fec1a77d1c0 [ 352.122632][ C1] RDX: 00000000000000d0 RSI: 00007fec13c3ff30 RDI: 0000000000000003 [ 352.130688][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 000000000003fdf0 [ 352.138676][ C1] R10: 65219dc143b8374b R11: 0000000000000202 R12: 00000000000000d0 [ 352.146700][ C1] R13: 00005555946d8db0 R14: 00007ffe91b6a040 R15: 00007fec13c3ff30 [ 352.154739][ C1] [ 352.157761][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 352.165046][ C1] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.12.0-rc6-syzkaller-00169-g252e01e68241 #0 [ 352.175911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 352.186003][ C1] Call Trace: [ 352.189286][ C1] [ 352.192128][ C1] dump_stack_lvl+0x241/0x360 [ 352.196814][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.202011][ C1] ? __pfx__printk+0x10/0x10 [ 352.206604][ C1] ? vscnprintf+0x5d/0x90 [ 352.210945][ C1] panic+0x349/0x880 [ 352.214842][ C1] ? __warn+0x177/0x4e0 [ 352.218995][ C1] ? __pfx_panic+0x10/0x10 [ 352.223423][ C1] __warn+0x34b/0x4e0 [ 352.227404][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 352.232955][ C1] report_bug+0x2b3/0x500 [ 352.237314][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 352.242872][ C1] handle_bug+0x60/0x90 [ 352.247032][ C1] exc_invalid_op+0x1a/0x50 [ 352.251532][ C1] asm_exc_invalid_op+0x1a/0x20 [ 352.256380][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 352.262538][ C1] Code: 60 c4 60 8c e8 17 6e 98 fc 90 0f 0b 90 90 eb 99 e8 eb 77 d7 fc c6 05 ec 6d 49 0b 01 90 48 c7 c7 c0 c4 60 8c e8 f7 6d 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 c8 77 d7 fc c6 05 c6 6d 49 0b 01 90 [ 352.282144][ C1] RSP: 0018:ffffc90000a186e0 EFLAGS: 00010246 [ 352.288211][ C1] RAX: 9e5b3c77e9dd5b00 RBX: ffff88807bae00e4 RCX: ffff888033fb1e00 [ 352.296177][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.304165][ C1] RBP: 0000000000000003 R08: ffffffff8155d312 R09: fffffbfff1cf9fd0 [ 352.312159][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888024769000 [ 352.320158][ C1] R13: ffff88807bae00e4 R14: ffff888024769000 R15: ffff8880283a8f18 [ 352.328138][ C1] ? __warn_printk+0x292/0x360 [ 352.332936][ C1] j1939_xtp_rx_cts+0x552/0xc70 [ 352.337804][ C1] j1939_tp_recv+0x8ae/0x1050 [ 352.342489][ C1] j1939_can_recv+0x732/0xb20 [ 352.347168][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 352.352370][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 352.357562][ C1] can_rcv_filter+0x359/0x7f0 [ 352.362241][ C1] ? can_receive+0x1cd/0x470 [ 352.366832][ C1] can_receive+0x31c/0x470 [ 352.371267][ C1] can_rcv+0x144/0x260 [ 352.375332][ C1] ? __pfx_can_rcv+0x10/0x10 [ 352.379917][ C1] __netif_receive_skb+0x2e0/0x650 [ 352.385033][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 352.390061][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 352.395715][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.401715][ C1] ? __pfx_lock_release+0x10/0x10 [ 352.406749][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 352.411876][ C1] process_backlog+0x662/0x15b0 [ 352.416743][ C1] ? process_backlog+0x33b/0x15b0 [ 352.421777][ C1] ? __pfx_process_backlog+0x10/0x10 [ 352.427060][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.433049][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.439411][ C1] __napi_poll+0xcb/0x490 [ 352.443765][ C1] net_rx_action+0x89b/0x1240 [ 352.448466][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 352.453582][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.459581][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.465943][ C1] handle_softirqs+0x2c5/0x980 [ 352.470716][ C1] ? do_softirq+0x11b/0x1e0 [ 352.475222][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 352.480516][ C1] do_softirq+0x11b/0x1e0 [ 352.484847][ C1] [ 352.487769][ C1] [ 352.490694][ C1] ? __pfx_do_softirq+0x10/0x10 [ 352.495547][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 352.501184][ C1] ? rcu_is_watching+0x15/0xb0 [ 352.505948][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 352.511156][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 352.516270][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 352.521992][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 352.527198][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 352.532313][ C1] __dev_queue_xmit+0x171d/0x3ed0 [ 352.537354][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 352.542463][ C1] ? __lock_acquire+0x1384/0x2050 [ 352.547495][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.552909][ C1] ? ip_finish_output2+0xa14/0x1390 [ 352.558108][ C1] ? ip_finish_output2+0x45f/0x1390 [ 352.563313][ C1] ip_finish_output2+0xd41/0x1390 [ 352.568337][ C1] ? ip_finish_output2+0x45f/0x1390 [ 352.573542][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 352.579001][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 352.583855][ C1] ? __ip_finish_output+0x349/0x400 [ 352.589054][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 352.593995][ C1] ? __pfx___tcp_select_window+0x10/0x10 [ 352.599633][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 352.604568][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 352.609682][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 352.614901][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 352.620447][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 352.626690][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 352.633281][ C1] ? ktime_get+0x3c/0xb0 [ 352.637528][ C1] ? read_tsc+0x9/0x20 [ 352.641599][ C1] ? tcp_small_queue_check+0x206/0x410 [ 352.647064][ C1] tcp_write_xmit+0x17b5/0x6bf0 [ 352.651948][ C1] ? __alloc_skb+0x2d5/0x440 [ 352.656548][ C1] ? __virt_addr_valid+0x183/0x530 [ 352.661658][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 352.667241][ C1] tcp_sendmsg_locked+0x45f9/0x50a0 [ 352.672481][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 352.677857][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 352.683476][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 352.688886][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 352.694103][ C1] tcp_sendmsg+0x30/0x50 [ 352.698351][ C1] __sock_sendmsg+0x1a6/0x270 [ 352.703037][ C1] sock_write_iter+0x2d7/0x3f0 [ 352.707803][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 352.713102][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 352.718476][ C1] ? security_file_permission+0x74/0x280 [ 352.724112][ C1] vfs_write+0xaeb/0xd30 [ 352.728358][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 352.733647][ C1] ? __pfx_vfs_write+0x10/0x10 [ 352.738412][ C1] ? rcu_is_watching+0x15/0xb0 [ 352.743180][ C1] ? fdget_pos+0x19a/0x320 [ 352.747595][ C1] ksys_write+0x183/0x2b0 [ 352.751925][ C1] ? __pfx_ksys_write+0x10/0x10 [ 352.756771][ C1] ? do_syscall_64+0x100/0x230 [ 352.761560][ C1] ? do_syscall_64+0xb6/0x230 [ 352.766260][ C1] do_syscall_64+0xf3/0x230 [ 352.770773][ C1] ? clear_bhb_loop+0x35/0x90 [ 352.775462][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.781356][ C1] RIP: 0033:0x7fec1a77d1c0 [ 352.785768][ C1] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d 81 03 19 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 352.805397][ C1] RSP: 002b:00007ffe91b69b78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 352.813830][ C1] RAX: ffffffffffffffda RBX: 0000000003fe56c0 RCX: 00007fec1a77d1c0 [ 352.821807][ C1] RDX: 00000000000000d0 RSI: 00007fec13c3ff30 RDI: 0000000000000003 [ 352.829773][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 000000000003fdf0 [ 352.837739][ C1] R10: 65219dc143b8374b R11: 0000000000000202 R12: 00000000000000d0 [ 352.845707][ C1] R13: 00005555946d8db0 R14: 00007ffe91b6a040 R15: 00007fec13c3ff30 [ 352.853691][ C1] [ 352.856859][ C1] Kernel Offset: disabled [ 352.861194][ C1] Rebooting in 86400 seconds..