last executing test programs: 2.38416013s ago: executing program 3 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) write$tun(r2, &(0x7f0000001180)={@void, @val={0x1, 0x80, 0x2, 0x1, 0x100, 0x1ff}, @x25={0x3, 0x0, 0xf, "8055a44d9c1cac5aaa2e717df5bd4b7f04a79b21afe1c3e23691a23d9244faff31e7f434b7483cfc5d990e5c46860aea331b2a88ee6a542354edb0d722ddfa5569985a4fa9a52af5ab62d3bb0dc609a8848d4cf8a63176de14617bc6b32fe90c6b55371c77f1ad8af6d2ff1b246231bb20a96627e96fa8915009a00b2376a55d7d3ce12babe1bd68f368e7731949140e824f35deafe4cb689c0440aa1a38e42b9fca5aaa25fd1ca7348c277f8dd13b6637fe52cf84830b95f454711a2e68b6ae0bcd3f10f7347d99202036825b46783dbbb2"}}, 0xdf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYRESHEX=r9], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24044091) 1.744323405s ago: executing program 0 (id=1470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15, 0x8, 0x3ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001180)={r1, &(0x7f00000005c0)="040025280df800000000791d867b7221a6ba8715ed3fe9dc08618a9d59ecae858c33fa57b8f2be1ecc410b2815dd85228f4f6167cea2e406d82b2e9d6ca2187002b4ae8d5eea6c71aec808dee2d67b49c9d7dd2f2442f2d338401228a60d28b08d8800101f7597493085bc1e7bf1f0cfb3", 0x0}, 0x20) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000a0a90be00000000000000000200000300000b40000000000000000b07000840000000012c00020073797a31000000000800054000000038"], 0x38}, 0x1, 0x0, 0x0, 0x200408c0}, 0x2000c094) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000a0a90be00000000000000000200000300000b40000000000000000b07000840000000012c00020073797a31000000000800054000000038"], 0x38}, 0x1, 0x0, 0x0, 0x200408c0}, 0x2000c094) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x194, 0x5, 0x3}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x194, 0x5, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="c9c0b4436079a830ab711fe046ed3ed135286729cbc06b37830e31ad2e29c50fcf80bd89c513a13f234c55ac52c35aff6cde38e89b8c0fcaeffeeffb8033eb4b390ef1e2e74d6bdaee3435802663911c49bf9e30e4f4875d6fda3f89162d5bb8683c23db524d9a18922f0836e04e17bb61181977200f42fce66857ff3d0e1796496fce", 0x83}, {&(0x7f0000000140)="850cdfa3c640137c2c2f5deb3fa2dd5a70ed5dcdf3c0c8249e46175fc7ca08d5d07e9ee685eb89db6ecea77f0c1af60358915b58595791bc8b20d8a9e07ef819a9dec15f0cb0e22b0d7d39ef58f6ae9356206d452385e4e398b6cb5a451e43250a569247847b982d4bf531618a3bac1d0a771c0e3e88136ca646eca8f6a9766d7d6f45e77c7288141ff87c57d7ad09cb0e07937dfdbf61059afe55559718d5bdb5dd74b16e", 0xa5}, {&(0x7f0000000240)="23a253cb5bff46a03aeb644ffe8435b2", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000003c0)="b268446e1102686f5662a3c4addf0e75ccef71193d1e9d56046c7c3f26b8424ba732755811396b994767493ddcbdd28ca55e82096b9a7acdf5ed02c71fc50ffd544fd96fa6b4e3fbedf14e9c6e7a0c8642406f5d362a01fc0ef411be", 0x5c}, {&(0x7f0000000480)="0a543149ec86241b028665153e3602697ed4209a8cf782755bf0b7035402e5bc16d964bfdeaf968c466309b7691bc6299e093bf32211542013e7e05e37b9fc504790b2b69610d61f3d3a4bcc23e6380dbefb155d70847376f045f17a80857ea415a8b8eb", 0x64}], 0x2}}], 0x2, 0x0) (async) sendmmsg(r8, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="c9c0b4436079a830ab711fe046ed3ed135286729cbc06b37830e31ad2e29c50fcf80bd89c513a13f234c55ac52c35aff6cde38e89b8c0fcaeffeeffb8033eb4b390ef1e2e74d6bdaee3435802663911c49bf9e30e4f4875d6fda3f89162d5bb8683c23db524d9a18922f0836e04e17bb61181977200f42fce66857ff3d0e1796496fce", 0x83}, {&(0x7f0000000140)="850cdfa3c640137c2c2f5deb3fa2dd5a70ed5dcdf3c0c8249e46175fc7ca08d5d07e9ee685eb89db6ecea77f0c1af60358915b58595791bc8b20d8a9e07ef819a9dec15f0cb0e22b0d7d39ef58f6ae9356206d452385e4e398b6cb5a451e43250a569247847b982d4bf531618a3bac1d0a771c0e3e88136ca646eca8f6a9766d7d6f45e77c7288141ff87c57d7ad09cb0e07937dfdbf61059afe55559718d5bdb5dd74b16e", 0xa5}, {&(0x7f0000000240)="23a253cb5bff46a03aeb644ffe8435b2", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000003c0)="b268446e1102686f5662a3c4addf0e75ccef71193d1e9d56046c7c3f26b8424ba732755811396b994767493ddcbdd28ca55e82096b9a7acdf5ed02c71fc50ffd544fd96fa6b4e3fbedf14e9c6e7a0c8642406f5d362a01fc0ef411be", 0x5c}, {&(0x7f0000000480)="0a543149ec86241b028665153e3602697ed4209a8cf782755bf0b7035402e5bc16d964bfdeaf968c466309b7691bc6299e093bf32211542013e7e05e37b9fc504790b2b69610d61f3d3a4bcc23e6380dbefb155d70847376f045f17a80857ea415a8b8eb", 0x64}], 0x2}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xffffffb4, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c005}, 0x40) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') setsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000003c0001800c00028005000100000000002c00018014000000000000000000ffffe000000214000400fc0000000000000000000000000000004ee563932f81c57181723a7fa7cf24dd6267d80e652e5d7d1a9e5022e5fe13178cb72989420dcb07b27c31b40c00000014d44bedd49b7f0ea9c665a21008b9abb1898258cc0de410e7edc52abf38016bd473e7e36e1e9c2802c84655b9230992126ea4f0e4850881add821f5721994b346c744155bde30bf2180defaa2ff845aae60a15659237b3841e24251a10623420ce0d1937b4aec44037e008218cf63186b37ba38c7908c20de32debe192d535a0f00000000d4d430c232ad3c0d01ad07b6110a9b4fc459dd99ee68c478d87f23d1f969a828fad7edae34f6ef01da6270d101c15fba843f7334ff63d2350700c08a766dbad778de13ab841eb6fcfe78f3b4c9569a4879ea55be5e8e658e16e4a1870790f252ab1f5431a456dba0509c38a456fc6b50835b1a6ffc106a9bbff692da46861373963213215ff7e5c0a1191dae88d0c411ca8a3699e4cbba1725e501193681e151a952126851749c09f05d86f2a11331276505c28e71f58ce756f1705bb8284fe6845704ab3902bf71f847b539b738a7289a3f09cda30e12b6c1231eca53a67f90d9f138dbc7926c066255a7ee51891c39f1"], 0x50}}, 0x0) 1.516502343s ago: executing program 0 (id=1473): r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt(r0, 0x7413, 0x8000, &(0x7f0000000180)="d0f0df90243ff24b4d0bcfc7039a1055bc4936704444bd34700afc4f72e9ad81553e76a6846fbe735d40333a48f728e5a68e863e3dd6122f4fad4063f7f33f73203ceb2dc1c6fe65bf09989b4f547978ece5c6bdd18c47196005561cb0b8ca9f44c39bd78ef30829032f3b0ab71db15ff1d315962590d71965a90e399467b5e20a6d4efbe9302085270fe497fecbaf38fbdcafdb59d7158af474c72309f7105a", 0xa0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="88", 0x1, 0x81, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @private2}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000001140)=""/4097, &(0x7f0000000040)=0x1001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) unshare(0x0) 1.516153431s ago: executing program 4 (id=1474): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e00003900000003", 0x2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.430145883s ago: executing program 3 (id=1476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x3}, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b3a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.263766279s ago: executing program 3 (id=1479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "283271c502c7fc4f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x1, &(0x7f0000000000)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000056310000000000000000000085000000ba0000009540000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.123006418s ago: executing program 2 (id=1480): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000000240)) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x54, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x3}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12) (async) write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d3000000000000005000300e52800000500040001"], 0x3c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000200), 0xe) (async) bind$bt_l2cap(r8, &(0x7f0000000200), 0xe) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @empty, 0x7ff}}, 0xf66, 0xd4, 0xffffffff, 0x8, 0x10, 0xb49, 0x8}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @empty, 0x7ff}}, 0xf66, 0xd4, 0xffffffff, 0x8, 0x10, 0xb49, 0x8}, 0x9c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100)=0xf7fffffd, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200bb636e020000000006000000000000000000000000000000e0000002000000000067700000000000ff02002000000000000000000000000105000500004000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600ff4700000a000200000000000000000000000000cd"], 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.064478796s ago: executing program 4 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.056241012s ago: executing program 3 (id=1482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="786d75f0747c9d2f2f75110164aa841e36", 0x11}, {&(0x7f0000001580)="be", 0x1}], 0x2}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0xffffffffffffff7f, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 924.747519ms ago: executing program 4 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x22, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x44}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47c0a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 864.395856ms ago: executing program 2 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) close(r0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x3a, @multicast2, 0x4e20, 0x4, 'dh\x00', 0x1, 0x6, 0x38}, {@local, 0x4e21, 0x2, 0x0, 0x8000, 0x24}}, 0x44) socket$packet(0x11, 0x2, 0x300) 743.297406ms ago: executing program 1 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003240)=@newtfilter={0x38, 0x28, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800210200000000030000001d01339e08000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x24}}, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x800) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x5214, @remote, 0x8}, 0x1c) 670.443539ms ago: executing program 1 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 584.51441ms ago: executing program 0 (id=1487): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) (rerun: 64) 582.734863ms ago: executing program 2 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) 581.343749ms ago: executing program 3 (id=1489): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2={0x1f, 0x0, @none}, &(0x7f00000000c0)=0x80, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x160, 0x308, 0xc0, 0x308, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x68}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x9, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e23}}}, {{@ip={@multicast1, @multicast1, 0xff, 0x0, 'hsr0\x00', 'vlan0\x00', {}, {}, 0x11, 0x1, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x4}}}, {{@ip={@local, @empty, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x32, 0x0, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x65}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x18}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x983, 0x400, 0xfed, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, 0x0) bind$can_raw(r1, &(0x7f0000000000), 0x10) bind$can_raw(r1, &(0x7f0000000100), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8f2a7e97670a148637b4000000000000006910500000000000040000000000006260acf8bafbe763ced8689dd09c3b1e40d766bc69003c6170bea34f2a33aa43c9a66a762051cfb50104adedbbff2972bb3b4f73393800000000745576f073e24f2d864217d301967dc89df91a831df15881"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 557.230673ms ago: executing program 4 (id=1490): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="63cbed85ab485af8fe3c76c98c0e5a5a5b9f365c259575159c06585591a1f01f3155dcb1f3c0bd30442abf9e3ef3feb5a97b84f2cdac68ca9b40214587387c096684da2e47bad564be3ad6311b849d027d1c919eb0c2c2e6d9ca2516e9e8c4cab5cf16a05456fd8238e735384da4c5fe0644059d2ed327"], 0x84}}, 0x240000c0) 520.457176ms ago: executing program 1 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000640)={0x0, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) 372.209272ms ago: executing program 2 (id=1492): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 371.57997ms ago: executing program 0 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x2a, 0x821, 0x0, 0x0, {0xa, 0x0, 0x2c00}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x4}]}, 0x20}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) 371.050409ms ago: executing program 4 (id=1494): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 357.733138ms ago: executing program 1 (id=1495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [], 0x0, 0x0, 0x8d564dafc0ab7374}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x483) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 279.349309ms ago: executing program 2 (id=1496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x7) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0013000000080003"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="000018110000100015000000000000000095d1eb000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(0x0) 276.664902ms ago: executing program 0 (id=1497): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004d80)={'tunl0\x00', &(0x7f0000004cc0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xf4b, 0xc, {{0x1e, 0x4, 0x0, 0x3, 0x78, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x63, 0x3, 0xb, [{@loopback, 0xffff}, {@broadcast, 0x5}, {@loopback, 0xff}, {@local, 0x120}, {@local, 0x4700}, {@private=0xa010101, 0xff1}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@rand_addr=0x64010100, 0x8000}]}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0x8, [{@remote, 0xffff0001}]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000004dc0)={@mcast2, r9}, 0x14) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x20) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2100) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) unshare(0x400) r13 = socket$vsock_stream(0x28, 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000004c40)={0x0, 0x0}) recvmmsg(r13, &(0x7f0000004a00)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000700)=""/228, 0xe4}], 0x4}, 0x101}, {{&(0x7f0000000140)=@caif=@rfm, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000800)=""/164, 0xa4}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/206, 0xce}], 0x5, &(0x7f0000000300)=""/62, 0x3e}, 0x800}, {{&(0x7f0000000c00)=@isdn, 0x80, &(0x7f0000001240)=[{&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/251, 0xfb}, {&(0x7f0000000e80)=""/49, 0x31}, {&(0x7f0000000ec0)=""/234, 0xea}, {&(0x7f0000000fc0)=""/14, 0xe}, {&(0x7f0000001000)=""/243, 0xf3}, {&(0x7f0000001100)=""/183, 0xb7}, {&(0x7f00000011c0)=""/95, 0x5f}], 0x8}}, {{&(0x7f00000012c0)=@tipc=@name, 0x80, &(0x7f0000002540)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/223, 0xdf}, {&(0x7f0000002440)=""/139, 0x8b}, {&(0x7f0000002500)=""/3, 0x3}], 0x4, &(0x7f0000002580)=""/18, 0x12}, 0x7fff}, {{&(0x7f00000025c0)=@un=@abs, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002640)=""/75, 0x4b}, {&(0x7f00000026c0)=""/248, 0xf8}, {&(0x7f00000027c0)=""/139, 0x8b}, {&(0x7f0000002880)=""/129, 0x81}, {&(0x7f0000002940)=""/225, 0xe1}], 0x5, &(0x7f0000002ac0)=""/134, 0x86}, 0x3}, {{&(0x7f0000002b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/218, 0xda}], 0x1, &(0x7f0000002d40)=""/116, 0x74}, 0x42d0b4f5}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002dc0)=""/88, 0x58}], 0x1, &(0x7f0000002e80)=""/45, 0x2d}, 0x3}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002ec0)=""/168, 0xa8}, {&(0x7f0000002f80)=""/149, 0x95}, {&(0x7f0000003040)=""/41, 0x29}, {&(0x7f0000003080)=""/240, 0xf0}], 0x4, &(0x7f00000031c0)=""/239, 0xef}, 0xd}, {{&(0x7f00000032c0)=@tipc=@name, 0x80, &(0x7f0000004940)=[{&(0x7f0000003340)=""/225, 0xe1}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)=""/127, 0x7f}, {&(0x7f00000035c0)=""/190, 0xbe}, {&(0x7f0000003680)=""/132, 0x84}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/98, 0x62}, {&(0x7f00000047c0)=""/248, 0xf8}, {&(0x7f00000048c0)=""/71, 0x47}], 0x9}, 0x8001}], 0x9, 0x40, &(0x7f0000004c80)={r14, r15+60000000}) (async) r16 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r16, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async, rerun: 32) write(r12, &(0x7f0000000340)="08000000010000", 0x7) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, 0x100}, 0x1c) 188.477676ms ago: executing program 3 (id=1498): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0), 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x4a, 0x5000000, 0x401, 0x9}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$tun(r9, &(0x7f0000000300)={@void, @void, @x25={0x0, 0x4a, 0x27, "381afe92ae7903f73fb0de56fe9bcc9bc45eea2167d0bf0aa4b0d0ce140d854b15999342bc79df27c34767f18c997f41b93a08afc9eccb810a7799220b8ed9b4ceb00b6e026d4edc7bb8f10dfdc529d977cb09d4c432f91c36764ea1c1823db16e60b5d63cb7233ec7563e379a714a3462b099d9f5204f2a14872ede8a263ec89a799f48ebd8db49105f51e407f7ef73b4c9e003731e91ef5f657852fe879d6bb3c1"}}, 0xa5) close(r8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x14}) recvmsg(r7, &(0x7f00000001c0)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x3}, 0x100) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) 186.734598ms ago: executing program 1 (id=1499): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4000004) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4000004) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@remote, @remote, @val={@void, {0x8035}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) (async) close(r0) 129.186194ms ago: executing program 1 (id=1500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000240)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0]}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x9, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x5, 0x1, [0x1000]}, &(0x7f0000000580)=0xa) (rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000005c0)={r8, 0x1}, 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000500000900020073797a32"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x4, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000940)="bb0c1fd9d78b693388d43f448b9dc08c7d81f2455fe05ebde0ccdd409406870feee1f5fb61d1ff6ad39b36fe466fe0b26c1c01b2c95b01840ff82b588b4b669564414b0b5f93de0fc24efd8a6dfac71bb3dbe2723120999c33d4da691648336e82b3a925107ffd68f283ac4db91288184d61ece7c1d4d2d934a68a4079030aaf5c73759007ec3962", &(0x7f0000000080)=@buf="b4d0", 0x4}, 0x20) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) 58.616098ms ago: executing program 2 (id=1501): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 376.384µs ago: executing program 0 (id=1502): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0xf3, 0x4, 0x3}) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 4 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010918"], &(0x7f00000002c0)=""/7, 0x33, 0x7, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000034001680300001802c000c8014"], 0x5c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @remote}) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001f40)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x98) kernel console output (not intermixed with test programs): ve_1 [ 68.932968][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.964135][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.982570][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.013256][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.027081][ T5235] Bluetooth: hci0: command tx timeout [ 69.029902][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.046750][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.057647][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.068800][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.077651][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.086640][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.096458][ T5235] Bluetooth: hci1: command tx timeout [ 69.102040][ T4625] Bluetooth: hci2: command tx timeout [ 69.110265][ T5336] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11'. [ 69.130850][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 69.141329][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 69.178916][ T4625] Bluetooth: hci4: command tx timeout [ 69.184753][ T5235] Bluetooth: hci3: command tx timeout [ 69.185201][ T5239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.222033][ T5239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.232728][ T5239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.241924][ T5239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.368748][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.389001][ T5343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.408882][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.444653][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.467456][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.506346][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.523888][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.584386][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.601304][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.692008][ T2577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.714681][ T2577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.850171][ T5356] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.900576][ T5356] Zero length message leads to an empty skb [ 69.924315][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.932494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.382602][ T5374] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 70.449999][ T5374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.876028][ T5388] hsr_slave_1 (unregistering): left promiscuous mode [ 70.973065][ T5394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22'. [ 71.045554][ T5407] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.25'. [ 71.088475][ T5407] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 71.109529][ T5235] Bluetooth: hci0: command tx timeout [ 71.173626][ T5410] syzkaller1: entered promiscuous mode [ 71.179713][ T5410] syzkaller1: entered allmulticast mode [ 71.187078][ T5235] Bluetooth: hci2: command tx timeout [ 71.188128][ T4625] Bluetooth: hci1: command tx timeout [ 71.250359][ T5411] netlink: 'syz.2.27': attribute type 12 has an invalid length. [ 71.258748][ T4625] Bluetooth: hci3: command tx timeout [ 71.258769][ T5235] Bluetooth: hci4: command tx timeout [ 71.284680][ T5411] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 71.352995][ T5417] netlink: 'syz.3.29': attribute type 3 has an invalid length. [ 71.487080][ T5424] netlink: 252 bytes leftover after parsing attributes in process `syz.2.30'. [ 71.579595][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.589494][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.593623][ T5428] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 71.731667][ T5428] bond1: entered promiscuous mode [ 71.740634][ T5435] Illegal XDP return value 1620221279 on prog (id 14) dev N/A, expect packet loss! [ 71.744340][ T5428] bond1: entered allmulticast mode [ 71.810319][ T5428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.982215][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 72.095537][ T5446] bond1: entered allmulticast mode [ 72.141237][ T5452] veth1: entered promiscuous mode [ 72.158688][ T5452] veth1: left promiscuous mode [ 72.217544][ T5454] netlink: 'syz.0.39': attribute type 12 has an invalid length. [ 72.348960][ T5463] netlink: 792 bytes leftover after parsing attributes in process `syz.3.40'. [ 72.360274][ T5463] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 72.386688][ T5465] netlink: 112 bytes leftover after parsing attributes in process `syz.4.42'. [ 72.423585][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 72.439115][ T5458] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 72.447875][ T5458] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 72.457937][ T5461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.487222][ T5469] pimreg: entered allmulticast mode [ 72.512843][ T5469] pimreg: left allmulticast mode [ 72.672567][ T5479] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 72.745066][ T5487] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 72.789763][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.798116][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.872417][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.880115][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.888224][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.895400][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.915185][ T5487] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 72.932830][ T5494] bridge_slave_1: left allmulticast mode [ 72.956255][ T5494] bridge_slave_1: left promiscuous mode [ 72.963217][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.978507][ T5494] bridge_slave_0: left allmulticast mode [ 72.984471][ T5494] bridge_slave_0: left promiscuous mode [ 72.991922][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.028492][ T5494] bond0: (slave bridge0): Releasing backup interface [ 73.083334][ T5505] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 73.389612][ T5521] Cannot find add_set index 0 as target [ 73.490596][ T5526] batadv1: entered allmulticast mode [ 73.668047][ T5533] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 74.084090][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.202637][ T5559] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 74.324602][ T5571] __nla_validate_parse: 5 callbacks suppressed [ 74.324622][ T5571] netlink: 168 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.359158][ T5571] netlink: 'syz.1.69': attribute type 2 has an invalid length. [ 74.367225][ T5571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.390775][ T5571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.556811][ T5583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.74'. [ 74.734592][ T5587] syzkaller1: entered promiscuous mode [ 74.757665][ T5587] syzkaller1: entered allmulticast mode [ 74.780051][ T5594] bond0: entered promiscuous mode [ 74.796514][ T5594] bond_slave_0: entered promiscuous mode [ 74.802464][ T5594] bond_slave_1: entered promiscuous mode [ 74.820065][ T5594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.840090][ T5594] bond0: left promiscuous mode [ 74.880810][ T5594] bond_slave_0: left promiscuous mode [ 74.888841][ T5594] bond_slave_1: left promiscuous mode [ 75.072146][ T5598] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.106814][ T5598] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.446058][ T5623] dccp_close: ABORT with 28 bytes unread [ 76.878747][ T5686] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.318008][ T5704] validate_nla: 1 callbacks suppressed [ 77.318029][ T5704] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 77.731975][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 77.802530][ T5724] netlink: 'syz.4.115': attribute type 2 has an invalid length. [ 77.805452][ T5722] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 77.821053][ T5725] netlink: 'syz.4.115': attribute type 2 has an invalid length. [ 77.898138][ T5729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.116'. [ 78.030921][ T5740] gretap1: entered allmulticast mode [ 78.103896][ T5739] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.119'. [ 78.125670][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 78.150972][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 78.537818][ T5768] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 78.571410][ T5771] netlink: 2 bytes leftover after parsing attributes in process `syz.4.129'. [ 78.874346][ T5789] geneve2: entered promiscuous mode [ 78.884406][ T5789] geneve2: entered allmulticast mode [ 79.642471][ T5825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.150'. [ 79.660429][ T5825] netlink: 21 bytes leftover after parsing attributes in process `syz.3.150'. [ 79.674373][ T5825] netlink: 21 bytes leftover after parsing attributes in process `syz.3.150'. [ 79.751639][ T5828] netlink: 'syz.2.149': attribute type 9 has an invalid length. [ 79.759781][ T5828] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.149'. [ 79.793415][ T5828] netlink: 'syz.2.149': attribute type 9 has an invalid length. [ 79.801206][ T5828] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.149'. [ 79.920210][ T5839] netlink: 'syz.4.154': attribute type 4 has an invalid length. [ 79.930813][ T5839] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.154'. [ 80.077363][ T5842] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 80.095045][ T5842] netlink: 236 bytes leftover after parsing attributes in process `syz.0.156'. [ 80.546592][ T5875] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.161'. [ 81.264297][ T5920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.176'. [ 81.294394][ T5920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.176'. [ 81.313406][ T5914] netlink: 'syz.2.175': attribute type 5 has an invalid length. [ 81.477093][ T5934] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 81.559126][ T5934] veth1_macvtap: left promiscuous mode [ 81.574998][ T5938] sctp: [Deprecated]: syz.1.182 (pid 5938) Use of int in maxseg socket option. [ 81.574998][ T5938] Use struct sctp_assoc_value instead [ 81.657251][ T5235] Bluetooth: hci4: command tx timeout [ 81.837957][ T25] cfg80211: failed to load regulatory.db [ 83.309609][ T6024] ipt_REJECT: TCP_RESET invalid for non-tcp [ 83.691014][ T6048] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 83.713981][ T6048] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 84.157485][ T6064] netlink: 'syz.4.218': attribute type 2 has an invalid length. [ 84.243825][ T6070] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 84.343191][ T6074] sctp: [Deprecated]: syz.2.219 (pid 6074) Use of int in max_burst socket option. [ 84.343191][ T6074] Use struct sctp_assoc_value instead [ 84.444137][ T6068] syzkaller0: entered promiscuous mode [ 84.479494][ T6068] syzkaller0: entered allmulticast mode [ 86.116770][ T6104] __nla_validate_parse: 15 callbacks suppressed [ 86.116793][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 86.180468][ T6107] netlink: 'syz.3.231': attribute type 29 has an invalid length. [ 86.326234][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 128.657051][ T4625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.785368][ T4625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.892805][ T4625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.009736][ T4625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.018122][ T4625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.025453][ T4625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.093969][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.103045][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.111479][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.119808][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.141853][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 129.149675][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.177877][ T4625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.187504][ T4625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.195304][ T4625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.203594][ T4625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.250072][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 129.258799][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 129.368999][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 129.376211][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.416717][ T5243] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 129.458811][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.587531][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 129.606881][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 129.619800][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 129.631651][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 129.639661][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 129.639820][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 129.655271][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 129.666658][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 129.997992][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.152427][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.182074][ T6130] chnl_net:caif_netlink_parms(): no params data found [ 130.270750][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.368223][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.381196][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.389463][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.400191][ T6130] bridge_slave_0: entered allmulticast mode [ 130.409089][ T6130] bridge_slave_0: entered promiscuous mode [ 130.417377][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.424463][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.431965][ T6130] bridge_slave_1: entered allmulticast mode [ 130.439370][ T6130] bridge_slave_1: entered promiscuous mode [ 130.446464][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 130.498067][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.537575][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.697631][ T6130] team0: Port device team_slave_0 added [ 130.764691][ T6130] team0: Port device team_slave_1 added [ 130.829711][ T6134] chnl_net:caif_netlink_parms(): no params data found [ 130.840156][ T52] –eth0_vlan: left allmulticast mode [ 130.845620][ T52] –eth0_vlan: left promiscuous mode [ 130.857665][ T52] bridge0: port 2(–eth0_vlan) entered disabled state [ 130.868502][ T52] bridge_slave_0: left allmulticast mode [ 130.874186][ T52] bridge_slave_0: left promiscuous mode [ 130.880084][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.196081][ T5232] Bluetooth: hci6: command tx timeout [ 131.204583][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.221597][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.232603][ T52] bond0 (unregistering): Released all slaves [ 131.256992][ T5232] Bluetooth: hci5: command tx timeout [ 131.333149][ T52] bond1 (unregistering): Released all slaves [ 131.364809][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.371946][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.405080][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.443097][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.455629][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.463056][ T6125] bridge_slave_0: entered allmulticast mode [ 131.472042][ T6125] bridge_slave_0: entered promiscuous mode [ 131.513339][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 131.528383][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.535379][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.564687][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.604105][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.613238][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.621169][ T6125] bridge_slave_1: entered allmulticast mode [ 131.628313][ T6125] bridge_slave_1: entered promiscuous mode [ 131.710868][ T6136] chnl_net:caif_netlink_parms(): no params data found [ 131.739130][ T5232] Bluetooth: hci7: command tx timeout [ 131.750378][ T6130] hsr_slave_0: entered promiscuous mode [ 131.757146][ T6130] hsr_slave_1: entered promiscuous mode [ 131.763349][ T6130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.771045][ T6130] Cannot create hsr debugfs directory [ 131.816347][ T4625] Bluetooth: hci8: command tx timeout [ 131.817315][ T5232] Bluetooth: hci9: command tx timeout [ 131.881605][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.030689][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.194781][ T6125] team0: Port device team_slave_0 added [ 132.207799][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.215511][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.223585][ T6134] bridge_slave_0: entered allmulticast mode [ 132.244295][ T6134] bridge_slave_0: entered promiscuous mode [ 132.257689][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.264826][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.282946][ T6134] bridge_slave_1: entered allmulticast mode [ 132.294946][ T6134] bridge_slave_1: entered promiscuous mode [ 132.371117][ T6125] team0: Port device team_slave_1 added [ 132.410246][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.418351][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.426079][ T6129] bridge_slave_0: entered allmulticast mode [ 132.438427][ T6129] bridge_slave_0: entered promiscuous mode [ 132.471141][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.501094][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.508558][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.515775][ T6136] bridge_slave_0: entered allmulticast mode [ 132.537243][ T6136] bridge_slave_0: entered promiscuous mode [ 132.550287][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.565891][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.573251][ T6136] bridge_slave_1: entered allmulticast mode [ 132.580171][ T6136] bridge_slave_1: entered promiscuous mode [ 132.597984][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.605275][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.612598][ T6129] bridge_slave_1: entered allmulticast mode [ 132.620168][ T6129] bridge_slave_1: entered promiscuous mode [ 132.642558][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.655685][ T52] hsr_slave_0: left promiscuous mode [ 132.669539][ T52] hsr_slave_1: left promiscuous mode [ 132.677164][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.684601][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.693475][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.702712][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.728024][ T52] veth1_macvtap: left promiscuous mode [ 132.733883][ T52] veth0_macvtap: left promiscuous mode [ 132.745450][ T52] veth1_vlan: left promiscuous mode [ 132.753578][ T52] veth0_vlan: left promiscuous mode [ 133.020278][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182857][ T52] team0 (unregistering): Port device team_slave_1 removed [ 133.215620][ T52] team0 (unregistering): Port device team_slave_0 removed [ 133.266416][ T5232] Bluetooth: hci6: command tx timeout [ 133.346717][ T5232] Bluetooth: hci5: command tx timeout [ 133.635189][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.643298][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.673348][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.735078][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.769081][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.776310][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.803446][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.816739][ T5232] Bluetooth: hci7: command tx timeout [ 133.823174][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.845203][ T6134] team0: Port device team_slave_0 added [ 133.852983][ T6134] team0: Port device team_slave_1 added [ 133.861678][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.896860][ T5232] Bluetooth: hci8: command tx timeout [ 133.902327][ T5232] Bluetooth: hci9: command tx timeout [ 133.912495][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.973109][ T6136] team0: Port device team_slave_0 added [ 134.008905][ T6130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.048869][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.055866][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.082832][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.103808][ T6129] team0: Port device team_slave_0 added [ 134.113859][ T6129] team0: Port device team_slave_1 added [ 134.123434][ T6136] team0: Port device team_slave_1 added [ 134.147120][ T6125] hsr_slave_0: entered promiscuous mode [ 134.158563][ T6125] hsr_slave_1: entered promiscuous mode [ 134.164903][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.172595][ T6125] Cannot create hsr debugfs directory [ 134.195596][ T6130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.222485][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.229964][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.256203][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.401167][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.408574][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.438701][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.469517][ T6130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.484812][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.492013][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.519003][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.531871][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.556553][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.593307][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.645876][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.653072][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.680960][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.738079][ T6130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.835547][ T6134] hsr_slave_0: entered promiscuous mode [ 134.844700][ T6134] hsr_slave_1: entered promiscuous mode [ 134.858377][ T6134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.865988][ T6134] Cannot create hsr debugfs directory [ 135.054022][ T6136] hsr_slave_0: entered promiscuous mode [ 135.060918][ T6136] hsr_slave_1: entered promiscuous mode [ 135.068056][ T6136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.075619][ T6136] Cannot create hsr debugfs directory [ 135.122318][ T6129] hsr_slave_0: entered promiscuous mode [ 135.131001][ T6129] hsr_slave_1: entered promiscuous mode [ 135.137708][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.145290][ T6129] Cannot create hsr debugfs directory [ 135.336244][ T4625] Bluetooth: hci6: command tx timeout [ 135.419162][ T4625] Bluetooth: hci5: command tx timeout [ 135.443006][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.533851][ T6130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.544390][ T6130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.653401][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.699905][ T6130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.725770][ T6130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.811565][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.897413][ T4625] Bluetooth: hci7: command tx timeout [ 135.924140][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.976299][ T4625] Bluetooth: hci8: command tx timeout [ 135.976488][ T5232] Bluetooth: hci9: command tx timeout [ 136.191650][ T6134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.245575][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.275009][ T6134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.322091][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.350832][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.373724][ T6134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.407142][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.442898][ T6134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.464409][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.486627][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.514035][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.521713][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.544783][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.551969][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.745467][ T6134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.770914][ T6134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.823115][ T6134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.855859][ T6134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.932240][ T52] bridge_slave_1: left allmulticast mode [ 136.946242][ T52] bridge_slave_1: left promiscuous mode [ 136.952012][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.978548][ T52] bridge_slave_0: left allmulticast mode [ 136.984282][ T52] bridge_slave_0: left promiscuous mode [ 136.996459][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.019393][ T52] bridge_slave_1: left allmulticast mode [ 137.025090][ T52] bridge_slave_1: left promiscuous mode [ 137.042701][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.064210][ T52] bridge_slave_0: left allmulticast mode [ 137.073560][ T52] bridge_slave_0: left promiscuous mode [ 137.080385][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.093314][ T52] bridge_slave_1: left allmulticast mode [ 137.106158][ T52] bridge_slave_1: left promiscuous mode [ 137.111911][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.122272][ T52] bridge_slave_0: left allmulticast mode [ 137.130016][ T52] bridge_slave_0: left promiscuous mode [ 137.135761][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.426449][ T5232] Bluetooth: hci6: command tx timeout [ 137.500655][ T5232] Bluetooth: hci5: command tx timeout [ 137.982090][ T5232] Bluetooth: hci7: command tx timeout [ 138.060652][ T5232] Bluetooth: hci8: command tx timeout [ 138.066583][ T5232] Bluetooth: hci9: command tx timeout [ 138.555557][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.565562][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.582548][ T52] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 138.596611][ T52] bond0 (unregistering): Released all slaves [ 138.693526][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.705087][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.724434][ T52] bond0 (unregistering): Released all slaves [ 138.812521][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.824771][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.835603][ T52] bond0 (unregistering): Released all slaves [ 138.929262][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.945071][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.959719][ T52] bond0 (unregistering): Released all slaves [ 138.971978][ T52] bond1 (unregistering): Released all slaves [ 138.985104][ T52] bond2 (unregistering): Released all slaves [ 139.124780][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.347499][ T6130] veth0_vlan: entered promiscuous mode [ 139.381958][ T6130] veth1_vlan: entered promiscuous mode [ 139.455056][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.605120][ T6136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.681893][ T6136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.739998][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.779506][ T6136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.802286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.809452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.828910][ T6130] veth0_macvtap: entered promiscuous mode [ 139.842742][ T6136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.864813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.871970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.881943][ T6130] veth1_macvtap: entered promiscuous mode [ 140.022635][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.034777][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.044868][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.055470][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.066410][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.077382][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.087411][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.098284][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.109650][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.141055][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.159403][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.169428][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.179940][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.189902][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.200385][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.210532][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.221689][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.232883][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.274770][ T6130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.284790][ T6130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.294025][ T6130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.304794][ T6130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.557760][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.565649][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.664440][ T6125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.691349][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.709669][ T6125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.719786][ T6125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.757772][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.767749][ T6125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.768349][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.783107][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.867877][ T52] hsr_slave_0: left promiscuous mode [ 140.873758][ T52] hsr_slave_1: left promiscuous mode [ 140.881095][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.889038][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.899302][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.907002][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.916023][ T52] hsr_slave_0: left promiscuous mode [ 140.923363][ T52] hsr_slave_1: left promiscuous mode [ 140.930093][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.938620][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.947539][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.954979][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.973150][ T52] hsr_slave_0: left promiscuous mode [ 140.979213][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.986952][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.995206][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.003121][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.024388][ T52] hsr_slave_0: left promiscuous mode [ 141.035329][ T52] hsr_slave_1: left promiscuous mode [ 141.041749][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.049576][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.057991][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.065392][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.117602][ T52] veth1_macvtap: left promiscuous mode [ 141.123950][ T52] veth0_macvtap: left promiscuous mode [ 141.129786][ T52] veth1_vlan: left promiscuous mode [ 141.135087][ T52] veth0_vlan: left promiscuous mode [ 141.142339][ T52] veth1_macvtap: left promiscuous mode [ 141.148311][ T52] veth0_macvtap: left promiscuous mode [ 141.155720][ T52] veth0_macvtap: left promiscuous mode [ 141.162038][ T52] veth1_vlan: left promiscuous mode [ 141.167572][ T52] veth0_vlan: left promiscuous mode [ 141.173923][ T52] veth1_macvtap: left promiscuous mode [ 141.180395][ T52] veth0_macvtap: left promiscuous mode [ 141.186028][ T52] veth1_vlan: left promiscuous mode [ 141.191439][ T52] veth0_vlan: left promiscuous mode [ 141.811835][ T52] team0 (unregistering): Port device team_slave_1 removed [ 141.853202][ T52] team0 (unregistering): Port device team_slave_0 removed [ 142.424093][ T52] team0 (unregistering): Port device team_slave_1 removed [ 142.461588][ T52] team0 (unregistering): Port device team_slave_0 removed [ 143.062958][ T52] team0 (unregistering): Port device team_slave_1 removed [ 143.104102][ T52] team0 (unregistering): Port device team_slave_0 removed [ 144.003685][ T52] team0 (unregistering): Port device team_slave_1 removed [ 144.041272][ T52] team0 (unregistering): Port device team_slave_0 removed [ 144.399526][ T6136] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.431858][ T6134] veth0_vlan: entered promiscuous mode [ 144.489651][ T6129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.518119][ T2577] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.525369][ T2577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.541076][ T6134] veth1_vlan: entered promiscuous mode [ 144.574208][ T6129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.612050][ T6129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.694870][ T6129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.773444][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.780629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.835831][ T6134] veth0_macvtap: entered promiscuous mode [ 144.900562][ T6134] veth1_macvtap: entered promiscuous mode [ 145.014974][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.032024][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.054466][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.111261][ T6136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.113049][ T6301] nbd: must specify a device to reconfigure [ 145.168375][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.213751][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.251376][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.291806][ T6134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.302271][ T6134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.311343][ T6134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.321236][ T6134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.430415][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.502165][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.544690][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.586489][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.593618][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.659166][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.676483][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.726942][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.734090][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.757140][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.807634][ T2577] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.814957][ T2577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.840125][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.847319][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.856410][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.858999][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 145.864241][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.891786][ T6136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.940670][ T6125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.168945][ T6323] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.238'. [ 146.250881][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 146.334863][ T6323] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 146.395953][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.425976][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.487442][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.655509][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.678433][ T6136] veth0_vlan: entered promiscuous mode [ 146.713962][ T6136] veth1_vlan: entered promiscuous mode [ 146.752842][ T6125] veth0_vlan: entered promiscuous mode [ 146.790625][ T6125] veth1_vlan: entered promiscuous mode [ 146.799162][ T6136] veth0_macvtap: entered promiscuous mode [ 146.833405][ T6129] veth0_vlan: entered promiscuous mode [ 146.859012][ T6136] veth1_macvtap: entered promiscuous mode [ 146.888053][ T6129] veth1_vlan: entered promiscuous mode [ 146.929405][ T6125] veth0_macvtap: entered promiscuous mode [ 146.957774][ T6136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.971239][ T6136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.982501][ T6136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.005995][ T6136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.023748][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.064283][ T6125] veth1_macvtap: entered promiscuous mode [ 147.073906][ T6136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.098741][ T6136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.108969][ T6136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.119570][ T6136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.131437][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.140857][ T6129] veth0_macvtap: entered promiscuous mode [ 147.149130][ T6346] pim6reg1: entered promiscuous mode [ 147.154643][ T6346] pim6reg1: entered allmulticast mode [ 147.179604][ T6129] veth1_macvtap: entered promiscuous mode [ 147.194998][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 147.212752][ T6136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.222095][ T6136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.231539][ T6136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.241553][ T6136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.266213][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.282621][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.293944][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.314602][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.327620][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.344514][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.358712][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.381987][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 147.395746][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 147.440561][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.455701][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.470350][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.481172][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.492210][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.502946][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.514165][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.539860][ T6125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.548803][ T6125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.576163][ T6125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.585822][ T6125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.641985][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.663290][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.673892][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.697307][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.707395][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.723172][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.733550][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.746542][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.758784][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.784066][ T6359] netlink: 'syz.2.254': attribute type 4 has an invalid length. [ 147.807174][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.818552][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.828856][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.839552][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.850778][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.861325][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.871318][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.883271][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.894332][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.945651][ T6129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.973889][ T6129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.983503][ T6129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.998385][ T6129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.019383][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.050687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.155920][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 148.155919][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 148.186929][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.203244][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.268834][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.281150][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.300941][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.308919][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.385238][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 148.404705][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.425829][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.447387][ T6379] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 148.455715][ T6379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.259'. [ 148.481283][ T6379] bridge0: port 3(dummy0) entered blocking state [ 148.488715][ T6379] bridge0: port 3(dummy0) entered disabled state [ 148.496055][ T6379] dummy0: entered allmulticast mode [ 148.505513][ T6379] dummy0: entered promiscuous mode [ 148.515077][ T6379] bridge0: port 3(dummy0) entered blocking state [ 148.521588][ T6379] bridge0: port 3(dummy0) entered forwarding state [ 148.560672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.581770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.854664][ T6400] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 149.278545][ T6420] geneve2: entered promiscuous mode [ 149.283812][ T6420] geneve2: entered allmulticast mode [ 149.420731][ T6420] geneve2: entered promiscuous mode [ 149.426005][ T6420] geneve2: entered allmulticast mode [ 149.997079][ T6453] netlink: 'syz.2.278': attribute type 10 has an invalid length. [ 150.011256][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.018823][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.050298][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.057539][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.065019][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.072227][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.128257][ T6453] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.453974][ T6476] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 150.882626][ T6499] __nla_validate_parse: 18 callbacks suppressed [ 150.882647][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 150.927949][ T6502] x_tables: duplicate underflow at hook 1 [ 151.203416][ T6519] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.224546][ T6519] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 151.244415][ T6519] bridge_slave_0: default FDB implementation only supports local addresses [ 151.268568][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 152.024765][ T6554] netlink: 80 bytes leftover after parsing attributes in process `syz.4.310'. [ 152.042464][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 152.092735][ T6554] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 152.111655][ T6561] tipc: Started in network mode [ 152.122346][ T6554] netlink: 512 bytes leftover after parsing attributes in process `syz.4.310'. [ 152.139331][ T6561] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 152.163975][ T6561] tipc: Enabled bearer , priority 10 [ 152.305356][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.313'. [ 152.470024][ T6578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.316'. [ 152.544871][ T6582] IPv6: sit1: Disabled Multicast RS [ 152.902533][ T6606] netlink: 216 bytes leftover after parsing attributes in process `syz.0.321'. [ 152.973741][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 153.290342][ T5311] tipc: Node number set to 4269801488 [ 153.317491][ T6634] netlink: 84 bytes leftover after parsing attributes in process `syz.2.329'. [ 153.721674][ T6655] xt_CT: No such helper "syz1" [ 154.021629][ T6671] netlink: 'syz.4.341': attribute type 12 has an invalid length. [ 155.067794][ T6708] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 155.099275][ T6708] netlink: 'syz.4.351': attribute type 6 has an invalid length. [ 155.126336][ T6708] netlink: 'syz.4.351': attribute type 5 has an invalid length. [ 155.315824][ T6721] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 155.323760][ T6721] nbd: couldn't find a device at index 2097172 [ 155.408318][ T6721] netlink: 'syz.2.359': attribute type 2 has an invalid length. [ 155.563905][ T6737] tipc: Started in network mode [ 155.568997][ T6737] tipc: Node identity ac14140f, cluster identity 4711 [ 155.576902][ T6737] tipc: New replicast peer: 255.255.255.255 [ 155.584662][ T6737] tipc: Enabled bearer , priority 10 [ 156.097501][ T6762] netlink: 'syz.4.372': attribute type 11 has an invalid length. [ 156.193920][ T6768] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 156.378446][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.453683][ T6778] __nla_validate_parse: 20 callbacks suppressed [ 156.453706][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 156.482088][ T6786] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.380'. [ 156.494745][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.541390][ T6778] bridge_slave_0 (unregistering): left allmulticast mode [ 156.552737][ T6778] bridge_slave_0 (unregistering): left promiscuous mode [ 156.565711][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.660702][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.706245][ T5282] tipc: Node number set to 2886997007 [ 156.786432][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.828396][ T6786] batadv_slave_1: entered promiscuous mode [ 156.835618][ T6786] batadv_slave_1: entered allmulticast mode [ 157.409198][ T6818] netlink: 'syz.2.389': attribute type 21 has an invalid length. [ 157.449555][ T6818] netlink: 156 bytes leftover after parsing attributes in process `syz.2.389'. [ 157.606062][ T6828] IPv6: NLM_F_REPLACE set, but no existing node found! [ 158.254829][ C0] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(65537896035576) <= P.seqno(65537896035575) <= S.SWH(65537896035650)) and (P.ackno exists or LAWL(187444137958434) <= P.ackno(187444137958434) <= S.AWH(187444137958434), sending SYNC... [ 158.413313][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 158.424518][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 158.468407][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 158.505212][ T6870] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 158.557286][ T6870] team0: Port device netdevsim0 added [ 158.668885][ T6873] IPv4: Oversized IP packet from 127.202.26.0 [ 158.790959][ T6882] netlink: 'syz.1.410': attribute type 3 has an invalid length. [ 158.833178][ T6882] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.410'. [ 158.892961][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 158.918055][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 158.933228][ T6887] netlink: 92 bytes leftover after parsing attributes in process `syz.2.411'. [ 159.108400][ T6896] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 159.235354][ T6901] delete_channel: no stack [ 160.399449][ T6972] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 161.313810][ T6986] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 161.336453][ T6986] bridge0: port 3(team0) entered blocking state [ 161.349537][ T6986] bridge0: port 3(team0) entered disabled state [ 161.371388][ T6986] team0: entered allmulticast mode [ 161.384434][ T6986] team_slave_0: entered allmulticast mode [ 161.402146][ T6986] team_slave_1: entered allmulticast mode [ 161.417924][ T6986] team0: entered promiscuous mode [ 161.424378][ T6986] team_slave_0: entered promiscuous mode [ 161.443918][ T6986] team_slave_1: entered promiscuous mode [ 161.454025][ T6986] bridge0: port 3(team0) entered blocking state [ 161.460508][ T6986] bridge0: port 3(team0) entered forwarding state [ 161.498477][ T6998] netlink: 'syz.2.446': attribute type 22 has an invalid length. [ 161.526347][ T6998] __nla_validate_parse: 13 callbacks suppressed [ 161.526365][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 161.577582][ T7004] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 161.635670][ T7005] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 161.871191][ T7041] xt_SECMARK: invalid mode: 0 [ 162.119302][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 162.145066][ T7064] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.460'. [ 162.170638][ T7063] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.460'. [ 162.296622][ T7066] pimreg: entered allmulticast mode [ 162.307409][ T7070] pimreg: left allmulticast mode [ 162.804439][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 162.840828][ T7105] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 162.877734][ T7109] netlink: 'syz.1.471': attribute type 13 has an invalid length. [ 162.906771][ T7109] netlink: 'syz.1.471': attribute type 58 has an invalid length. [ 162.935106][ T7109] netlink: 152 bytes leftover after parsing attributes in process `syz.1.471'. [ 163.119031][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 163.498146][ T7143] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 163.535137][ T7143] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.481'. [ 163.952635][ T7166] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 164.215345][ T7165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.222405][ T5232] Bluetooth: hci9: command tx timeout [ 164.247699][ T7165] bond1: (slave bond2): making interface the new active one [ 164.257214][ T7165] bond1: (slave bond2): Enslaving as an active interface with an up link [ 164.276330][ T7177] netlink: 'syz.0.486': attribute type 21 has an invalid length. [ 164.284730][ T7177] netlink: 156 bytes leftover after parsing attributes in process `syz.0.486'. [ 164.763294][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 165.119255][ T7230] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.241452][ T7242] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 165.266328][ T7242] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 165.310387][ T7242] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 165.398092][ T7252] netlink: 'syz.2.504': attribute type 2 has an invalid length. [ 165.542598][ T7259] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 165.598151][ T7259] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 165.833949][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.860700][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.867950][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.057278][ T7279] team_slave_0 (unregistering): left promiscuous mode [ 166.084657][ T7279] team_slave_0 (unregistering): left allmulticast mode [ 166.130408][ T7279] team0: Port device team_slave_0 removed [ 166.303721][ T7298] netlink: 'syz.3.518': attribute type 21 has an invalid length. [ 166.396569][ T7302] netlink: 'syz.3.521': attribute type 10 has an invalid length. [ 166.413773][ T7302] bridge0: port 3(dummy0) entered disabled state [ 166.424432][ T7302] bridge0: port 3(dummy0) entered blocking state [ 166.430948][ T7302] bridge0: port 3(dummy0) entered forwarding state [ 166.441077][ T7302] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.694919][ T7314] __nla_validate_parse: 7 callbacks suppressed [ 166.694941][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 166.725188][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 167.560341][ T7346] netlink: 'syz.2.538': attribute type 4 has an invalid length. [ 167.572977][ T7346] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.538'. [ 167.604996][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.643126][ T7350] x_tables: duplicate underflow at hook 1 [ 167.709999][ T7356] netlink: zone id is out of range [ 167.715724][ T7356] netlink: zone id is out of range [ 167.727549][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 167.789989][ T7356] netlink: zone id is out of range [ 167.795174][ T7356] netlink: zone id is out of range [ 167.829240][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.889067][ T7360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.899429][ T7367] netlink: zone id is out of range [ 167.904584][ T7367] netlink: zone id is out of range [ 167.911777][ T7356] netlink: zone id is out of range [ 167.941491][ T7367] netlink: zone id is out of range [ 167.942031][ T7356] netlink: zone id is out of range [ 167.951940][ T7367] netlink: del zone limit has 4 unknown bytes [ 167.961344][ T7353] bridge_slave_0 (unregistering): left allmulticast mode [ 167.971753][ T7353] bridge_slave_0 (unregistering): left promiscuous mode [ 167.979228][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.041836][ T7365] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 168.590784][ T7396] ebt_limit: overflow, try lower: 570423552/2483027968 [ 168.603006][ T7397] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 168.809147][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 168.827258][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.551'. [ 168.849446][ T7406] netlink: 92 bytes leftover after parsing attributes in process `syz.2.555'. [ 168.911829][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.949311][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.118417][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 169.129590][ T7426] xt_ecn: cannot match TCP bits for non-tcp packets [ 169.281726][ T7435] bridge0: entered allmulticast mode [ 169.681154][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'. [ 169.830425][ T7462] tipc: Enabled bearer , priority 10 [ 169.896010][ T7467] tipc: Enabling of bearer rejected, already enabled [ 169.966980][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.569'. [ 170.114531][ T7480] v: renamed from veth1_virt_wifi (while UP) [ 170.430178][ T7495] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 170.437409][ T7500] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 170.455222][ T7495] netlink: 'syz.3.580': attribute type 2 has an invalid length. [ 170.471967][ T7495] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 170.484771][ T7500] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 170.713310][ T7513] : renamed from ipvlan1 [ 170.777727][ T7519] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.181571][ T7539] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 180.027649][ T7552] __nla_validate_parse: 10 callbacks suppressed [ 180.027675][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 180.729889][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 180.784100][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 180.896422][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 180.951582][ T7562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 181.219365][ T7577] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 181.312651][ T4625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.370220][ T4625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.419491][ T4625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.480542][ T4625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.491492][ T4625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.499171][ T4625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.708759][ T7587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.821125][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.858573][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.096886][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.609826][ T7587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.710438][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.772398][ T7608] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 182.782588][ T7608] syz_tun: entered promiscuous mode [ 182.793514][ T7615] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 182.817872][ T7608] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 182.833029][ T7604] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.941204][ T7587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.071419][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.162152][ T7587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.237415][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.258748][ T7630] dvmrp1: entered allmulticast mode [ 183.331822][ T7587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.382605][ T7587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.478751][ T7587] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.493239][ T7587] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.691218][ T52] bridge_slave_1: left allmulticast mode [ 183.697422][ T52] bridge_slave_1: left promiscuous mode [ 183.703403][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.751630][ T52] bridge_slave_0: left allmulticast mode [ 183.758204][ T52] bridge_slave_0: left promiscuous mode [ 183.776703][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.057708][ T7668] net_ratelimit: 12 callbacks suppressed [ 184.057729][ T7668] dccp_v6_rcv: dropped packet with invalid checksum [ 184.385542][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.398495][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.410109][ T52] bond0 (unregistering): Released all slaves [ 184.556007][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 184.597294][ T7672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.633'. [ 184.635179][ T7672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.633'. [ 184.710183][ T7672] vlan0: entered allmulticast mode [ 184.795902][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 184.811724][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 184.825854][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 185.064352][ T7683] netlink: 'syz.4.636': attribute type 19 has an invalid length. [ 185.256418][ T7703] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.639'. [ 185.318623][ T7703] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 185.785521][ T52] hsr_slave_0: left promiscuous mode [ 185.794553][ T52] hsr_slave_1: left promiscuous mode [ 185.813299][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.830757][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.847035][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.854780][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.908098][ T52] veth1_macvtap: left promiscuous mode [ 185.913683][ T52] veth0_macvtap: left promiscuous mode [ 185.920068][ T52] veth1_vlan: left promiscuous mode [ 185.925439][ T52] veth0_vlan: left promiscuous mode [ 186.361371][ T52] team0 (unregistering): Port device team_slave_1 removed [ 186.403624][ T52] team0 (unregistering): Port device team_slave_0 removed [ 186.785527][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.792904][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.801537][ T7584] bridge_slave_0: entered allmulticast mode [ 186.808780][ T7584] bridge_slave_0: entered promiscuous mode [ 186.817505][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.824759][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.832138][ T7584] bridge_slave_1: entered allmulticast mode [ 186.839607][ T7584] bridge_slave_1: entered promiscuous mode [ 186.847984][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'. [ 186.886809][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 187.146542][ T7753] tls_set_device_offload: netdev not found [ 187.183159][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.232482][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.449020][ T7584] team0: Port device team_slave_0 added [ 187.483629][ T7584] team0: Port device team_slave_1 added [ 187.683276][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.706758][ T7780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.730199][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.747362][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 187.856473][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.887412][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 187.929657][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.966822][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.064973][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.116956][ T7797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.136286][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 188.149451][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.158480][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.167105][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.210515][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 188.365623][ T7584] hsr_slave_0: entered promiscuous mode [ 188.387508][ T7584] hsr_slave_1: entered promiscuous mode [ 188.947987][ T7832] tap0: tun_chr_ioctl cmd 1074025675 [ 188.954465][ T7832] tap0: persist disabled [ 188.972490][ T7832] xt_HMARK: proto mask must be zero with L3 mode [ 189.403715][ T7855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.679'. [ 189.413577][ T7855] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 189.567165][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 189.612811][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.682'. [ 189.638866][ T7870] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 189.797536][ T7877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.986304][ T7584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.008924][ T7584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.067146][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.120477][ T7885] bridge_slave_0 (unregistering): left allmulticast mode [ 190.128023][ T7885] bridge_slave_0 (unregistering): left promiscuous mode [ 190.135178][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.152473][ T7584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.171716][ T7584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.520985][ T7910] lo: entered allmulticast mode [ 190.582524][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.594062][ T7907] can: request_module (can-proto-0) failed. [ 190.672236][ T7919] __nla_validate_parse: 1 callbacks suppressed [ 190.672257][ T7919] netlink: 68 bytes leftover after parsing attributes in process `syz.4.692'. [ 190.718424][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.767241][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.774410][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.832729][ T2577] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.839913][ T2577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.892840][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 190.932139][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.696'. [ 190.940126][ T7929] IPv6: sit1: Disabled Multicast RS [ 191.002888][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 191.074574][ T7584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.113953][ T7584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.351315][ T7945] netlink: 'syz.4.699': attribute type 12 has an invalid length. [ 191.415237][ T7945] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 191.495946][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.512207][ T7945] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 191.539843][ T7945] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 191.587457][ T7945] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 191.612490][ T7945] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 191.614161][ T7964] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 191.630748][ T7945] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 191.641561][ T7945] netlink: 'syz.4.699': attribute type 5 has an invalid length. [ 191.654560][ T7945] netlink: 196072 bytes leftover after parsing attributes in process `syz.4.699'. [ 191.664824][ T7964] team0: Failed to send options change via netlink (err -105) [ 191.731277][ T7964] team0: Port device netdevsim0 added [ 191.798625][ T7973] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 191.943493][ T7973] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 192.012428][ T7973] team0: Failed to send options change via netlink (err -105) [ 192.021842][ T7973] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 192.037061][ T7973] team0: Port device netdevsim0 removed [ 192.057221][ T7973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 192.159017][ T7584] veth0_vlan: entered promiscuous mode [ 192.242676][ T7584] veth1_vlan: entered promiscuous mode [ 192.375308][ T8004] trusted_key: syz.3.708 sent an empty control message without MSG_MORE. [ 192.412234][ T7584] veth0_macvtap: entered promiscuous mode [ 192.434398][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 192.555361][ T7584] veth1_macvtap: entered promiscuous mode [ 192.643582][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.661619][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.678445][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.700426][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.730663][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.790164][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.825403][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.851918][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.875880][ T8030] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 192.895175][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.925087][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.943573][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.965981][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.989656][ T8035] veth0_macvtap: mtu less than device minimum [ 193.012268][ T7584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.036190][ T7584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.044947][ T7584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.059627][ T7584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.079633][ T8021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 193.379754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.407132][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.534926][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 193.545601][ T2577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.588721][ T2577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.688508][ T8065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.721'. [ 194.017465][ T8092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 194.488717][ T8114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.513214][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.316186][ T8161] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 195.409129][ T8166] netlink: 'syz.0.745': attribute type 2 has an invalid length. [ 195.538074][ T8169] netlink: 'syz.4.747': attribute type 9 has an invalid length. [ 195.556199][ T8169] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 195.624223][ T8178] Bluetooth: MGMT ver 1.23 [ 195.788662][ T8180] Cannot find del_set index 3 as target [ 195.849699][ T8182] __nla_validate_parse: 2 callbacks suppressed [ 195.849994][ T8182] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.752'. [ 195.889857][ T8182] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.917809][ T8182] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 195.956670][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 195.977144][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 196.006906][ T8190] netlink: 'syz.4.755': attribute type 11 has an invalid length. [ 196.267214][ T8211] netlink: 216 bytes leftover after parsing attributes in process `syz.3.759'. [ 196.342720][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 196.515326][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 196.593568][ T8228] syz.1.765 (8228) used obsolete PPPIOCDETACH ioctl [ 196.736903][ T8236] vlan0: entered promiscuous mode [ 196.800359][ T8226] pimreg: entered allmulticast mode [ 197.177947][ T8258] sctp: [Deprecated]: syz.0.775 (pid 8258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.177947][ T8258] Use struct sctp_sack_info instead [ 197.294516][ T8265] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 197.303518][ T8265] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.779'. [ 197.346215][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 197.370290][ T8265] netlink: 11 bytes leftover after parsing attributes in process `syz.2.779'. [ 199.218766][ T8300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.788'. [ 199.515320][ T8315] x_tables: duplicate entry at hook 3 [ 199.585237][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.622469][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.651416][ T8318] bridge_slave_0 (unregistering): left allmulticast mode [ 199.659378][ T8318] bridge_slave_0 (unregistering): left promiscuous mode [ 199.667173][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.999498][ T8332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.290447][ T8343] netlink: 'syz.0.803': attribute type 96 has an invalid length. [ 200.961380][ T8373] __nla_validate_parse: 7 callbacks suppressed [ 200.961401][ T8373] netlink: 104 bytes leftover after parsing attributes in process `syz.2.812'. [ 200.984367][ T8375] netlink: 'syz.4.810': attribute type 9 has an invalid length. [ 200.998724][ T8375] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.810'. [ 201.013530][ T8375] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 201.027687][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 201.049767][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 201.077831][ T8373] netlink: 'syz.2.812': attribute type 20 has an invalid length. [ 201.285448][ T8388] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 201.306398][ T8388] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.817'. [ 201.356236][ T8388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 201.365185][ T8388] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 201.427342][ T8392] bridge0: entered allmulticast mode [ 203.264272][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 203.280471][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 203.422692][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 203.427730][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 203.477444][ T8414] delete_channel: no stack [ 203.581382][ T8420] team0: left allmulticast mode [ 203.592333][ T8420] team_slave_1: left allmulticast mode [ 203.602133][ T8420] team0: left promiscuous mode [ 203.614195][ T8420] team_slave_1: left promiscuous mode [ 203.621932][ T8420] bridge0: port 3(team0) entered disabled state [ 203.643264][ T8420] bridge_slave_1: left allmulticast mode [ 203.655126][ T8420] bridge_slave_1: left promiscuous mode [ 203.662963][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.689911][ T8420] bond0: (slave bond_slave_0): Releasing backup interface [ 203.718152][ T8420] bond0: (slave bond_slave_1): Releasing backup interface [ 203.752835][ T8420] team0: Port device team_slave_1 removed [ 203.771459][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.779464][ T8420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.791624][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.805453][ T8420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.878886][ T8421] wg2: entered promiscuous mode [ 203.954193][ T8421] team0: Port device wg2 added [ 204.652114][ T8448] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 205.228440][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.306194][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.366157][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.406114][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.415988][ T8457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.466378][ T8457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.311085][ T8496] __nla_validate_parse: 10 callbacks suppressed [ 206.311106][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 206.401465][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 206.454742][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 207.251173][ T8545] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 207.306983][ T8545] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.861'. [ 207.347201][ T8545] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 207.617051][ T8575] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 207.738324][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.871'. [ 207.797259][ T8585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.871'. [ 207.874766][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 208.338331][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 208.568864][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 208.725127][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 208.763567][ T8638] netlink: 'syz.2.889': attribute type 21 has an invalid length. [ 208.791423][ T8640] Cannot find add_set index 0 as target [ 209.441438][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.450291][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.464733][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.472709][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.937477][ T8706] vlan3: entered allmulticast mode [ 209.947490][ T8706] bond0: entered allmulticast mode [ 209.967772][ T8706] bond_slave_0: entered allmulticast mode [ 209.973556][ T8706] bond_slave_1: entered allmulticast mode [ 210.009374][ T8706] syz_tun: entered allmulticast mode [ 210.021828][ T8706] bond0: left allmulticast mode [ 210.038874][ T8706] bond_slave_0: left allmulticast mode [ 210.044400][ T8706] bond_slave_1: left allmulticast mode [ 210.066173][ T8706] syz_tun: left allmulticast mode [ 210.492639][ T8733] openvswitch: netlink: Duplicate key (type 0). [ 210.589395][ T8723] team0 (unregistering): Port device team_slave_0 removed [ 210.615604][ T8723] team0 (unregistering): Port device team_slave_1 removed [ 210.694795][ T8732] netlink: 'syz.2.921': attribute type 32 has an invalid length. [ 210.723620][ T8732] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 211.280820][ T8772] 8021q: VLANs not supported on hsr0 [ 211.521105][ T8789] __nla_validate_parse: 71 callbacks suppressed [ 211.521127][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 211.796675][ T8804] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 211.927709][ T8811] can: request_module (can-proto-0) failed. [ 211.958043][ T8809] can: request_module (can-proto-0) failed. [ 212.012037][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 212.071206][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 212.647020][ T8846] netlink: 'syz.2.952': attribute type 8 has an invalid length. [ 212.674085][ T8846] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.952'. [ 212.904711][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.958'. [ 213.077479][ T8868] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 213.123619][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 213.134513][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 213.184699][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'. [ 213.613813][ T8904] netlink: 100 bytes leftover after parsing attributes in process `syz.4.970'. [ 214.088541][ T8937] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 214.406893][ T8953] netlink: 'syz.2.985': attribute type 12 has an invalid length. [ 215.129380][ T8990] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 215.404923][ T9009] sctp: [Deprecated]: syz.3.1003 (pid 9009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.404923][ T9009] Use struct sctp_sack_info instead [ 215.641230][ T9017] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 215.651545][ T9018] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 216.515504][ T9062] x_tables: duplicate entry at hook 3 [ 216.783112][ T9077] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 217.005206][ T9093] __nla_validate_parse: 51 callbacks suppressed [ 217.005228][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 217.066530][ T9096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1032'. [ 217.123572][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 217.148302][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1033'. [ 217.165759][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 217.253902][ T9104] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.358337][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.361908][ T9111] netlink: 'syz.3.1037': attribute type 9 has an invalid length. [ 217.370457][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.622387][ T9125] unknown channel width for channel at 909000KHz? [ 217.734573][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 219.484697][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 219.726376][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 220.584674][ T9169] raw_sendmsg: syz.4.1055 forgot to set AF_INET. Fix it! [ 220.592553][ T9168] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 220.602707][ T9168] hsr0: entered promiscuous mode [ 220.608059][ T9168] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.620647][ T9168] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 220.641517][ T9168] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 220.654503][ T9168] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 220.739818][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 220.859716][ T9177] netlink: 'syz.2.1059': attribute type 5 has an invalid length. [ 220.995338][ T9181] netlink: 'syz.2.1061': attribute type 9 has an invalid length. [ 221.003531][ T9181] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1061'. [ 221.099666][ T9182] netlink: 'syz.2.1061': attribute type 9 has an invalid length. [ 221.142501][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.151448][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.160042][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.170403][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.179684][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.188101][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.530046][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 221.718005][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.725129][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.749596][ T9187] bridge_slave_0: entered allmulticast mode [ 221.757529][ T9187] bridge_slave_0: entered promiscuous mode [ 221.766037][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.773322][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.780761][ T9187] bridge_slave_1: entered allmulticast mode [ 221.788295][ T9187] bridge_slave_1: entered promiscuous mode [ 221.861668][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.874656][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.945245][ T9187] team0: Port device team_slave_0 added [ 221.974067][ T9187] team0: Port device team_slave_1 added [ 222.016766][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.023940][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.050768][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.064930][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.072186][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.099268][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.150409][ T9187] hsr_slave_0: entered promiscuous mode [ 222.157943][ T9187] hsr_slave_1: entered promiscuous mode [ 222.164091][ T9187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.172702][ T9187] Cannot create hsr debugfs directory [ 222.288716][ T9187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.368186][ T9187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.455362][ T9187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.588652][ T9187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.749034][ T9253] __nla_validate_parse: 3 callbacks suppressed [ 222.749057][ T9253] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1081'. [ 222.790065][ T9253] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1081'. [ 222.867916][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 222.877004][ T9187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.902452][ T9257] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1082'. [ 222.923440][ T9187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.948364][ T9187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.979453][ T9262] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.989963][ T9262] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.999821][ T9262] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.009201][ T9262] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.019139][ T9262] geneve2: entered promiscuous mode [ 223.025755][ T9262] geneve2: entered allmulticast mode [ 223.038027][ T9262] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.047500][ T9262] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.057008][ T9262] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.066814][ T9262] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.141564][ T9187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.243791][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 223.253380][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 223.264178][ T5232] Bluetooth: hci1: command tx timeout [ 223.272511][ T9271] netlink: 'syz.4.1086': attribute type 18 has an invalid length. [ 223.305651][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 223.342668][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 223.354445][ T9275] netlink: 'syz.4.1086': attribute type 18 has an invalid length. [ 223.391907][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.412070][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.430213][ T2577] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.437422][ T2577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.470006][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.477219][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.518382][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 223.603213][ T9283] xt_TCPMSS: Only works on TCP SYN packets [ 223.799603][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.889420][ T9295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1092'. [ 223.923703][ T9187] veth0_vlan: entered promiscuous mode [ 223.964131][ T9187] veth1_vlan: entered promiscuous mode [ 224.023481][ T9187] veth0_macvtap: entered promiscuous mode [ 224.049902][ T9187] veth1_macvtap: entered promiscuous mode [ 224.084639][ T9304] netlink: 'syz.2.1095': attribute type 32 has an invalid length. [ 224.108298][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.129701][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.174756][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.219133][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.266521][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.286187][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.309350][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.329859][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.343315][ T9319] xt_l2tp: v2 sid > 0xffff: 262144 [ 224.369830][ T9187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.386257][ T9187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.405320][ T9187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.419011][ T9187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.491506][ T9317] bond2: entered promiscuous mode [ 224.504824][ T9317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.589078][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.623928][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.634267][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.654849][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.666743][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.679014][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.848454][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.857801][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.886830][ T9333] netlink: 'syz.4.1105': attribute type 3 has an invalid length. [ 224.894808][ T9333] netlink: 'syz.4.1105': attribute type 3 has an invalid length. [ 224.935288][ T2577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.944645][ T2577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.196569][ T9326] chnl_net:caif_netlink_parms(): no params data found [ 225.302931][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.310503][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.318959][ T9326] bridge_slave_0: entered allmulticast mode [ 225.325891][ T9326] bridge_slave_0: entered promiscuous mode [ 225.336288][ T5238] Bluetooth: hci1: command tx timeout [ 225.343607][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.356674][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.364438][ T9326] bridge_slave_1: entered allmulticast mode [ 225.372123][ T9326] bridge_slave_1: entered promiscuous mode [ 225.429956][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.450505][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.510023][ T9326] team0: Port device team_slave_0 added [ 225.529774][ T9326] team0: Port device team_slave_1 added [ 225.571118][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.578294][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.605347][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.628327][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.635319][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.671460][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.748408][ T9326] hsr_slave_0: entered promiscuous mode [ 225.788502][ T9326] hsr_slave_1: entered promiscuous mode [ 225.807112][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.815026][ T9326] Cannot create hsr debugfs directory [ 226.045316][ T9380] xt_limit: Overflow, try lower: 2147483649/128 [ 226.277396][ T9389] tipc: Enabled bearer , priority 0 [ 226.464853][ T9326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.530753][ T9387] tipc: Resetting bearer [ 226.617962][ T9326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.787055][ T5238] Bluetooth: hci2: command tx timeout [ 226.789452][ T9326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.871955][ T9376] tipc: Disabling bearer [ 227.137884][ T9429] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 227.427004][ T5238] Bluetooth: hci1: command tx timeout [ 227.484986][ T9456] IPv6: sit1: Disabled Multicast RS [ 227.569110][ T9326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.595201][ T9326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.633199][ T9326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.714368][ T9464] netlink: 'syz.3.1138': attribute type 11 has an invalid length. [ 227.723849][ T9326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.817021][ T9473] netlink: 'syz.4.1141': attribute type 9 has an invalid length. [ 227.843272][ T9473] __nla_validate_parse: 18 callbacks suppressed [ 227.843292][ T9473] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1141'. [ 227.958249][ T9478] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 227.995900][ T9478] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 228.005544][ T9478] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1144'. [ 228.078653][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.097863][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.127205][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.134420][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.189956][ T9482] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 228.213449][ T9482] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 228.222464][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 228.241911][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 228.243348][ T9482] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 228.258649][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 228.268015][ T9482] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 228.307875][ T9326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.310483][ T9492] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1147'. [ 228.318494][ T9326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.340684][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.347852][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.476195][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 228.724746][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.857239][ T5238] Bluetooth: hci2: command tx timeout [ 228.864775][ T9326] veth0_vlan: entered promiscuous mode [ 228.880014][ T9521] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 228.890292][ T9521] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1153'. [ 228.900874][ T9521] netlink: 'syz.2.1153': attribute type 8 has an invalid length. [ 228.911478][ T9326] veth1_vlan: entered promiscuous mode [ 228.913704][ T9521] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 228.925225][ T9521] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1153'. [ 228.978539][ T9326] veth0_macvtap: entered promiscuous mode [ 228.992280][ T9326] veth1_macvtap: entered promiscuous mode [ 229.008695][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.020241][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.030374][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.040988][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.053523][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.064115][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.074749][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.084955][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.095510][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.106201][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.146565][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.180308][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.211659][ T9535] netlink: 'syz.1.1157': attribute type 30 has an invalid length. [ 229.244270][ T9326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.266491][ T9326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.309357][ T9326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.319502][ T9326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.506372][ T5238] Bluetooth: hci1: command tx timeout [ 229.546321][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.554203][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.622996][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.631214][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.993628][ T9578] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 230.019923][ T9578] team0: Device hsr_slave_0 failed to register rx_handler [ 230.050234][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 230.134327][ T9591] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 230.161505][ T9591] IPv6: sit1: Disabled Multicast RS [ 230.193909][ T9592] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 230.215023][ T9595] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 230.527447][ T9610] hsr0: entered allmulticast mode [ 230.540418][ T9610] hsr_slave_0: entered allmulticast mode [ 230.580813][ T9610] hsr_slave_1: entered allmulticast mode [ 230.617103][ T9611] hsr_slave_0: left promiscuous mode [ 230.721396][ T9611] hsr_slave_1: left promiscuous mode [ 230.772077][ T9611] hsr0 (unregistering): left allmulticast mode [ 230.812632][ T9632] x_tables: duplicate underflow at hook 2 [ 230.892147][ T9635] openvswitch: netlink: Message has 8 unknown bytes. [ 230.937207][ T5238] Bluetooth: hci2: command tx timeout [ 230.998010][ T9643] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 231.098285][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.098403][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.110550][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.124499][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.146045][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.159215][ T9652] syz.1.1194[9652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.187698][ T9654] openvswitch: netlink: Port 16777216 exceeds max allowable 65535 [ 232.116461][ T9703] tap0: tun_chr_ioctl cmd 1074025681 [ 232.447198][ T9721] netlink: 'syz.3.1215': attribute type 11 has an invalid length. [ 232.477846][ T9721] netlink: 'syz.3.1215': attribute type 11 has an invalid length. [ 232.505514][ T9721] netlink: 'syz.3.1215': attribute type 11 has an invalid length. [ 232.530576][ T9721] netlink: 'syz.3.1215': attribute type 11 has an invalid length. [ 232.563910][ T9721] netlink: 'syz.3.1215': attribute type 11 has an invalid length. [ 232.853868][ T9743] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 232.985291][ T9739] validate_nla: 6 callbacks suppressed [ 232.985314][ T9739] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 233.017904][ T5238] Bluetooth: hci2: command tx timeout [ 233.095976][ T9739] batman_adv: batadv0: Adding interface: team0 [ 233.132827][ T9739] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.181334][ T9739] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 234.001398][ T9807] __nla_validate_parse: 9 callbacks suppressed [ 234.001421][ T9807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1237'. [ 234.044028][ T9807] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 234.093856][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 234.137075][ T9814] netlink: 'syz.0.1238': attribute type 3 has an invalid length. [ 234.248772][ T9820] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 234.276308][ T9820] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.1241'. [ 234.285494][ T9820] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 234.421618][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.768336][ T9868] netlink: 'syz.2.1255': attribute type 4 has an invalid length. [ 234.796428][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 234.883821][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 234.912111][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 234.925479][ T9876] netlink: 53 bytes leftover after parsing attributes in process `syz.1.1256'. [ 234.941317][ T9871] netlink: 'syz.2.1258': attribute type 11 has an invalid length. [ 235.010996][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 235.025395][ T9880] syzkaller0: entered allmulticast mode [ 235.064272][ T9880] syzkaller0 (unregistering): left allmulticast mode [ 235.650865][ T9911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1267'. [ 235.741670][ T9911] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1267'. [ 235.863425][ T9921] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 235.924898][ T9922] No such timeout policy "syz0" [ 236.019721][ T9927] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 236.294666][ T9942] pimreg3: entered allmulticast mode [ 236.762866][ T9961] x_tables: duplicate underflow at hook 1 [ 236.942109][ T9964] bond3: entered promiscuous mode [ 236.982908][ T9964] bond3: entered allmulticast mode [ 237.012889][ T9964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.337029][T10020] xt_socket: unknown flags 0x3c [ 238.922489][T10037] ip6t_srh: unknown srh match flags 536B [ 239.060489][T10040] IPVS: length: 212 != 8 [ 239.291999][T10049] __nla_validate_parse: 10 callbacks suppressed [ 239.292023][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 239.628581][T10067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1321'. [ 239.839490][T10079] netlink: 'syz.0.1325': attribute type 7 has an invalid length. [ 239.847418][T10079] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1325'. [ 239.857332][T10079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1325'. [ 239.867336][T10079] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1325'. [ 239.876734][T10079] netlink: 'syz.0.1325': attribute type 7 has an invalid length. [ 239.884976][T10079] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1325'. [ 239.898849][T10080] netlink: 'syz.4.1323': attribute type 22 has an invalid length. [ 239.907478][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 239.958048][T10080] netlink: 'syz.4.1323': attribute type 153 has an invalid length. [ 240.159952][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 240.180201][T10099] ip_vti0: Master is either lo or non-ether device [ 240.358493][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 240.559819][T10119] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1337'. [ 240.721250][T10129] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 241.175446][T10153] netlink: 'syz.4.1350': attribute type 7 has an invalid length. [ 241.195952][T10153] netlink: 'syz.4.1350': attribute type 7 has an invalid length. [ 241.214361][T10145] dccp_close: ABORT with 32 bytes unread [ 241.267284][T10159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.665568][T10183] netlink: 'syz.4.1360': attribute type 2 has an invalid length. [ 241.763326][T10189] netlink: 'syz.0.1361': attribute type 29 has an invalid length. [ 241.783200][T10191] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 241.806841][T10189] netlink: 'syz.0.1361': attribute type 29 has an invalid length. [ 241.840950][T10189] tipc: Started in network mode [ 241.854427][T10189] tipc: Node identity , cluster identity 4711 [ 241.873621][T10189] tipc: Failed to set node id, please configure manually [ 241.886435][T10189] tipc: Enabling of bearer rejected, failed to enable media [ 243.036585][T10274] x_tables: duplicate entry at hook 3 [ 243.370420][T10297] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 243.904847][T10321] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.156020][T10334] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 244.279073][T10337] team0: Port device netdevsim0 added [ 244.511557][T10351] __nla_validate_parse: 27 callbacks suppressed [ 244.511581][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'. [ 244.537869][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 244.578178][T10357] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1415'. [ 244.684963][T10357] veth0_to_hsr: entered promiscuous mode [ 244.802322][T10357] veth0_to_hsr (unregistering): left promiscuous mode [ 244.888799][T10357] hsr_slave_0 (unregistering): left promiscuous mode [ 244.904539][T10365] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1418'. [ 244.925997][T10371] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1418'. [ 245.301078][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'. [ 245.425942][T10439] dccp_invalid_packet: P.Data Offset(0) too small [ 245.461586][T10446] netlink: zone id is out of range [ 245.606029][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 245.636872][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 245.647824][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 245.658590][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 245.790297][T10461] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.593177][T10498] validate_nla: 7 callbacks suppressed [ 246.593198][T10498] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 246.667197][T10503] bridge_slave_1: left allmulticast mode [ 246.674288][T10504] netlink: 'syz.1.1449': attribute type 4 has an invalid length. [ 246.682085][T10503] bridge_slave_1: left promiscuous mode [ 246.684409][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.729771][T10503] bond0: (slave bridge0): Releasing backup interface [ 246.737946][T10503] bridge0 (unregistering): left allmulticast mode [ 246.846493][T10509] bridge_slave_1: left allmulticast mode [ 246.852393][T10509] bridge_slave_1: left promiscuous mode [ 246.870494][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.892793][T10506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.924433][T10506] batadv_slave_0: entered promiscuous mode [ 246.996565][T10515] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 247.026358][T10517] netlink: 'syz.3.1453': attribute type 3 has an invalid length. [ 247.259578][T10536] xt_limit: Overflow, try lower: 0/0 [ 247.384662][ T5348] IPVS: starting estimator thread 0... [ 247.396815][T10541] netlink: 'syz.0.1460': attribute type 32 has an invalid length. [ 247.476361][T10546] IPVS: using max 17 ests per chain, 40800 per kthread [ 248.228199][T10584] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 249.092471][T10622] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 249.242016][T10631] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 249.521805][ T8750] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 249.545195][T10654] __nla_validate_parse: 82 callbacks suppressed [ 249.545217][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 249.587262][ T8946] [ 249.589661][ T8946] ============================================ [ 249.595842][ T8946] WARNING: possible recursive locking detected [ 249.602027][ T8946] 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0 Not tainted [ 249.609166][ T8946] -------------------------------------------- [ 249.615339][ T8946] syz.0.982/8946 is trying to acquire lock: [ 249.621257][ T8946] ffff88805b688078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 249.631804][ T8946] [ 249.631804][ T8946] but task is already holding lock: [ 249.639202][ T8946] ffff88805b688078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 249.648500][ T8946] [ 249.648500][ T8946] other info that might help us debug this: [ 249.656672][ T8946] Possible unsafe locking scenario: [ 249.656672][ T8946] [ 249.664145][ T8946] CPU0 [ 249.667452][ T8946] ---- [ 249.670750][ T8946] lock(&hdev->lock); [ 249.674856][ T8946] lock(&hdev->lock); [ 249.678956][ T8946] [ 249.678956][ T8946] *** DEADLOCK *** [ 249.678956][ T8946] [ 249.687126][ T8946] May be due to missing lock nesting notation [ 249.687126][ T8946] [ 249.695466][ T8946] 3 locks held by syz.0.982/8946: [ 249.700515][ T8946] #0: ffff88805b688d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_close+0x10a/0x210 [ 249.710162][ T8946] #1: ffff88805b688078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 249.719900][ T8946] #2: ffff88805b688690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x44/0x3d0 [ 249.730601][T10660] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 249.730834][ T8946] [ 249.730834][ T8946] stack backtrace: [ 249.744516][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.0.982 Not tainted 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0 [ 249.755237][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.765333][ T8946] Call Trace: [ 249.768644][ T8946] [ 249.768924][T10668] netlink: 'syz.2.1507': attribute type 12 has an invalid length. [ 249.771607][ T8946] dump_stack_lvl+0x241/0x360 [ 249.771642][ T8946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.782272][T10668] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 249.784102][ T8946] ? __pfx__printk+0x10/0x10 [ 249.784132][ T8946] ? lockdep_unlock+0x16a/0x300 [ 249.791805][T10668] caif:caif_disconnect_client(): nothing to disconnect [ 249.798756][ T8946] print_deadlock_bug+0x483/0x620 [ 249.798795][ T8946] validate_chain+0x15e2/0x5920 [ 249.798832][ T8946] ? validate_chain+0x11e/0x5920 [ 249.798858][ T8946] ? __pfx_validate_chain+0x10/0x10 [ 249.798902][ T8946] ? __pfx_validate_chain+0x10/0x10 [ 249.798931][ T8946] ? __pfx_lock_acquire+0x10/0x10 [ 249.845852][ T8946] ? is_bpf_text_address+0x26/0x2a0 [ 249.851109][ T8946] ? __pfx_lock_release+0x10/0x10 [ 249.856187][ T8946] ? mark_lock+0x9a/0x360 [ 249.860563][ T8946] __lock_acquire+0x1384/0x2050 [ 249.865467][ T8946] lock_acquire+0x1ed/0x550 [ 249.870010][ T8946] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 249.876385][ T8946] ? __pfx_lock_acquire+0x10/0x10 [ 249.881465][ T8946] ? __pfx___might_resched+0x10/0x10 [ 249.886800][ T8946] __mutex_lock+0x136/0xd70 [ 249.891344][ T8946] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 249.897791][ T8946] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.903734][ T8946] ? __mgmt_power_off+0x183/0x430 [ 249.908806][ T8946] ? mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 249.915191][ T8946] ? __pfx___mutex_lock+0x10/0x10 [ 249.920247][ T8946] ? rcu_is_watching+0x15/0xb0 [ 249.925066][ T8946] ? __mutex_lock+0x2ef/0xd70 [ 249.929823][ T8946] mgmt_remove_adv_monitor_complete+0xaf/0x550 [ 249.936075][ T8946] ? __pfx___mutex_lock+0x10/0x10 [ 249.941138][ T8946] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.947168][ T8946] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 249.953980][ T8946] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 249.960832][ T8946] hci_cmd_sync_dequeue+0x22b/0x3d0 [ 249.966087][ T8946] cmd_complete_rsp+0x4c/0x180 [ 249.970891][ T8946] mgmt_pending_foreach+0xd1/0x130 [ 249.976057][ T8946] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 249.981466][ T8946] __mgmt_power_off+0x183/0x430 [ 249.983968][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 249.986334][ T8946] ? __pfx___mgmt_power_off+0x10/0x10 [ 249.986372][ T8946] ? __mutex_trylock_common+0x183/0x2e0 [ 249.986400][ T8946] ? __pfx___might_resched+0x10/0x10 [ 249.986433][ T8946] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.986463][ T8946] ? rcu_is_watching+0x15/0xb0 [ 249.986489][ T8946] ? trace_contention_end+0x3c/0x120 [ 249.986516][ T8946] ? __mutex_lock+0x2ef/0xd70 [ 249.986543][ T8946] ? __mutex_unlock_slowpath+0x21d/0x750 [ 249.986569][ T8946] ? hci_dev_close_sync+0x572/0x11a0 [ 249.986600][ T8946] ? __pfx___mutex_lock+0x10/0x10 [ 249.986626][ T8946] ? lockdep_hardirqs_on+0x99/0x150 [ 249.986649][ T8946] ? _raw_spin_unlock_irq+0x2e/0x50 [ 249.986681][ T8946] ? drain_workqueue+0x2d3/0x3a0 [ 249.986703][ T8946] ? hci_discovery_set_state+0x57/0x180 [ 250.069396][ T8946] hci_dev_close_sync+0x665/0x11a0 [ 250.074568][ T8946] hci_dev_close+0x112/0x210 [ 250.079198][ T8946] sock_do_ioctl+0x158/0x460 [ 250.083820][ T8946] ? __pfx_sock_do_ioctl+0x10/0x10 [ 250.088966][ T8946] sock_ioctl+0x626/0x8e0 [ 250.093317][ T8946] ? __pfx_sock_ioctl+0x10/0x10 [ 250.098188][ T8946] ? __fget_files+0x29/0x470 [ 250.102791][ T8946] ? __fget_files+0x3f3/0x470 [ 250.107482][ T8946] ? __pfx_sock_ioctl+0x10/0x10 [ 250.112359][ T8946] __se_sys_ioctl+0xf9/0x170 [ 250.116989][ T8946] do_syscall_64+0xf3/0x230 [ 250.121505][ T8946] ? clear_bhb_loop+0x35/0x90 [ 250.126191][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.132133][ T8946] RIP: 0033:0x7f499257dff9 [ 250.136568][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.156312][ T8946] RSP: 002b:00007f49932f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.164740][ T8946] RAX: ffffffffffffffda RBX: 00007f4992735f80 RCX: 00007f499257dff9 [ 250.172746][ T8946] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009 [ 250.180720][ T8946] RBP: 00007f49925f0296 R08: 0000000000000000 R09: 0000000000000000 [ 250.188694][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.196695][ T8946] R13: 0000000000000000 R14: 00007f4992735f80 R15: 00007ffcb5c343c8 [ 250.204687][ T8946] [ 252.857341][ T5232] Bluetooth: hci8: command 0x0406 tx timeout [ 252.858477][ T5242] Bluetooth: hci7: command 0x0406 tx timeout [ 252.870295][ T54] Bluetooth: hci6: command 0x0406 tx timeout