last executing test programs: 3m38.813764558s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 3m19.958278798s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 3m8.532246327s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 2m24.05240553s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1m26.541412269s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1m10.48590775s ago: executing program 3 (id=3968): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = socket(0x1, 0x3, 0x0) (async) epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x3a) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09080800000000000100010000002000018008000300020000f51300020077673000000000000032000000000000"], 0x34}}, 0x0) (async) socket(0x0, 0x805, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x400) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a0000001300030068"], 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x1a, 0x0, 0x1}, 0x20) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000000000002a00000008002f000000000008000200", @ANYRES32], 0x24}, 0x4, 0x700000000000000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 1m10.036850913s ago: executing program 3 (id=3970): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x7800, 0x0, 0xb2c, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x40, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x88050}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb, 0x1, 0x0, 0xa, 0x1000, 0x2}, &(0x7f0000000500)=0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000540)={0x0, 'syzkaller1\x00', 0x4}, 0x18) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x8) (async) getsockopt$inet6_int(r9, 0x29, 0xcb, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) readv(r11, &(0x7f0000000900)=[{&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/79, 0x4f}, {&(0x7f0000000800)=""/253, 0xfd}], 0x3) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r12, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaca}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) (async) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4880}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$alg(r10, 0x0, 0x0, 0x800) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x80, r14, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10040) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb22bf8504a006bf0}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10004000) 1m9.704669925s ago: executing program 3 (id=3974): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 1m9.511120647s ago: executing program 3 (id=3976): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000000fa00000000014009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 1m9.261613628s ago: executing program 3 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c000004000000140001800800200000000000080002"], 0x2c}}, 0x0) 1m8.874882759s ago: executing program 3 (id=3982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffff01}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x90) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000140)) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) r9 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x18, @remote}, 0x10, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"/625], 0x268}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003e0029de670e0000000000000a00000004000000"], 0x18}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m8.367305336s ago: executing program 2 (id=3983): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000200000000000000000000000000000000000000000000000000000fcffffff0000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 1m8.038979218s ago: executing program 2 (id=3985): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000002d14142a00000000000000001400020002000000e0dab85c6c000000002800000d0001007564703a73"], 0x54}}, 0x0) 1m7.606379855s ago: executing program 2 (id=3988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796411000000000025000000851000000600000018000000", @ANYRES32, @ANYBLOB="00030100000000006608000000000000180000000000000000000000000000009500000000000000360a020000016500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m7.304549489s ago: executing program 2 (id=3991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000070048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001080004"], 0x9c}}, 0x0) 1m6.931163668s ago: executing program 2 (id=3994): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660a000000000000180000001100000000000000000000109500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m6.592205081s ago: executing program 2 (id=3997): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xa, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8, 0x1, 0x1, 0x8}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xffffffffffffc5ad, 0x8, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xffffffffffffc5ad, 0x8, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1836000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0xc, 0x12, &(0x7f0000000300)=""/18, 0x41000, 0x7f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x34c76eae, 0xf}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x3, 0x1, 0x5, 0x8}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x3, 0x4}], 0x10, 0x8}, 0x90) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1836000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0xc, 0x12, &(0x7f0000000300)=""/18, 0x41000, 0x7f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x34c76eae, 0xf}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x3, 0x1, 0x5, 0x8}, {0x0, 0x2, 0xa, 0x2}, {0x2, 0x3, 0x4}], 0x10, 0x8}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x56}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1ffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffc, 0xa01f}) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffc, 0xa01f}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) pipe(&(0x7f0000001180)={0xffffffffffffffff}) ioctl$SIOCRSACCEPT(r12, 0x40049409) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', r1, 0x13, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x1, 0x2}, 0x10, 0xffffffffffffffff, r3, 0x6, &(0x7f0000000940)=[r4, r5, r7, r9, r10, r11, r12], &(0x7f0000000980)=[{0x0, 0x2, 0xb, 0x9}, {0x1, 0x1, 0xc, 0xb}, {0x4, 0x1, 0x1}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x1, 0xc, 0x6}, {0x2, 0x5, 0x0, 0x3}], 0x10, 0xbe}, 0x90) r13 = socket(0xa, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) 1m0.351170433s ago: executing program 0 (id=4028): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000094e78c9dc33d32b4cc303447c2c1a106b63ff8c54ad72764"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x800c6613, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1952c0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="000008000100000000003d00000045000600040000000014aa00"/39, @ANYRESDEC=r1, @ANYRES32=0x41424344, @ANYBLOB="94000000907800000a0300050a00"/24], 0x46) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000e50000000000008500000075010000a10000002300000095"], &(0x7f0000000640)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580), 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x2e}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) preadv(r3, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/183, 0xb7}], 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)="330c0c6e29ceeae40705e5ddaf2048ced76bf186eeba0ee983ae0379011f864cd4ccd5438e766c3057419d4461d966a61e4a18f13f6b3c600246db902c2e13bc2793b574a52e5d190b4694d95d25da366cc459e2c49b4a7a49d94f321f8878609f1f81864b44725b2cf4bad550a80ec466848b5e59735936e4f0eb75bd2c0a8bbf1de46ad4f8a6dbf19e3d29b417bdf98f2243b6a79dcacf0f8683319f50c8d6b7bb33e066392ff8352f9d4ce06b83c2a17260553f8604ee346c7db684f7dbdaef92c94e7af6da455f", 0xc9}, {&(0x7f00000002c0)="c868815e9c24ce9bd0ac26d87119aa88fa682b8125d0cb557fe62a64f52c843ef1088d20b966d5b6f6145171a7e08ec74b77e3fd71c090dd991969ee4e33f3ea86422beabbb64e16625f2d055a2d2d079cfbd66353d8973a39e3d5fc3094ea8e37545b641e0bb42c8bc643fa", 0x6c}], 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) socket$nl_netfilter(0x10, 0x3, 0xc) 59.663080184s ago: executing program 0 (id=4031): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x12c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa98}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc00}, 0x10) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000700), &(0x7f0000000740)=0x4) close(r1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3a, 0x0, 0x41) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f6, 0x2, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000044}, 0x90) 58.509723676s ago: executing program 0 (id=4033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e00000010080ff00000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 58.213254397s ago: executing program 0 (id=4035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x17, r2, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010800000000a4642c2900000000080005400000000c0900020073797a3000000000080003400007000008000a40040000000900010073797a3000000000080004"], 0x74}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0}}, 0x4000000) pipe(0x0) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aae28c8e67fbcfb60cae9b99aaaaaaaaaaaaaaaaaaaabb86dd6081d90d00000000ff015cacf0e400000000000000000001ff020000000000000000000000008001"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x3, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r10}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x1b, &(0x7f00000001c0)={r6}, &(0x7f0000000300)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) 56.640301936s ago: executing program 0 (id=4038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000000020104000000001d0000000a0000003c0003800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb1400040000000000000000000b000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000003000018004000180040003"], 0xbc}}, 0x0) 56.284840507s ago: executing program 0 (id=4041): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c00018006000000e940000008000200", @ANYRES32, @ANYBLOB="0800058004"], 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001900)={0x14, r6, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 48.805193236s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240007c00110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1.427048428s ago: executing program 1 (id=4111): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000780)={&(0x7f00000002c0), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042bbd7000fbdbdf25030000000c00040025000000000000000c00030002000000000000000c00060000000000000000000c000300010000000000000008000100000000000c00021b1f01000100000000"], 0x58}}, 0x4040044) 907.762396ms ago: executing program 1 (id=4112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911823000000007995"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 750.550763ms ago: executing program 1 (id=4113): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000f5ffffff000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c0000000e0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 562.580399ms ago: executing program 1 (id=4114): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf255300000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x14, r2, 0x405}, 0x14}}, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004080) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0xc884}, 0x20008020) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x154, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r11, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r10, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x10404}, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 145.088411ms ago: executing program 1 (id=4115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000b000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=4116): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000280)=0x60, 0x100000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06e0fa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd2030000726564697265637400"/2376]}, 0x9c0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20}, 0x20}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) unshare(0x400) ioctl$PPPIOCSMAXCID(r7, 0x4010744d, &(0x7f0000000000)=0x20000002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f00000002c0)=""/177, 0xb1, 0x0, &(0x7f0000000440)=""/75, 0x4b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000005c0)={0x2, &(0x7f00000004c0)=[{0x1, 0x2, 0x8, 0x7}, {0x1000, 0x10, 0x7, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): d tx timeout [ 412.044330][ T2429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.262237][ T2429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.448003][T17851] chnl_net:caif_netlink_parms(): no params data found [ 412.556314][ T2429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.880915][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.906260][T17851] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.924018][T17851] bridge_slave_0: entered allmulticast mode [ 412.943807][T17851] bridge_slave_0: entered promiscuous mode [ 412.985105][T17851] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.020470][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.033545][T17851] bridge_slave_1: entered allmulticast mode [ 413.051460][T17851] bridge_slave_1: entered promiscuous mode [ 413.155065][ T2429] bridge_slave_1: left allmulticast mode [ 413.160843][ T2429] bridge_slave_1: left promiscuous mode [ 413.180811][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.211128][ T2429] bridge_slave_0: left allmulticast mode [ 413.222120][ T2429] bridge_slave_0: left promiscuous mode [ 413.241892][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.572022][ T2429] batman_adv: batadv0: Removing interface: ip6gretap1 [ 413.927339][T17883] netlink: 'syz.3.3782': attribute type 3 has an invalid length. [ 413.953735][ T5101] Bluetooth: hci1: command tx timeout [ 414.602356][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.616176][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.638837][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.652150][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.662396][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 414.670599][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.788633][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.802534][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.815728][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.824561][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.838933][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 414.846916][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.522974][ C1] net_ratelimit: 8803 callbacks suppressed [ 415.522997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.541598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 415.553977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.566433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.578858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.591556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 415.603933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.616386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.628648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.641296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 416.408497][ T2429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.454247][ T2429] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 416.497133][ T2429] bond0 (unregistering): Released all slaves [ 416.522340][ T2429] bond1 (unregistering): Released all slaves [ 416.570434][T17851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.643972][T17883] netlink: 'syz.3.3782': attribute type 3 has an invalid length. [ 416.755606][ T5101] Bluetooth: hci0: command tx timeout [ 416.777619][T17851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.864676][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 416.913466][ T5101] Bluetooth: hci3: command tx timeout [ 417.027716][ T2429] tipc: Left network mode [ 417.167530][T17851] team0: Port device team_slave_0 added [ 417.193647][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'. [ 417.277398][T17851] team0: Port device team_slave_1 added [ 417.514502][T17900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3787'. [ 417.542603][T17903] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 417.590509][T17903] ip6t_srh: unknown srh invflags 5F00 [ 417.610122][T17851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.635967][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.720161][T17851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.871461][T17851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.893607][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3791'. [ 417.902755][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.938927][T17909] nbd: must specify a device to reconfigure [ 417.998885][T17851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.226628][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 418.550523][T17851] hsr_slave_0: entered promiscuous mode [ 418.590840][T17851] hsr_slave_1: entered promiscuous mode [ 418.626732][T17851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.643968][T17851] Cannot create hsr debugfs directory [ 418.833343][ T5101] Bluetooth: hci0: command tx timeout [ 418.993695][ T5101] Bluetooth: hci3: command tx timeout [ 419.869249][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.881633][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.891209][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.899944][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.908532][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 419.917442][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.403685][T17939] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3800'. [ 420.423483][T17939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 420.471691][ T2429] hsr_slave_0: left promiscuous mode [ 420.518846][T17941] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3800'. [ 420.533352][ C1] net_ratelimit: 8550 callbacks suppressed [ 420.533372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.550793][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 420.551636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.573949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 420.586458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.599044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.611603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.625263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 420.637811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.650361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.662663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.683840][ T2429] hsr_slave_1: left promiscuous mode [ 420.713721][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.726689][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.784465][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.799099][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.829222][ T2429] batman_adv: batadv0: Removing interface: ipvlan2 [ 420.870317][ T2429] batman_adv: batadv0: Removing interface: ipvlan3 [ 420.900454][ T2429] batman_adv: batadv0: Removing interface: ipvlan4 [ 420.913796][ T5096] Bluetooth: hci0: command tx timeout [ 420.931710][ T2429] batman_adv: batadv0: Removing interface: ipvlan5 [ 420.986052][ T2429] veth1_macvtap: left promiscuous mode [ 421.002002][ T2429] veth1_vlan: left promiscuous mode [ 421.010836][ T2429] veth0_vlan: left promiscuous mode [ 421.073647][ T5096] Bluetooth: hci3: command tx timeout [ 421.961934][ T5096] Bluetooth: hci5: command tx timeout [ 422.994892][ T5096] Bluetooth: hci0: command tx timeout [ 423.155010][ T5101] Bluetooth: hci3: command tx timeout [ 423.239364][ T2429] team0 (unregistering): Port device team_slave_1 removed [ 423.380336][ T2429] team0 (unregistering): Port device team_slave_0 removed [ 423.697137][ T2429] team0 (unregistering): Port device bond_slave_0 removed [ 424.033756][ T5101] Bluetooth: hci5: command tx timeout [ 425.011779][T17886] chnl_net:caif_netlink_parms(): no params data found [ 425.160773][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3801'. [ 425.271882][T17949] veth0_vlan: left promiscuous mode [ 425.287322][T17949] veth0_vlan: entered promiscuous mode [ 425.543635][ C1] net_ratelimit: 8708 callbacks suppressed [ 425.543656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 425.562137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.574637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.587063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.600393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 425.612839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.625287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.637713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.651098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 425.663519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.876757][T17888] chnl_net:caif_netlink_parms(): no params data found [ 426.114027][ T5101] Bluetooth: hci5: command tx timeout [ 426.257404][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3805'. [ 426.347708][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.373739][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.381051][T17886] bridge_slave_0: entered allmulticast mode [ 426.433825][T17886] bridge_slave_0: entered promiscuous mode [ 426.505190][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3806'. [ 426.547985][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.564750][T17965] SET target dimension over the limit! [ 426.570486][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.600630][T17886] bridge_slave_1: entered allmulticast mode [ 426.631720][T17886] bridge_slave_1: entered promiscuous mode [ 426.896799][ T2429] IPVS: stop unused estimator thread 0... [ 426.961076][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.162092][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.264267][T17888] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.271431][T17888] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.308605][T17888] bridge_slave_0: entered allmulticast mode [ 427.349118][T17888] bridge_slave_0: entered promiscuous mode [ 427.486057][T17888] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.508012][T17888] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.545845][T17888] bridge_slave_1: entered allmulticast mode [ 427.587528][T17888] bridge_slave_1: entered promiscuous mode [ 427.715591][T17886] team0: Port device team_slave_0 added [ 428.122365][ T2429] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.194441][ T5101] Bluetooth: hci5: command tx timeout [ 428.291611][T17888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.383927][T17932] chnl_net:caif_netlink_parms(): no params data found [ 428.437034][T17886] team0: Port device team_slave_1 added [ 428.632230][ T2429] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.712590][T17888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.852521][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 428.930431][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.949209][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.983844][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.071721][T17888] team0: Port device team_slave_0 added [ 429.252122][ T2429] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.327838][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.363522][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.450071][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.471753][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3814'. [ 429.508192][T17888] team0: Port device team_slave_1 added [ 429.608750][T17851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.834905][ T2429] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.099416][T17888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.114224][T17888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.200571][T17888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.257012][T17851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 430.455795][T17886] hsr_slave_0: entered promiscuous mode [ 430.487119][T17886] hsr_slave_1: entered promiscuous mode [ 430.511029][T17886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.544682][T17886] Cannot create hsr debugfs directory [ 430.554076][ C1] net_ratelimit: 8630 callbacks suppressed [ 430.554096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 430.557211][T17888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.560228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.591372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.603795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.609073][T17888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.617150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 430.654673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.667132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.668369][T17888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.679486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.680739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 430.715242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.724526][T17851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 430.956090][T17851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.019989][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.039624][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.068700][T17932] bridge_slave_0: entered allmulticast mode [ 431.089198][T17932] bridge_slave_0: entered promiscuous mode [ 431.143835][T18027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3820'. [ 431.261424][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.275931][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.294144][T17932] bridge_slave_1: entered allmulticast mode [ 431.301874][T17932] bridge_slave_1: entered promiscuous mode [ 431.418258][T17888] hsr_slave_0: entered promiscuous mode [ 431.450645][T17888] hsr_slave_1: entered promiscuous mode [ 431.472581][T17888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.491515][T17888] Cannot create hsr debugfs directory [ 431.918239][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.972665][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.383620][T18038] netlink: 'syz.3.3823': attribute type 13 has an invalid length. [ 432.391758][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3823'. [ 432.413357][T18038] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 432.478572][T17932] team0: Port device team_slave_0 added [ 432.516555][T17932] team0: Port device team_slave_1 added [ 432.615625][T18043] netlink: 'syz.3.3824': attribute type 10 has an invalid length. [ 432.696966][T18044] xt_hashlimit: invalid rate [ 432.724083][T18043] netlink: 212848 bytes leftover after parsing attributes in process `syz.3.3824'. [ 432.827737][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.860038][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.933243][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'. [ 432.953443][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.997825][ T2429] bridge_slave_1: left allmulticast mode [ 433.004565][ T2429] bridge_slave_1: left promiscuous mode [ 433.010333][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.095467][ T2429] bridge_slave_0: left allmulticast mode [ 433.101157][ T2429] bridge_slave_0: left promiscuous mode [ 433.134484][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.563217][ C1] net_ratelimit: 9064 callbacks suppressed [ 435.563239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.581298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.594614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 435.607081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.619262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.631498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.644753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 435.657169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.669620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.681869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.831620][ T2429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.887588][ T2429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.924414][ T2429] bond0 (unregistering): Released all slaves [ 437.040395][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.058021][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.102532][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.128480][T18053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3827'. [ 440.277886][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.285017][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.573400][ C1] net_ratelimit: 9528 callbacks suppressed [ 440.573422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 440.591656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.604068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.616468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.629813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 440.642199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.654633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.666988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.680292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 440.692751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.536704][T17932] hsr_slave_0: entered promiscuous mode [ 441.566233][T18067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3833'. [ 441.590538][T17932] hsr_slave_1: entered promiscuous mode [ 441.614098][T17932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.643608][T17932] Cannot create hsr debugfs directory [ 442.358324][ T2429] hsr_slave_0: left promiscuous mode [ 442.394968][ T2429] hsr_slave_1: left promiscuous mode [ 442.456974][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.467384][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.502525][ T2429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.530283][ T2429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.612279][ T2429] veth1_macvtap: left promiscuous mode [ 442.626804][ T2429] veth0_macvtap: left promiscuous mode [ 442.642775][ T2429] veth1_vlan: left promiscuous mode [ 442.651299][ T2429] veth0_vlan: left promiscuous mode [ 443.054164][T18081] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 443.074810][T18081] ieee802154 phy0 wpan0: encryption failed: -90 [ 444.498145][ T2429] team0 (unregistering): Port device team_slave_1 removed [ 444.671673][ T2429] team0 (unregistering): Port device team_slave_0 removed [ 445.583649][ C1] net_ratelimit: 8614 callbacks suppressed [ 445.583675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 445.601999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.614486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.626754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.640105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 445.652397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.664897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.677367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.690091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 445.702330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.368399][T18079] netlink: 'syz.3.3835': attribute type 10 has an invalid length. [ 446.393524][T18079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3835'. [ 446.415854][T18081] netlink: 'syz.3.3835': attribute type 21 has an invalid length. [ 446.745789][T17888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.793787][T17888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.987528][T17851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.002344][T18088] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3837'. [ 447.052175][T17851] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.065056][T18088] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 447.236742][T17888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.262181][T17888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.337416][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3838'. [ 447.351322][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.358542][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.427774][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.434978][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.602179][T17888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.620995][T17888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.509311][T17888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.534589][T17888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.758466][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3841'. [ 448.819335][T18105] SET target dimension over the limit! [ 448.908862][T17851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.194918][T17888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.242540][T17888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.327472][T17851] veth0_vlan: entered promiscuous mode [ 449.429333][T17888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.464999][T17888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.589180][T17851] veth1_vlan: entered promiscuous mode [ 449.606045][T18112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3844'. [ 449.696636][T17886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.758201][T17886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.802621][T18114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3845'. [ 449.825542][T17886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.027531][T17932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.134956][T17886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.300401][T17932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.401302][T17851] veth0_macvtap: entered promiscuous mode [ 450.549543][T17932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.594081][ C1] net_ratelimit: 8580 callbacks suppressed [ 450.594103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 450.612367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.624825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.637111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.650492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 450.662970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.675385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.687810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.700634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 450.713067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.877413][T17851] veth1_macvtap: entered promiscuous mode [ 451.446579][T17932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.566059][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.605778][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.651871][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.682457][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.715626][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.738420][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.770204][T17851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.874650][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.911055][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.938868][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.955359][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.976610][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.004841][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.028764][T17851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.055646][T17851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.082073][T17851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.162426][T17851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.228710][T17851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.262102][T17851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.290051][T17851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.375961][T17888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.556563][T18134] netlink: 'syz.3.3852': attribute type 3 has an invalid length. [ 452.700963][T17888] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.890222][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.897645][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.003921][T17886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.023876][T17932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.104279][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.143853][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.187633][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.194863][T18135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.245523][T17932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.363432][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.380492][T17932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.420511][T17932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.476235][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3855'. [ 453.539894][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.547152][T18135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.637829][T17999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.676878][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.684099][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.703687][T17999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.825091][T18146] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3856'. [ 454.062133][T17886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.084888][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 454.459168][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.644579][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.755645][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.762900][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.882518][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.889734][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.336840][T17888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.380392][T18164] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3860'. [ 455.550889][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.603494][ C1] net_ratelimit: 8354 callbacks suppressed [ 455.603515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 455.621845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.634316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.646750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.660109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 455.672620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.685100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.690121][T17888] veth0_vlan: entered promiscuous mode [ 455.697495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.715924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 455.728339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.895957][T17888] veth1_vlan: entered promiscuous mode [ 456.167223][T17888] veth0_macvtap: entered promiscuous mode [ 456.256888][T17888] veth1_macvtap: entered promiscuous mode [ 456.459831][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.527586][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.580911][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.655385][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.714157][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.759025][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.793442][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.814877][T18187] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3866'. [ 456.852465][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.905466][T17888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.005060][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.085758][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.135596][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.214241][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.275586][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.337882][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.385420][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.438387][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.475753][T17888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.516459][T17888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.562023][T17888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.702680][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.895425][T18201] vlan0: entered allmulticast mode [ 457.935085][T18201] bridge_slave_0: entered allmulticast mode [ 457.989968][T18201] bridge_slave_0: left allmulticast mode [ 458.036593][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 458.159553][T17888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.201835][T17888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.236872][T17888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.288922][T17888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.985476][T18221] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3874'. [ 459.109001][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'. [ 459.260078][T18225] netlink: 'syz.1.3876': attribute type 3 has an invalid length. [ 460.613606][ C1] net_ratelimit: 8587 callbacks suppressed [ 460.613629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 460.631917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.644407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.656822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.669620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 460.681977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.694399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.706641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.720047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 460.732293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.861824][T17886] veth0_vlan: entered promiscuous mode [ 460.956290][T17932] veth0_vlan: entered promiscuous mode [ 460.972238][T17886] veth1_vlan: entered promiscuous mode [ 461.054064][ T2429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.061928][ T2429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.149404][T17932] veth1_vlan: entered promiscuous mode [ 461.361758][T17999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.406565][T17999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.785633][T17886] veth0_macvtap: entered promiscuous mode [ 461.800500][T17932] veth0_macvtap: entered promiscuous mode [ 461.870987][T17886] veth1_macvtap: entered promiscuous mode [ 461.927143][T17932] veth1_macvtap: entered promiscuous mode [ 462.039503][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.123410][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.174926][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.225008][T18247] netlink: 'syz.0.3780': attribute type 3 has an invalid length. [ 462.263486][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.290897][T18247] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 462.323535][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.343082][T18247] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.3780'. [ 462.363501][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 462.393533][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.421065][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.471255][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.508119][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.549563][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.603902][T17886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.631677][T18252] tipc: Started in network mode [ 462.653966][T18252] tipc: Node identity 2d14142a, cluster identity 4711 [ 462.693655][T18252] tipc: Enabling of bearer rejected, failed to enable media [ 462.826231][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.893512][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.930237][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.967624][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.007981][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.050155][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.091781][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.125815][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.163452][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.222592][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.279685][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.331503][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.409825][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.486270][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.537387][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.584793][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.626220][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.671070][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.714546][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.754886][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.798903][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.844492][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.881778][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.924543][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.969497][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.043612][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.097966][T17886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.149179][T17886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.211539][T17886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.251568][T17886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.319107][T18269] vlan2: entered promiscuous mode [ 464.353987][T18269] batman_adv: batadv0: Adding interface: vlan2 [ 464.393491][T18269] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.453634][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3893'. [ 464.527455][T18269] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 464.628249][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.708356][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.765727][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.821412][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.868762][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.904645][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.963573][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.992746][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.038809][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.074674][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.108320][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.162350][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.196202][T17932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.242243][T17932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.295167][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.388402][T17932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.443362][T17932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.488385][T17932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.515074][T17932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.618710][T18294] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 465.626635][ C1] net_ratelimit: 8542 callbacks suppressed [ 465.626654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 465.626961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.627388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.627699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.629009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 465.629305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.707236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.719666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.733013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 465.745427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.592015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.653937][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.736173][T18324] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.3907'. [ 467.066227][ T9357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.103239][T18326] batman_adv: batadv0: Adding interface: ipvlan2 [ 467.122651][ T9357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.143457][T18326] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.229694][T18326] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 467.343951][T18331] netlink: 'syz.3.3909': attribute type 5 has an invalid length. [ 467.446927][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.480230][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.738544][ T2429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.815343][ T2429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.668345][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 469.646911][ T9356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.951368][ T9356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.298352][ T9356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.589793][ T9356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.632877][ C1] net_ratelimit: 8777 callbacks suppressed [ 470.632900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.652038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 470.664466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.677313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.689556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.702262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 470.714783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.727254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.739755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.753183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 470.982535][ T9356] bridge_slave_1: left allmulticast mode [ 471.002232][ T9356] bridge_slave_1: left promiscuous mode [ 471.013705][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.046839][ T9356] bridge_slave_0: left allmulticast mode [ 471.069406][ T9356] bridge_slave_0: left promiscuous mode [ 471.076455][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.489443][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3922'. [ 472.446053][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.457011][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.475353][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.496835][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.506135][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 472.515636][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.223749][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.281499][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.321923][ T9356] bond0 (unregistering): Released all slaves [ 473.392668][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3922'. [ 473.478059][T18392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3925'. [ 473.531420][T18394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3926'. [ 474.132371][T18416] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3932'. [ 474.318292][T18421] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 474.596303][ T5096] Bluetooth: hci0: command tx timeout [ 474.936805][T18421] batman_adv: batadv0: Adding interface: team0 [ 474.989186][T18421] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.113665][T18421] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 475.160255][T18425] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 475.249919][T18423] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 475.288118][T18423] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3934'. [ 475.333571][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3938'. [ 475.343560][T18423] team0: entered promiscuous mode [ 475.348622][T18423] team_slave_0: entered promiscuous mode [ 475.410005][T18423] team_slave_1: entered promiscuous mode [ 475.439778][T18423] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.484798][T18423] batman_adv: batadv0: Interface activated: team0 [ 475.511761][T18423] batman_adv: batadv0: Interface deactivated: team0 [ 475.556790][T18423] batman_adv: batadv0: Removing interface: team0 [ 475.596577][T18423] bridge0: port 3(team0) entered blocking state [ 475.615472][T18423] bridge0: port 3(team0) entered disabled state [ 475.641547][T18423] team0: entered allmulticast mode [ 475.646977][ C1] net_ratelimit: 8590 callbacks suppressed [ 475.646998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.648176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 475.677753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.683567][T18423] team_slave_0: entered allmulticast mode [ 475.690355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.708318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.721890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 475.722267][T18423] team_slave_1: entered allmulticast mode [ 475.734270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.734704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.764677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.778220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 475.824825][T18423] bridge0: port 3(team0) entered blocking state [ 475.831259][T18423] bridge0: port 3(team0) entered forwarding state [ 475.922596][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3943'. [ 476.159339][T18449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.424227][T18457] netlink: 'syz.2.3948': attribute type 1 has an invalid length. [ 476.476728][ T9356] hsr_slave_0: left promiscuous mode [ 476.502056][T18460] netlink: 'syz.0.3949': attribute type 1 has an invalid length. [ 476.543513][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 476.565116][ T9356] hsr_slave_1: left promiscuous mode [ 476.632539][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.679776][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.751488][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.825823][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.971300][ T9356] veth1_macvtap: left promiscuous mode [ 477.004930][ T9356] veth0_macvtap: left promiscuous mode [ 477.022516][ T9356] veth1_vlan: left promiscuous mode [ 477.055555][ T9356] veth0_vlan: left promiscuous mode [ 479.308038][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 479.518141][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 480.652889][ C1] net_ratelimit: 8376 callbacks suppressed [ 480.652912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.671093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.683531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.696253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 480.708640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.720925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.733681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.747024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 480.759475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.771707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.504284][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 481.540895][T18471] macvlan2: entered allmulticast mode [ 481.551309][T18471] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 481.580371][T18471] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 481.609175][T18471] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 481.714736][T18473] bond0: entered promiscuous mode [ 481.719833][T18473] bond_slave_0: entered promiscuous mode [ 481.749101][T18473] bond_slave_1: entered promiscuous mode [ 481.788314][T18473] macvlan2: entered promiscuous mode [ 481.810296][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3955'. [ 482.019431][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 484.390220][T18519] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3962'. [ 484.535095][T18524] netlink: 'syz.3.3964': attribute type 1 has an invalid length. [ 484.616774][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 484.804639][T18530] xt_recent: hitcount (448) is larger than allowed maximum (255) [ 484.858835][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'. [ 484.912114][T18397] chnl_net:caif_netlink_parms(): no params data found [ 485.663821][ C1] net_ratelimit: 8875 callbacks suppressed [ 485.663841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 485.682108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.694573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.707021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.720313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 485.732796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.745314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.757731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.771079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 485.783590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.985087][T18397] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.034442][T18397] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.068101][T18397] bridge_slave_0: entered allmulticast mode [ 486.114321][T18397] bridge_slave_0: entered promiscuous mode [ 486.187028][T18397] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.244318][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.293777][T18397] bridge_slave_1: entered allmulticast mode [ 486.350786][T18397] bridge_slave_1: entered promiscuous mode [ 486.550248][T18581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3980'. [ 486.631124][T18397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.697231][T18582] lo speed is unknown, defaulting to 1000 [ 486.808499][T18397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.869662][T18582] lo speed is unknown, defaulting to 1000 [ 487.144918][T18582] lo speed is unknown, defaulting to 1000 [ 487.160192][T18397] team0: Port device team_slave_0 added [ 487.276181][T18397] team0: Port device team_slave_1 added [ 487.445983][T18590] tipc: Started in network mode [ 487.450968][T18590] tipc: Node identity 2d14142a, cluster identity 4711 [ 487.493434][T18590] tipc: Enabling of bearer rejected, failed to enable media [ 487.666489][T18397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.723361][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.920011][T18397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.074057][T18397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.081050][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.174703][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 488.299145][T18582] infiniband syz0: set active [ 488.311015][T18397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.339607][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3993'. [ 488.374142][T18582] infiniband syz0: added lo [ 488.379800][T18582] syz0: rxe_create_cq: returned err = -12 [ 488.410466][ T5171] lo speed is unknown, defaulting to 1000 [ 488.417913][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3992'. [ 488.441590][T18582] infiniband syz0: Couldn't create ib_mad CQ [ 488.504232][T18582] infiniband syz0: Couldn't open port 1 [ 488.685045][T18582] RDS/IB: syz0: added [ 488.689145][T18582] smc: adding ib device syz0 with port count 1 [ 488.727764][T18582] smc: ib device syz0 port 1 has pnetid [ 488.778548][T18397] hsr_slave_0: entered promiscuous mode [ 488.819359][T18397] hsr_slave_1: entered promiscuous mode [ 488.867729][T18397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.907168][T18397] Cannot create hsr debugfs directory [ 488.936456][T18135] lo speed is unknown, defaulting to 1000 [ 488.943035][T18615] netlink: 'syz.1.3996': attribute type 21 has an invalid length. [ 488.964917][T18615] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 489.153662][T18582] lo speed is unknown, defaulting to 1000 [ 489.374074][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 489.448620][T18622] vlan3: entered promiscuous mode [ 490.402002][T18616] lo speed is unknown, defaulting to 1000 [ 490.468814][T18635] netlink: 'syz.1.4003': attribute type 4 has an invalid length. [ 490.673057][ C1] net_ratelimit: 6296 callbacks suppressed [ 490.673076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 490.691297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.704557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.717052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.730330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 490.742805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.753910][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 490.755936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.776031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.789824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 490.802277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.983619][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4007'. [ 491.104504][T18582] lo speed is unknown, defaulting to 1000 [ 491.259187][T18647] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 491.313860][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 491.653992][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.035454][T18582] lo speed is unknown, defaulting to 1000 [ 492.630357][T18397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 492.738385][T18397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 492.804948][T18397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 492.921617][T18397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.168689][T18582] lo speed is unknown, defaulting to 1000 [ 493.560215][T18397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.770179][T18397] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.850409][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.857644][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.981151][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.988394][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.171052][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'. [ 494.342023][T18681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4023'. [ 494.368518][T18582] lo speed is unknown, defaulting to 1000 [ 494.745603][T18688] tipc: Enabled bearer , priority 10 [ 494.754970][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4026'. [ 495.194934][T18397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.472689][T18582] lo speed is unknown, defaulting to 1000 [ 495.683040][ C1] net_ratelimit: 6438 callbacks suppressed [ 495.683062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 495.701290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.714671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.727133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.740379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 495.752891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.766200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.778607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 495.791987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 495.804416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.863480][ T5171] tipc: Node number set to 756290602 [ 496.328345][T18582] lo speed is unknown, defaulting to 1000 [ 496.999497][T18397] veth0_vlan: entered promiscuous mode [ 497.081736][T18397] veth1_vlan: entered promiscuous mode [ 497.379199][T18721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4035'. [ 497.421567][T18397] veth0_macvtap: entered promiscuous mode [ 497.533765][T18397] veth1_macvtap: entered promiscuous mode [ 497.625792][T18582] lo speed is unknown, defaulting to 1000 [ 497.715005][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.793431][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.871128][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.977016][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.023637][T18728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4037'. [ 498.076870][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.149223][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.201849][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.244360][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.275844][T18733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.287445][T18733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.312505][T18733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 498.330334][T18733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 498.339945][T18733] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 498.348196][T18733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 498.387151][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.438075][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.472412][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.523449][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.576645][T18397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.673912][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.763364][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.819668][T18735] netlink: 'syz.0.4038': attribute type 3 has an invalid length. [ 498.873393][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.942087][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.993564][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.021322][T18738] block nbd0: not configured, cannot reconfigure [ 499.066347][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.135155][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.184420][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.253572][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.328979][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.383573][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.463724][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.529871][T18397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.603350][T18397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.675366][T18397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.926585][T18740] : entered promiscuous mode [ 500.092501][T18741] lo speed is unknown, defaulting to 1000 [ 500.184217][T18397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.263402][T18397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.336054][T18397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.399115][T18397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.435244][T18733] Bluetooth: hci6: command tx timeout [ 500.548817][ T5096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 500.560712][ T5096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 500.569544][ T5096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 500.579215][ T5096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 500.587618][ T5096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 500.595812][ T5096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 500.693778][ C1] net_ratelimit: 6336 callbacks suppressed [ 500.693798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.712123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.725448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 500.737876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.751124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.763538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.776892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 500.789311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.802600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.815106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.453529][T18756] netlink: 'syz.1.4045': attribute type 2 has an invalid length. [ 501.719452][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729067][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.988439][T17999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.118244][T18759] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 502.148706][T18759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4046'. [ 502.208417][T18759] vlan1: entered promiscuous mode [ 502.227901][T18759] vlan1: entered allmulticast mode [ 502.259196][T18759] veth0_vlan: entered allmulticast mode [ 502.323950][T18759] team0: Port device vlan1 added [ 502.339762][T18731] lo speed is unknown, defaulting to 1000 [ 502.513906][ T5096] Bluetooth: hci6: command tx timeout [ 502.673530][ T5096] Bluetooth: hci7: command tx timeout [ 502.870152][T17999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.134980][ T9357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.171020][ T9357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.588284][T17999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.154827][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.164505][T18750] lo speed is unknown, defaulting to 1000 [ 504.183372][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.517980][T17999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.594387][ T5096] Bluetooth: hci6: command tx timeout [ 504.753206][ T5096] Bluetooth: hci7: command tx timeout [ 505.703276][ C1] net_ratelimit: 6162 callbacks suppressed [ 505.703298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.721626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.734945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 505.747448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.760226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.772631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.785990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 505.798518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.811848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.824304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.098622][T18731] chnl_net:caif_netlink_parms(): no params data found [ 506.157704][T18790] xt_policy: output policy not valid in PREROUTING and INPUT [ 506.649914][T17999] gretap1: left allmulticast mode [ 506.677888][ T5096] Bluetooth: hci6: command tx timeout [ 506.691998][T17999] gretap1: left promiscuous mode [ 506.701178][T17999] bridge3: port 1(gretap1) entered disabled state [ 506.837318][ T5096] Bluetooth: hci7: command tx timeout [ 508.916949][ T5096] Bluetooth: hci7: command tx timeout [ 509.702336][T18733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.714841][T18733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.723995][T18733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.733526][T18733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.741334][T18733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 509.749588][T18733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.124767][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.136173][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.146274][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.156007][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.164516][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 510.177302][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.712929][ C1] net_ratelimit: 6553 callbacks suppressed [ 510.712950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.731513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.744037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.757269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 510.769509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.782184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.794591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.807863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 510.820113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.832731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.919966][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.972368][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.033879][T17999] bond0 (unregistering): Released all slaves [ 511.082589][T17999] bond1 (unregistering): Released all slaves [ 511.126642][T17999] bond2 (unregistering): Released all slaves [ 511.363476][T18806] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4055'. [ 511.764728][T18731] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.793878][ T5096] Bluetooth: hci0: command tx timeout [ 511.803929][T18731] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.833602][T18731] bridge_slave_0: entered allmulticast mode [ 511.864634][T18731] bridge_slave_0: entered promiscuous mode [ 511.892414][T18731] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.924640][T18731] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.960262][T18731] bridge_slave_1: entered allmulticast mode [ 511.991908][T18731] bridge_slave_1: entered promiscuous mode [ 512.009762][T17999] tipc: Disabling bearer [ 512.032053][T17999] tipc: Left network mode [ 512.056269][T18801] lo speed is unknown, defaulting to 1000 [ 512.063503][T18811] netlink: 'syz.1.4056': attribute type 4 has an invalid length. [ 512.276785][ T5096] Bluetooth: hci4: command tx timeout [ 512.722065][T18731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.791002][T18731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.849248][T18750] chnl_net:caif_netlink_parms(): no params data found [ 512.916119][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'. [ 512.954186][T18799] lo speed is unknown, defaulting to 1000 [ 513.225626][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'. [ 513.471943][T18731] team0: Port device team_slave_0 added [ 513.537149][T18824] block nbd0: not configured, cannot reconfigure [ 513.696514][T18731] team0: Port device team_slave_1 added [ 513.876380][ T5096] Bluetooth: hci0: command tx timeout [ 513.942458][T18731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.971683][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.029905][T18731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.353824][ T5096] Bluetooth: hci4: command tx timeout [ 514.816105][T18731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.845146][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.898151][T18731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.015302][T18750] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.033106][T18750] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.040426][T18750] bridge_slave_0: entered allmulticast mode [ 515.075350][T18750] bridge_slave_0: entered promiscuous mode [ 515.117778][T18837] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 515.165162][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 515.315413][T18750] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.353854][T18750] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.361163][T18750] bridge_slave_1: entered allmulticast mode [ 515.414315][T18750] bridge_slave_1: entered promiscuous mode [ 515.722832][ C1] net_ratelimit: 6436 callbacks suppressed [ 515.722851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.741965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 515.754440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.767726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.780153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.793468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 515.805884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.819142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.831557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.845260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 515.959989][ T5096] Bluetooth: hci0: command tx timeout [ 516.050594][T18750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.126731][T17999] hsr_slave_0: left promiscuous mode [ 516.151553][T17999] hsr_slave_1: left promiscuous mode [ 516.184242][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.203522][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.242289][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.263447][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.327610][T17999] veth1_macvtap: left promiscuous mode [ 516.343469][T17999] veth0_macvtap: left promiscuous mode [ 516.351879][T17999] veth1_vlan: left promiscuous mode [ 516.364921][T17999] veth0_vlan: left promiscuous mode [ 516.435910][ T5096] Bluetooth: hci4: command tx timeout [ 516.769399][T17999] infiniband syz0: set down [ 517.042435][T17999] pim6reg (unregistering): left allmulticast mode [ 518.034794][ T5096] Bluetooth: hci0: command tx timeout [ 518.345935][T17999] team0 (unregistering): Port device team_slave_1 removed [ 518.477789][T17999] team0 (unregistering): Port device team_slave_0 removed [ 518.514621][ T5096] Bluetooth: hci4: command tx timeout [ 519.597403][T17995] smc: removing ib device syz0 [ 519.814387][T18731] hsr_slave_0: entered promiscuous mode [ 519.943437][T18731] hsr_slave_1: entered promiscuous mode [ 519.992080][T18731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.028455][T18731] Cannot create hsr debugfs directory [ 520.141540][T18750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.733293][ C1] net_ratelimit: 7147 callbacks suppressed [ 520.733315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.751597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.764851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 520.777259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.790914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.803406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.815835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.829602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 520.842036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.855345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.141089][T18135] lo speed is unknown, defaulting to 1000 [ 521.800192][T18750] team0: Port device team_slave_0 added [ 522.219748][T18750] team0: Port device team_slave_1 added [ 522.436486][T18858] block nbd0: not configured, cannot reconfigure [ 522.555796][T18801] chnl_net:caif_netlink_parms(): no params data found [ 523.249249][T18750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.318979][T18750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.425335][T18750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.510877][T18750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.574132][T18750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.665830][T18750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.448878][T18750] hsr_slave_0: entered promiscuous mode [ 525.478710][T18876] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 525.490326][T18750] hsr_slave_1: entered promiscuous mode [ 525.513534][T18876] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.4069'. [ 525.522686][T18876] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 525.536237][T18750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.553527][T18750] Cannot create hsr debugfs directory [ 525.559231][T18799] chnl_net:caif_netlink_parms(): no params data found [ 525.575463][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'. [ 525.743043][ C1] net_ratelimit: 7140 callbacks suppressed [ 525.743062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.761298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.774529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 525.786903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.800180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.812568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.824939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.838174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 525.850573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.863895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.108334][T18801] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.131084][T18801] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.156031][T18801] bridge_slave_0: entered allmulticast mode [ 526.175284][T18801] bridge_slave_0: entered promiscuous mode [ 526.306089][T18801] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.326465][T18801] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.344674][T18801] bridge_slave_1: entered allmulticast mode [ 526.371189][T18801] bridge_slave_1: entered promiscuous mode [ 526.842421][T17999] IPVS: stop unused estimator thread 0... [ 526.926480][T18801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.983925][T18799] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.001958][T18799] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.019264][T18799] bridge_slave_0: entered allmulticast mode [ 527.040395][T18799] bridge_slave_0: entered promiscuous mode [ 527.061189][T18799] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.085806][T18799] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.110442][T18799] bridge_slave_1: entered allmulticast mode [ 527.126122][T18799] bridge_slave_1: entered promiscuous mode [ 527.152650][T18801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.631463][T18799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.892446][T18801] team0: Port device team_slave_0 added [ 528.060214][T18799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.161185][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'. [ 528.205322][T18892] vlan3: entered promiscuous mode [ 529.403652][T18733] Bluetooth: hci1: command 0x0406 tx timeout [ 530.166071][T18801] team0: Port device team_slave_1 added [ 530.448038][T18894] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4074'. [ 530.675180][T17999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.753850][ C1] net_ratelimit: 8165 callbacks suppressed [ 530.753868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 530.772213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 530.784637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.797899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.810396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.822908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.836163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 530.848597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 530.860816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.874020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.974762][T17999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.032627][T18799] team0: Port device team_slave_0 added [ 531.436779][T18750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.507034][T18801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.533978][T18801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.616674][T18801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.634737][T18903] netlink: 'syz.1.4076': attribute type 2 has an invalid length. [ 531.653617][T18903] netlink: 'syz.1.4076': attribute type 1 has an invalid length. [ 531.661394][T18903] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.685877][T18801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.713658][T18801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.753999][T18904] netlink: 'syz.1.4076': attribute type 2 has an invalid length. [ 531.761764][T18904] netlink: 'syz.1.4076': attribute type 1 has an invalid length. [ 531.791302][T18904] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.805803][T18801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.004646][T18801] hsr_slave_0: entered promiscuous mode [ 532.025720][T18801] hsr_slave_1: entered promiscuous mode [ 532.034373][T18801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.044760][T18801] Cannot create hsr debugfs directory [ 533.864423][T18799] team0: Port device team_slave_1 added [ 534.008764][T17999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.167080][T18750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.224164][T18910] veth1_macvtap: left promiscuous mode [ 534.243638][T18910] macsec0: entered promiscuous mode [ 534.248896][T18910] macsec0: entered allmulticast mode [ 534.428013][T17999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.695124][T18750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.775580][T18799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.785388][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.867785][T18799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.903606][T18799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.928209][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.980305][T18799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.100354][T18750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.457321][T18799] hsr_slave_0: entered promiscuous mode [ 535.521786][T18799] hsr_slave_1: entered promiscuous mode [ 535.533562][T18799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.555382][T18799] Cannot create hsr debugfs directory [ 535.762844][ C1] net_ratelimit: 8281 callbacks suppressed [ 535.762863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.782016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 535.794579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 535.806977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.820281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.832802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.845270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.858199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 535.870560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 535.882859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.489063][T17999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.757854][T18750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.866222][T18940] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4087'. [ 537.924697][T17999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.002729][T18750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.108835][T18750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.136964][T18750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.615496][T17999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.958776][ T29] audit: type=1107 audit(1720425195.323:17): pid=18944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 539.105391][T18947] netlink: 'syz.1.4089': attribute type 8 has an invalid length. [ 539.135329][T17999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.214949][T18945] netlink: 'syz.1.4089': attribute type 10 has an invalid length. [ 539.277954][T18945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.308803][T18945] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 539.385668][T18731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.614153][T18951] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4091'. [ 539.623724][T18731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 539.715137][T18731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.774513][T18731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.283522][T17999] bridge_slave_1: left allmulticast mode [ 540.289214][T17999] bridge_slave_1: left promiscuous mode [ 540.295979][T18958] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4094'. [ 540.324241][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.374314][T17999] bridge_slave_0: left allmulticast mode [ 540.403897][T17999] bridge_slave_0: left promiscuous mode [ 540.417109][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.485880][T17999] bridge_slave_1: left allmulticast mode [ 540.491586][T17999] bridge_slave_1: left promiscuous mode [ 540.528590][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.589999][T17999] bridge_slave_0: left allmulticast mode [ 540.599915][T17999] bridge_slave_0: left promiscuous mode [ 540.616432][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.658829][T17999] bridge_slave_1: left allmulticast mode [ 540.693371][T17999] bridge_slave_1: left promiscuous mode [ 540.699131][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.764675][T17999] bridge_slave_0: left allmulticast mode [ 540.770369][T17999] bridge_slave_0: left promiscuous mode [ 540.777068][ C1] net_ratelimit: 8185 callbacks suppressed [ 540.777085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.795380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.807880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.813653][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.820967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 540.839298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 540.851733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.864987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.877430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.889807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.903147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 540.936041][T17999] team0: left allmulticast mode [ 540.940956][T17999] team_slave_0: left allmulticast mode [ 540.970849][T17999] team_slave_1: left allmulticast mode [ 540.996498][T17999] bridge0: port 3(team0) entered disabled state [ 541.038147][T17999] bridge_slave_1: left allmulticast mode [ 541.058385][T17999] bridge_slave_1: left promiscuous mode [ 541.083619][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.145526][T17999] bridge_slave_0: left allmulticast mode [ 541.155242][T17999] bridge_slave_0: left promiscuous mode [ 541.161073][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.783121][ C1] net_ratelimit: 6883 callbacks suppressed [ 545.783144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 545.801580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 545.814105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.827002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.839564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.851959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.864484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.877000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.890668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 545.903273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 547.730119][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.789399][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.847394][T17999] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 547.893725][T17999] bond0 (unregistering): Released all slaves [ 548.297575][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.312226][T17999] bond_slave_0: left promiscuous mode [ 548.341868][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.373789][T17999] bond_slave_1: left promiscuous mode [ 548.419557][T17999] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 548.451301][T17999] macvlan2: left promiscuous mode [ 548.481289][T17999] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 548.505378][T17999] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 548.542028][T17999] bond0 (unregistering): Released all slaves [ 548.959748][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.024496][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.085694][T17999] bond0 (unregistering): Released all slaves [ 549.470796][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.523715][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.558470][T17999] bond0 (unregistering): Released all slaves [ 549.613655][T18750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.919315][T17999] : left promiscuous mode [ 550.030346][T18750] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.274277][T17999] tipc: Left network mode [ 550.297154][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.304391][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.384245][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.391420][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.580996][T17999] tipc: Left network mode [ 550.705426][T18731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.792844][ C1] net_ratelimit: 7377 callbacks suppressed [ 550.792865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.811239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.823808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.836289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.848693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.852320][T18750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 550.861985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 550.884200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 550.896622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.909890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.922387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.944514][T18750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.001519][T18731] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.298073][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.305300][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.784378][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.791554][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.075638][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4106'. [ 552.092216][T18731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.141184][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 552.152053][T18731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.237990][T18991] nbd: socks must be embedded in a SOCK_ITEM attr [ 552.620198][T18750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.769988][T18801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.837061][T18801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.940855][T18997] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4108'. [ 553.244976][T18801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.287923][T18999] netlink: 'syz.1.4109': attribute type 2 has an invalid length. [ 553.498495][T19003] netlink: 'syz.1.4110': attribute type 3 has an invalid length. [ 553.643620][T18801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 553.704922][T19003] netlink: 'syz.1.4110': attribute type 3 has an invalid length. [ 554.029153][T19009] block nbd0: not configured, cannot reconfigure [ 554.249804][T18750] veth0_vlan: entered promiscuous mode [ 554.388770][T18731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.453852][T18799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 554.494827][T18799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 554.603958][T18750] veth1_vlan: entered promiscuous mode [ 554.849514][T18799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 554.954505][T18799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 555.380612][T18750] veth0_macvtap: entered promiscuous mode [ 555.568252][T17999] hsr_slave_0: left promiscuous mode [ 555.635266][T17999] hsr_slave_1: left promiscuous mode [ 555.668098][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.683361][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.714851][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.738253][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.802849][ C1] net_ratelimit: 8972 callbacks suppressed [ 555.802871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 555.821207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.834425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.846961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.859498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.871787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.884163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.897362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 555.909854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 555.922086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.939341][T17999] hsr_slave_0: left promiscuous mode [ 555.970865][T17999] hsr_slave_1: left promiscuous mode [ 556.001533][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.019969][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.039307][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.058245][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.085778][T17999] batman_adv: batadv0: Removing interface: ipvlan2 [ 556.155770][T17999] hsr_slave_0: left promiscuous mode [ 556.186108][T17999] hsr_slave_1: left promiscuous mode [ 556.220297][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.233895][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.272400][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.293486][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.373360][T17999] hsr_slave_0: left promiscuous mode [ 556.404511][T17999] hsr_slave_1: left promiscuous mode [ 556.427145][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.455173][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.498616][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.515142][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.710698][T17999] veth1_macvtap: left promiscuous mode [ 556.723684][T17999] veth0_macvtap: left promiscuous mode [ 556.729365][T17999] veth1_vlan: left promiscuous mode [ 556.745636][T17999] veth0_vlan: left promiscuous mode [ 556.790619][T17999] veth1_macvtap: left promiscuous mode [ 556.797108][T17999] veth0_macvtap: left promiscuous mode [ 556.813420][T17999] veth1_vlan: left promiscuous mode [ 556.823488][T17999] veth0_vlan: left promiscuous mode [ 556.877468][T17999] veth1_macvtap: left promiscuous mode [ 556.889051][T17999] veth0_macvtap: left promiscuous mode [ 556.903530][T17999] veth1_vlan: left promiscuous mode [ 556.908926][T17999] veth0_vlan: left promiscuous mode [ 556.973809][T17999] veth1_macvtap: left promiscuous mode [ 556.989645][T17999] veth0_macvtap: left promiscuous mode [ 556.999918][T17999] veth1_vlan: left promiscuous mode [ 557.014971][T17999] veth0_vlan: left promiscuous mode [ 557.991664][T18733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.005383][T18733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.013974][T18733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.024576][T18733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.041750][T18733] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 558.049974][T18733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.990415][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.003366][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.012207][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.021395][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.030741][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 560.040413][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 560.113838][ T5096] Bluetooth: hci3: command tx timeout [ 560.218980][T17999] team0 (unregistering): Port device team_slave_1 removed [ 560.367828][T17999] team0 (unregistering): Port device team_slave_0 removed [ 560.818348][ C1] net_ratelimit: 9114 callbacks suppressed [ 560.818371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.836820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.849279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.862012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 560.874512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:c8:06:e2:36:6f, vlan:0) [ 560.886955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.900151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.912463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.924933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.937330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.233673][ T30] INFO: task syz.0.3764:17821 blocked for more than 143 seconds. [ 561.241449][ T30] Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 561.265244][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 561.293429][ T30] task:syz.0.3764 state:D stack:25648 pid:17821 tgid:17820 ppid:12184 flags:0x00004006 [ 561.333475][ T30] Call Trace: [ 561.336809][ T30] [ 561.339760][ T30] __schedule+0x17e8/0x4a20 [ 561.364499][ T30] ? __pfx___schedule+0x10/0x10 [ 561.383339][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.388464][ T30] ? schedule+0x90/0x320 [ 561.406902][ T30] schedule+0x14b/0x320 [ 561.411117][ T30] schedule_timeout+0xb0/0x310 [ 561.443050][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 561.448483][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.485399][ T30] ? wait_for_completion+0x2fe/0x620 [ 561.490748][ T30] ? wait_for_completion+0x2fe/0x620 [ 561.523500][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.528754][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 561.598565][ T30] ? wait_for_completion+0x2fe/0x620 [ 561.633350][ T30] wait_for_completion+0x355/0x620 [ 561.638539][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 561.679367][ T30] ? __flush_work+0xe6/0xd00 [ 561.696516][ T30] __flush_work+0xaa9/0xd00 [ 561.701270][ T30] ? __flush_work+0xe6/0xd00 [ 561.723440][ T30] ? __pfx___flush_work+0x10/0x10 [ 561.728532][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 561.748098][ T30] ? __pfx___cancel_work+0x10/0x10 [ 561.763836][ T30] ? __pfx_remove_proc_entry+0x10/0x10 [ 561.769363][ T30] __cancel_work_sync+0xbc/0x110 [ 561.783288][ T30] htable_put+0x1e4/0x250 [ 561.787660][ T30] ? __pfx_hashlimit_mt_destroy_v2+0x10/0x10 [ 561.810114][ T30] translate_table+0x1be2/0x2260 [ 561.825420][ T30] ? __pfx_translate_table+0x10/0x10 [ 561.830756][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.843325][ T30] ? __might_fault+0xc6/0x120 [ 561.848049][ T30] ? _copy_from_user+0xa6/0xe0 [ 561.863330][ T30] ? copy_from_sockptr_offset+0x6b/0xb0 [ 561.868923][ T30] do_ipt_set_ctl+0xe3d/0x1250 [ 561.895127][ T30] ? __pfx___might_resched+0x10/0x10 [ 561.900469][ T30] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 561.914248][ T30] ? __pfx_lock_release+0x10/0x10 [ 561.919332][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 561.940369][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 561.946035][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.952050][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.972223][ T30] ? module_put+0x13a/0x2d0 [ 561.977476][ T30] nf_setsockopt+0x295/0x2c0 [ 561.982127][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 562.005126][ T30] do_sock_setsockopt+0x3af/0x720 [ 562.010415][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 562.024196][ T30] ? __fget_files+0x29/0x470 [ 562.028840][ T30] ? __fget_files+0x3f6/0x470 [ 562.045282][ T30] __sys_setsockopt+0x1ae/0x250 [ 562.050194][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 562.068633][ T30] do_syscall_64+0xf3/0x230 [ 562.073912][ T30] ? clear_bhb_loop+0x35/0x90 [ 562.078769][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.100622][ T30] RIP: 0033:0x7ff4cfb75bd9 [ 562.105733][ T30] RSP: 002b:00007ff4d0a13048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 562.115300][ T5096] Bluetooth: hci5: command tx timeout [ 562.134384][ T30] RAX: ffffffffffffffda RBX: 00007ff4cfd03f60 RCX: 00007ff4cfb75bd9 [ 562.142493][ T30] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 562.168553][ T30] RBP: 00007ff4cfbe4aa1 R08: 0000000000000448 R09: 0000000000000000 [ 562.177049][ T30] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000000 [ 562.193020][ T5096] Bluetooth: hci3: command tx timeout [ 562.203562][ T30] R13: 000000000000000b R14: 00007ff4cfd03f60 R15: 00007ffd497f98e8 [ 562.211829][ T30] [ 562.224953][ T30] [ 562.224953][ T30] Showing all locks held in the system: [ 562.232697][ T30] 1 lock held by khungtaskd/30: [ 562.283271][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 562.323458][ T30] 2 locks held by kworker/1:1/45: [ 562.328544][ T30] 2 locks held by kworker/1:2/1800: [ 562.354744][ T30] 2 locks held by getty/4842: [ 562.359473][ T30] #0: ffff88802a5560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 562.423219][ T30] #1: ffffc90002f1e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 562.464397][ T30] 3 locks held by kworker/0:6/5142: [ 562.469638][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 562.533805][ T30] #1: ffffc9000489fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 562.576226][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 562.613509][ T30] 3 locks held by kworker/0:7/5143: [ 562.618756][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 562.695365][ T30] #1: ffffc900048afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 562.730257][ T30] #2: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 562.763896][ T30] 2 locks held by kworker/1:5/5158: [ 562.769138][ T30] 2 locks held by kworker/0:8/5171: [ 562.784094][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 562.806566][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 562.832392][ T30] 2 locks held by kworker/1:6/5192: [ 562.843421][ T30] 4 locks held by kworker/1:7/5195: [ 562.848650][ T30] 3 locks held by kworker/u8:11/9356: [ 562.869133][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 562.879946][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 562.903356][ T30] #2: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 562.939018][ T30] 3 locks held by syz-executor/17851: [ 562.944643][ T30] #0: ffff88807b168d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 562.963274][ T30] #1: ffff88807b168078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 562.984969][ T30] #2: ffffffff8f751588 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 563.010814][ T30] 3 locks held by kworker/u8:32/17995: [ 563.017161][ T30] #0: ffff888029cdf948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 563.043287][ T30] #1: ffffc9000c33fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 563.069809][ T30] #2: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 563.093447][ T30] 5 locks held by kworker/u8:36/17999: [ 563.098941][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 563.127878][ T30] #1: ffffc9000c26fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 563.142006][ T30] #2: ffffffff8f5da650 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 563.173500][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.179829][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.213989][ T30] #3: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 563.256185][ T30] #4: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 563.293352][ T30] 2 locks held by kworker/1:0/18488: [ 563.298687][ T30] 1 lock held by syz-executor/18731: [ 563.323384][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.366179][ T30] 1 lock held by syz-executor/18750: [ 563.371509][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.403464][ T30] 1 lock held by syz-executor/18799: [ 563.408797][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.453275][ T30] 1 lock held by syz-executor/18801: [ 563.458612][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.513438][ T30] 1 lock held by syz.1.4116/19022: [ 563.518625][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x8a/0x1f0 [ 563.553987][ T30] 1 lock held by syz-executor/19027: [ 563.559571][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.593464][ T30] 1 lock held by syz-executor/19030: [ 563.598795][ T30] #0: ffffffff8f5e6e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 563.650537][ T30] [ 563.666602][ T30] ============================================= [ 563.666602][ T30] [ 563.705425][ T30] NMI backtrace for cpu 0 [ 563.709799][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 563.719713][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 563.729783][ T30] Call Trace: [ 563.733072][ T30] [ 563.736016][ T30] dump_stack_lvl+0x241/0x360 [ 563.740724][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.745942][ T30] ? __pfx__printk+0x10/0x10 [ 563.750550][ T30] ? vprintk_emit+0x631/0x770 [ 563.755245][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 563.760295][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 563.765255][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 563.770730][ T30] ? _printk+0xd5/0x120 [ 563.774902][ T30] ? __pfx__printk+0x10/0x10 [ 563.779520][ T30] ? __wake_up_klogd+0xcc/0x110 [ 563.784401][ T30] ? __pfx__printk+0x10/0x10 [ 563.789013][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 563.794061][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.800152][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 563.806158][ T30] watchdog+0xfde/0x1020 [ 563.810423][ T30] ? watchdog+0x1ea/0x1020 [ 563.814869][ T30] ? __pfx_watchdog+0x10/0x10 [ 563.819563][ T30] kthread+0x2f0/0x390 [ 563.823658][ T30] ? __pfx_watchdog+0x10/0x10 [ 563.828438][ T30] ? __pfx_kthread+0x10/0x10 [ 563.833050][ T30] ret_from_fork+0x4b/0x80 [ 563.837483][ T30] ? __pfx_kthread+0x10/0x10 [ 563.842095][ T30] ret_from_fork_asm+0x1a/0x30 [ 563.846896][ T30] [ 563.853884][ T30] Sending NMI from CPU 0 to CPUs 1: [ 563.859135][ C1] NMI backtrace for cpu 1 [ 563.859149][ C1] CPU: 1 PID: 5195 Comm: kworker/1:7 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 563.859171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 563.859184][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 563.859214][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2d/0x90 [ 563.859255][ C1] Code: fa 4c 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 c0 a8 6d 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 <74> 52 8b 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b [ 563.859272][ C1] RSP: 0018:ffffc90000a17590 EFLAGS: 00000246 [ 563.859288][ C1] RAX: 0000000080000101 RBX: ffff888064f6a860 RCX: ffff8880186e9e00 [ 563.859304][ C1] RDX: ffff8880186e9e00 RSI: 0000000000000008 RDI: 0000000000000000 [ 563.859317][ C1] RBP: ffff888064f6a850 R08: ffffffff8a2e82e9 R09: 0000000000000000 [ 563.859331][ C1] R10: ffffc90000a17640 R11: fffff52000142ece R12: ffffc90000a17be8 [ 563.859347][ C1] R13: ffffc90000a17640 R14: 0000000000000008 R15: ffff888011fdb200 [ 563.859361][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 563.859378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.859397][ C1] CR2: 0000000020000440 CR3: 000000000e132000 CR4: 00000000003506f0 [ 563.859413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.859426][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 563.859438][ C1] Call Trace: [ 563.859446][ C1] [ 563.859455][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 563.859476][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 563.859499][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 563.859518][ C1] ? nmi_handle+0x2a/0x5a0 [ 563.859554][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 563.859576][ C1] ? nmi_handle+0x14f/0x5a0 [ 563.859602][ C1] ? nmi_handle+0x2a/0x5a0 [ 563.859628][ C1] ? __sanitizer_cov_trace_const_cmp4+0x2d/0x90 [ 563.859648][ C1] ? default_do_nmi+0x63/0x160 [ 563.859669][ C1] ? exc_nmi+0x123/0x1f0 [ 563.859689][ C1] ? end_repeat_nmi+0xf/0x53 [ 563.859718][ C1] ? fib6_node_lookup_1+0x529/0x8b0 [ 563.859746][ C1] ? __sanitizer_cov_trace_const_cmp4+0x2d/0x90 [ 563.859768][ C1] ? __sanitizer_cov_trace_const_cmp4+0x2d/0x90 [ 563.859791][ C1] ? __sanitizer_cov_trace_const_cmp4+0x2d/0x90 [ 563.859812][ C1] [ 563.859819][ C1] [ 563.859825][ C1] fib6_node_lookup_1+0x529/0x8b0 [ 563.859857][ C1] fib6_node_lookup+0x14a/0x250 [ 563.859885][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 563.859921][ C1] fib6_table_lookup+0xc6/0xbb0 [ 563.859957][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 563.859982][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 563.860008][ C1] ip6_pol_route+0x273/0x15d0 [ 563.860035][ C1] ? ip6_pol_route+0x198/0x15d0 [ 563.860061][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 563.860084][ C1] ? br_nf_dev_queue_xmit+0x52b/0x1ae0 [ 563.860118][ C1] fib6_rule_lookup+0x58c/0x790 [ 563.860142][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.860163][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 563.860188][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 563.860218][ C1] ? __pfx_validate_chain+0x10/0x10 [ 563.860241][ C1] ? __pfx_lock_release+0x10/0x10 [ 563.860265][ C1] ip6_route_input+0x859/0xd90 [ 563.860289][ C1] ? mark_lock+0x9a/0x350 [ 563.860315][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 563.860356][ C1] ? ip6_rcv_finish_core+0x20f/0x410 [ 563.860379][ C1] ip6_rcv_finish+0x144/0x180 [ 563.860403][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 563.860424][ C1] ip_sabotage_in+0x203/0x290 [ 563.860447][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 563.860467][ C1] nf_hook_slow+0xc3/0x220 [ 563.860495][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 563.860515][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 563.860534][ C1] NF_HOOK+0x29e/0x450 [ 563.860553][ C1] ? skb_orphan+0xae/0xd0 [ 563.860575][ C1] ? NF_HOOK+0x9a/0x450 [ 563.860594][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.860616][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 563.860640][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 563.860661][ C1] __netif_receive_skb+0x1ea/0x650 [ 563.860688][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 563.860708][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 563.860742][ C1] ? netif_receive_skb+0x131/0x890 [ 563.860766][ C1] ? netif_receive_skb+0x131/0x890 [ 563.860790][ C1] netif_receive_skb+0x1e8/0x890 [ 563.860813][ C1] ? __pfx_lock_release+0x10/0x10 [ 563.860833][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 563.860861][ C1] ? br_netif_receive_skb+0x130/0x1a0 [ 563.860887][ C1] NF_HOOK+0x9e/0x400 [ 563.860908][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 563.860929][ C1] ? NF_HOOK+0xfc/0x400 [ 563.860950][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.860972][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 563.860997][ C1] ? br_pass_frame_up+0x297/0x420 [ 563.861022][ C1] br_handle_frame_finish+0x18eb/0x1fe0 [ 563.861054][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 563.861075][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 563.861094][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 563.861113][ C1] ? ip6t_do_table+0x205/0x18a0 [ 563.861137][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 563.861156][ C1] ? nf_conntrack_in+0x15e6/0x1880 [ 563.861178][ C1] ? ipv6_ext_hdr+0x71/0x80 [ 563.861198][ C1] ? ip6t_do_table+0x205/0x18a0 [ 563.861225][ C1] ? nf_hook_slow+0x175/0x220 [ 563.861251][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 563.861274][ C1] br_nf_hook_thresh+0x472/0x590 [ 563.861301][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 563.861324][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 563.861350][ C1] ? skb_push+0x97/0x100 [ 563.861375][ C1] br_nf_pre_routing_finish_ipv6+0xa9e/0xdd0 [ 563.861402][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 563.861432][ C1] br_nf_pre_routing_ipv6+0x370/0x760 [ 563.861455][ C1] ? br_nf_pre_routing_ipv6+0x415/0x760 [ 563.861478][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 563.861503][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 563.861525][ C1] ? br_nf_pre_routing+0x70c/0x1460 [ 563.861550][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 563.861572][ C1] br_handle_frame+0x9f3/0x1520 [ 563.861600][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 563.861623][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 563.861645][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 563.861670][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 563.861692][ C1] __netif_receive_skb_core+0x13d3/0x4420 [ 563.861724][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 563.861753][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 563.861791][ C1] __netif_receive_skb+0x12f/0x650 [ 563.861817][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 563.861837][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 563.861860][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.861880][ C1] ? __pfx_lock_release+0x10/0x10 [ 563.861901][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 563.861934][ C1] ? process_backlog+0x2d9/0x7d0 [ 563.861959][ C1] process_backlog+0x391/0x7d0 [ 563.861991][ C1] ? __pfx_process_backlog+0x10/0x10 [ 563.862016][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.862038][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 563.862060][ C1] __napi_poll+0xcb/0x490 [ 563.862087][ C1] net_rx_action+0x7bb/0x10a0 [ 563.862124][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 563.862152][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.862182][ C1] handle_softirqs+0x2c4/0x970 [ 563.862204][ C1] ? do_softirq+0x11b/0x1e0 [ 563.862225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 563.862250][ C1] do_softirq+0x11b/0x1e0 [ 563.862267][ C1] [ 563.862274][ C1] [ 563.862282][ C1] ? __pfx_do_softirq+0x10/0x10 [ 563.862301][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 563.862323][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.862346][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 563.862366][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 563.862394][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 563.862414][ C1] ? neigh_destroy+0x41e/0x580 [ 563.862442][ C1] neigh_periodic_work+0xb35/0xd50 [ 563.862473][ C1] ? process_scheduled_works+0x945/0x1830 [ 563.862493][ C1] process_scheduled_works+0xa2c/0x1830 [ 563.862529][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 563.862554][ C1] ? assign_work+0x364/0x3d0 [ 563.862576][ C1] worker_thread+0x86d/0xd50 [ 563.862602][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 563.862623][ C1] ? __kthread_parkme+0x169/0x1d0 [ 563.862646][ C1] ? __pfx_worker_thread+0x10/0x10 [ 563.862666][ C1] kthread+0x2f0/0x390 [ 563.862687][ C1] ? __pfx_worker_thread+0x10/0x10 [ 563.862707][ C1] ? __pfx_kthread+0x10/0x10 [ 563.862731][ C1] ret_from_fork+0x4b/0x80 [ 563.862752][ C1] ? __pfx_kthread+0x10/0x10 [ 563.862771][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.862806][ C1] [ 564.783475][ T5096] Bluetooth: hci5: command tx timeout [ 564.788928][ T5096] Bluetooth: hci3: command tx timeout [ 565.083319][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 565.090224][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 565.100141][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 565.110212][ T30] Call Trace: [ 565.113503][ T30] [ 565.116443][ T30] dump_stack_lvl+0x241/0x360 [ 565.121147][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.126366][ T30] ? __pfx__printk+0x10/0x10 [ 565.130979][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.136981][ T30] ? vscnprintf+0x5d/0x90 [ 565.141339][ T30] panic+0x349/0x860 [ 565.145342][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 565.151510][ T30] ? __pfx_panic+0x10/0x10 [ 565.155943][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 565.161335][ T30] ? __irq_work_queue_local+0x137/0x410 [ 565.166898][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 565.172288][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 565.178455][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 565.184628][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 565.190805][ T30] watchdog+0x101d/0x1020 [ 565.195150][ T30] ? watchdog+0x1ea/0x1020 [ 565.199589][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.204291][ T30] kthread+0x2f0/0x390 [ 565.208376][ T30] ? __pfx_watchdog+0x10/0x10 [ 565.213065][ T30] ? __pfx_kthread+0x10/0x10 [ 565.217672][ T30] ret_from_fork+0x4b/0x80 [ 565.222105][ T30] ? __pfx_kthread+0x10/0x10 [ 565.226796][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.231595][ T30] [ 565.234843][ T30] Kernel Offset: disabled [ 565.239252][ T30] Rebooting in 86400 seconds..