last executing test programs: 1m31.885231003s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 1m30.873342978s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 1m17.079255711s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 1m11.703258293s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 1m3.235883436s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 1m0.017870828s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 46.404666892s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 45.284199064s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 31.015522985s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 29.972998354s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 12.46839305s ago: executing program 3 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x205, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x1b5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) 11.733983088s ago: executing program 4 (id=2186): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x7, 0xc95, 0x850, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000100000400000000020000000000208028ea59df68595f3e000000000000000000"], 0x0, 0x35}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="f75398251e3de8d879bbbc0196c643609ff96292bcae8d1758130ee5780888ac905d73ac51e83fb361dfd015ac527bce569884b0f7ccb8f1866ba4a120a1b829c065241b4cf89edbfac1de2da23e981315c7573a260eb0f0f51ccfab18b383ec66f24b015bc9ab61091592008b2b94ce639da7361557be03359c3577862c2cba5a271b032de6f339adf415e26ddf6b3acff915b0750c45b3e9aaa8a9e0e196eb8c8d02548e62cdc76dd109c817c83cb15f836805f330deb2ffa552b7eca86f3aa5155f2923e7a041e6052f01d68cd2498fdabcb98666b08fa98830c863c26f0db1d55ca6c378d506c8fd", &(0x7f00000001c0)=""/115}, 0x20) r1 = socket(0x0, 0x80000, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000100)="1100000052004f7fb3e4bf80a000f00c0a", 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00eacf750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a460a685fe53bb761d31fa9441da7dab1e0e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110}], 0x20}, 0x0) 3.240322221s ago: executing program 2 (id=4037): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x60}, 0x1, 0x7}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002f40)) (rerun: 64) 2.974153298s ago: executing program 2 (id=4040): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 2.578295379s ago: executing program 2 (id=4044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000002c0)=0x7, &(0x7f0000000340)=0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r3, &(0x7f0000000540)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000400)=""/126, 0x7e}], 0x1, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x2081, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000004c0)=0x9, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) 1.647858231s ago: executing program 1 (id=4047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100d9000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0041800900010068617368000000000c00028008000740000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x89e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x13}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/220, 0x28, 0xdc, 0xe}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x300000000000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14) 1.616339921s ago: executing program 2 (id=4048): socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="010000f9abae8b0000003b0000000300", @ANYRES32=r5, @ANYBLOB="2e00330050505050505000000004000000000000000000"], 0x4c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="65d8f5dc7448d308cfae26a429e3d63dd98faf22c71a587e9dec9e1b004372268116eac0262df146d0c31f55b5c808729ef9ee7167c4455f90bd0a147a0adf50ce425e2ce8e22958197067aa28cf1590e951bac0f29432c40560386de21be92517b09287df90c5fd124fc9c56f1c17380b10c431fe3c1cca663a330a74fe3d6764e52e9af8a35717dd8970ddf34dd6f7363ef205c8d82661", @ANYRES16=r4, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x21) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_create1(0x0) socket$packet(0x11, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001e0001ffffa8d9f0c838070007"], 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) 1.455685051s ago: executing program 1 (id=4049): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = epoll_create1(0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) (async) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)="711f2abf2d0c38265264344732", 0xd}}, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012060, 0x0) (rerun: 64) 1.4484399s ago: executing program 0 (id=4050): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 1.304310038s ago: executing program 0 (id=4051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x76, 0x10, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x4040801}, 0x0) 1.304021285s ago: executing program 1 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008ff0000b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x17, &(0x7f0000000500)={r1}, 0xc) 1.241889891s ago: executing program 1 (id=4053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c1800001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000008000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) 1.191779221s ago: executing program 2 (id=4054): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.130478936s ago: executing program 0 (id=4055): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x10080) 1.129860347s ago: executing program 1 (id=4056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r2}}}}}]}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d000000008021100000108021100000050505050505006010009"], 0x4c}}, 0x0) 978.051858ms ago: executing program 0 (id=4057): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 887.064811ms ago: executing program 0 (id=4058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000002c0)=0x7, &(0x7f0000000340)=0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r3, &(0x7f0000000540)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000400)=""/126, 0x7e}], 0x1, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x2081, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000004c0)=0x9, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) 652.025758ms ago: executing program 1 (id=4059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100d9000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0041800900010068617368000000000c00028008000740000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x89e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x13}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/220, 0x28, 0xdc, 0xe}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x300000000000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14) 571.289554ms ago: executing program 2 (id=4060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xe) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/32, 0x20}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/185, 0xb9}], 0x1, &(0x7f00000003c0)}}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000130001008028d58ef5643866254288b3", @ANYRES32=0x0, @ANYBLOB="0000010000000000140003006772653000000000000000000000000054001a80080002800400018018000a801400070000000000000000000000000000000001300002"], 0x88}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000200)=r3}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000100)) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x4, 0x0, 0x20001f00) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty, 0xe, r9}) 0s ago: executing program 0 (id=4061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100d9000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0041800900010068617368000000000c00028008000740000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x89e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x13}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/220, 0x28, 0xdc, 0xe}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x300000000000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): adv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.748965][T16286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.755960][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.783196][T16286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.839183][T16286] hsr_slave_0: entered promiscuous mode [ 447.845741][T16286] hsr_slave_1: entered promiscuous mode [ 447.994422][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.074810][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.162020][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.330582][ T1152] bridge_slave_1: left allmulticast mode [ 448.341224][ T1152] bridge_slave_1: left promiscuous mode [ 448.352771][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.368709][ T1152] bridge_slave_0: left allmulticast mode [ 448.374622][ T1152] bridge_slave_0: left promiscuous mode [ 448.382242][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.663935][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.692428][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.708405][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.718443][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.740291][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 448.752496][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.075850][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.088927][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.097487][ T53] Bluetooth: hci2: command tx timeout [ 449.110638][ T1152] bond0 (unregistering): Released all slaves [ 449.206189][T16299] team0: Device ipvlan2 is already an upper device of the team interface [ 449.295574][T16309] netlink: zone id is out of range [ 449.304319][T16309] netlink: set zone limit has 8 unknown bytes [ 449.432135][T16315] dccp_invalid_packet: P.Data Offset(0) too small [ 449.651958][T16303] lo speed is unknown, defaulting to 1000 [ 449.911325][T16286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.950424][T16286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.985177][T16286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.025373][T16286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.181234][T16326] lo speed is unknown, defaulting to 1000 [ 450.457510][ T1152] hsr_slave_0: left promiscuous mode [ 450.477665][ T1152] hsr_slave_1: left promiscuous mode [ 450.503061][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.518986][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.538028][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.545501][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.609761][ T1152] veth1_macvtap: left promiscuous mode [ 450.615479][ T1152] veth0_macvtap: left promiscuous mode [ 450.656531][ T1152] veth1_vlan: left promiscuous mode [ 450.672339][ T1152] veth0_vlan: left promiscuous mode [ 450.857084][ T53] Bluetooth: hci3: command tx timeout [ 451.176873][ T53] Bluetooth: hci2: command tx timeout [ 451.619509][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 451.674457][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 452.203547][T16334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3599'. [ 452.622322][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.691976][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.775295][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.782555][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.880043][T16303] chnl_net:caif_netlink_parms(): no params data found [ 452.933715][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.937613][ T53] Bluetooth: hci3: command tx timeout [ 452.940969][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.200197][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.257399][ T53] Bluetooth: hci2: command tx timeout [ 453.373275][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.417716][T16303] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.425031][T16303] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.433650][T16303] bridge_slave_0: entered allmulticast mode [ 453.441581][T16303] bridge_slave_0: entered promiscuous mode [ 453.480147][T16303] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.498017][T16303] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.518349][T16303] bridge_slave_1: entered allmulticast mode [ 453.525880][T16303] bridge_slave_1: entered promiscuous mode [ 453.557979][T16286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.583702][T16370] Bluetooth: MGMT ver 1.22 [ 453.653558][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.701382][T16369] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 453.720748][T16369] macvtap0: entered allmulticast mode [ 453.737606][T16369] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 453.762591][T16369] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 453.770284][T16369] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 453.855769][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.875145][T16378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3610'. [ 453.987663][T16303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.021753][T16372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3610'. [ 454.060338][T16303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.157968][T16386] netlink: 'syz.2.3614': attribute type 1 has an invalid length. [ 454.165768][T16386] netlink: 'syz.2.3614': attribute type 1 has an invalid length. [ 454.194797][T16386] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3614'. [ 454.243469][T16303] team0: Port device team_slave_0 added [ 454.280336][T16303] team0: Port device team_slave_1 added [ 454.396314][T16303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.415099][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.429708][T16396] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3618'. [ 454.454837][T16303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.479484][T16396] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 454.525588][T16303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.567007][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.636143][T16303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.659908][T16398] netlink: 'syz.1.3617': attribute type 32 has an invalid length. [ 454.669379][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3617'. [ 454.706168][T16398] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 454.812192][T16303] hsr_slave_0: entered promiscuous mode [ 454.844994][T16303] hsr_slave_1: entered promiscuous mode [ 454.860191][T16303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.868307][T16303] Cannot create hsr debugfs directory [ 454.959879][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.010949][ T1152] bridge_slave_1: left allmulticast mode [ 455.017203][ T53] Bluetooth: hci3: command tx timeout [ 455.018190][ T1152] bridge_slave_1: left promiscuous mode [ 455.028668][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.052513][ T1152] bridge_slave_0: left allmulticast mode [ 455.062293][ T1152] bridge_slave_0: left promiscuous mode [ 455.080997][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.346798][ T53] Bluetooth: hci2: command tx timeout [ 455.783239][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.795683][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.808991][ T1152] bond0 (unregistering): Released all slaves [ 455.852122][T16421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3625'. [ 455.975428][T16424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3625'. [ 456.228789][T16440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3631'. [ 456.330048][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 456.529298][T16454] netlink: 'syz.0.3637': attribute type 32 has an invalid length. [ 456.548380][T16454] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 456.602411][T16459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.630325][T16459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.666271][T16459] netlink: 'syz.2.3639': attribute type 3 has an invalid length. [ 456.690575][T16459] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 456.863113][ T1152] hsr_slave_0: left promiscuous mode [ 456.870392][ T1152] hsr_slave_1: left promiscuous mode [ 456.886710][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.894260][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.906181][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.913882][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.946546][ T1152] veth1_macvtap: left promiscuous mode [ 456.953053][ T1152] veth0_macvtap: left promiscuous mode [ 456.959374][ T1152] veth1_vlan: left promiscuous mode [ 456.964773][ T1152] veth0_vlan: left promiscuous mode [ 457.018738][T16468] Bluetooth: MGMT ver 1.22 [ 457.097087][ T53] Bluetooth: hci3: command tx timeout [ 457.669140][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 457.723077][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 457.768024][T16467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 457.865445][T16473] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 458.361016][T16470] __nla_validate_parse: 1 callbacks suppressed [ 458.361037][T16470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3643'. [ 458.447407][T16286] veth0_vlan: entered promiscuous mode [ 458.485719][T16286] veth1_vlan: entered promiscuous mode [ 458.586503][ T29] audit: type=1804 audit(1719635430.196:27): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3647" name="/root/syzkaller.ymEYxN/29/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0 [ 458.661798][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 458.676093][T16286] veth0_macvtap: entered promiscuous mode [ 458.738849][T16286] veth1_macvtap: entered promiscuous mode [ 458.828864][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.847751][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.859311][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.872549][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.884850][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.896664][T16487] xt_limit: Overflow, try lower: 262144/524288 [ 458.916792][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.940145][T16286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.961415][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'. [ 459.000511][T16485] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 459.060805][T16488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 459.164338][T16498] netlink: 'syz.2.3652': attribute type 3 has an invalid length. [ 459.184230][T16498] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 459.250823][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.272764][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.293387][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.308702][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.334027][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.354843][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.366605][T16286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.377407][T16286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.392988][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.437698][T16502] netlink: 'syz.1.3653': attribute type 32 has an invalid length. [ 459.463067][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 459.476855][T16502] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 459.520126][T16286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.530942][T16286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.541636][T16286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.550418][T16286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.588892][T16303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.609614][T16303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.625066][T16303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.672586][T16303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 459.721926][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.736273][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.784818][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.794076][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3656'. [ 459.806027][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.817719][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3656'. [ 459.998669][T16303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.030160][T16303] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.047903][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.055175][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.082691][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.089996][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.208299][T16505] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.255666][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3658'. [ 460.451788][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3660'. [ 460.611825][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.716366][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.764438][T16303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.009302][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.045045][T16303] veth0_vlan: entered promiscuous mode [ 461.060006][T16303] veth1_vlan: entered promiscuous mode [ 461.094213][T16303] veth0_macvtap: entered promiscuous mode [ 461.106248][T16303] veth1_macvtap: entered promiscuous mode [ 461.125306][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.138711][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.150206][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.160840][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.171043][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.181815][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.191792][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.202407][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.214424][T16303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.237299][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.254331][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.265850][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.277897][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.289137][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.300027][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.309968][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.320682][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.330575][T16303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.343961][T16303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.355381][T16303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.379890][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.404003][T16303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.413132][T16303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.422404][T16303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.431505][T16303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.703900][ T65] bridge_slave_1: left allmulticast mode [ 461.720237][ T65] bridge_slave_1: left promiscuous mode [ 461.726098][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.814729][ T65] bridge_slave_0: left allmulticast mode [ 461.845963][ T65] bridge_slave_0: left promiscuous mode [ 461.885276][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.179120][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 462.189922][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 462.206787][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 462.215859][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 462.224203][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 462.236970][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.516711][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.530381][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.543844][ T65] bond0 (unregistering): Released all slaves [ 462.572106][T16562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3667'. [ 462.581463][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.589699][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.598452][T16564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3667'. [ 462.753037][ T5271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.785223][ T5271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.838487][T16573] netlink: 'syz.1.3668': attribute type 32 has an invalid length. [ 462.866952][T16573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 462.936922][T16565] lo speed is unknown, defaulting to 1000 [ 463.576475][T16571] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 463.614824][T16595] dccp_v6_rcv: dropped packet with invalid checksum [ 463.732077][ T65] hsr_slave_0: left promiscuous mode [ 463.757443][T16598] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 463.769667][T16604] atomic_op ffff888022d6f198 conn xmit_atomic 0000000000000000 [ 463.780528][ T65] hsr_slave_1: left promiscuous mode [ 463.788515][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.812020][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.831188][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.839719][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.923131][ T65] veth1_macvtap: left promiscuous mode [ 463.933420][ T65] veth0_macvtap: left promiscuous mode [ 463.945810][ T65] veth1_vlan: left promiscuous mode [ 463.953606][ T65] veth0_vlan: left promiscuous mode [ 464.298161][ T5103] Bluetooth: hci2: command tx timeout [ 464.675810][ T65] team0 (unregistering): Port device team_slave_1 removed [ 464.742536][ T65] team0 (unregistering): Port device team_slave_0 removed [ 465.303129][T16604] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 465.311582][T16613] __nla_validate_parse: 2 callbacks suppressed [ 465.311604][T16613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3680'. [ 465.345580][T16616] netlink: 'syz.1.3681': attribute type 32 has an invalid length. [ 465.356725][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 465.387230][T16616] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 465.459874][T16622] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 465.491830][T16565] chnl_net:caif_netlink_parms(): no params data found [ 465.746661][T16631] Unsupported ieee802154 address type: 0 [ 465.856412][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.885923][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.895233][T16565] bridge_slave_0: entered allmulticast mode [ 465.904940][T16565] bridge_slave_0: entered promiscuous mode [ 465.915060][T16565] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.923842][T16565] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.931382][T16565] bridge_slave_1: entered allmulticast mode [ 465.940105][T16565] bridge_slave_1: entered promiscuous mode [ 466.030268][T16565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.093901][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.127671][T16565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.184749][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.222105][T16565] team0: Port device team_slave_0 added [ 466.232628][T16565] team0: Port device team_slave_1 added [ 466.275050][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.305543][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.313155][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.344011][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.381962][ T5103] Bluetooth: hci2: command tx timeout [ 466.391595][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.405759][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.413041][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.439370][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.525939][T16565] hsr_slave_0: entered promiscuous mode [ 466.535443][T16565] hsr_slave_1: entered promiscuous mode [ 466.622664][ T65] bridge_slave_1: left allmulticast mode [ 466.628549][ T65] bridge_slave_1: left promiscuous mode [ 466.634276][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.644109][ T65] bridge_slave_0: left allmulticast mode [ 466.650891][ T65] bridge_slave_0: left promiscuous mode [ 466.656842][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.031262][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.044967][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.056343][ T65] bond0 (unregistering): Released all slaves [ 467.522124][ T65] hsr_slave_0: left promiscuous mode [ 467.528709][ T65] hsr_slave_1: left promiscuous mode [ 467.558632][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.566165][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.601178][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.616863][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.667485][ T65] veth1_macvtap: left promiscuous mode [ 467.673088][ T65] veth0_macvtap: left promiscuous mode [ 467.693506][ T65] veth1_vlan: left promiscuous mode [ 467.702646][ T65] veth0_vlan: left promiscuous mode [ 467.935747][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.945990][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.963372][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.974311][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.988493][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.005012][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.454256][ T65] team0 (unregistering): Port device team_slave_1 removed [ 468.472162][ T53] Bluetooth: hci2: command tx timeout [ 468.519902][ T65] team0 (unregistering): Port device team_slave_0 removed [ 469.182033][T16651] lo speed is unknown, defaulting to 1000 [ 469.277590][T16660] netlink: 'syz.2.3694': attribute type 32 has an invalid length. [ 469.304116][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 469.326869][T16660] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 469.363541][T16565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.390202][T16565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.422642][T16565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.471987][T16565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.800386][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.875108][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.904697][T16651] chnl_net:caif_netlink_parms(): no params data found [ 469.929135][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.936310][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.972123][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.979349][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.986319][T16655] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 470.058594][ T53] Bluetooth: hci3: command tx timeout [ 470.225667][T16686] Unsupported ieee802154 address type: 0 [ 470.278797][T16651] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.286076][T16651] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.293512][T16651] bridge_slave_0: entered allmulticast mode [ 470.318421][T16651] bridge_slave_0: entered promiscuous mode [ 470.371913][T16689] netlink: 'syz.0.3703': attribute type 11 has an invalid length. [ 470.397296][T16651] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.404578][T16651] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.437056][T16651] bridge_slave_1: entered allmulticast mode [ 470.444763][T16651] bridge_slave_1: entered promiscuous mode [ 470.537270][ T53] Bluetooth: hci2: command tx timeout [ 470.543772][T16651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.573082][T16651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.615107][T16701] netlink: 'syz.2.3705': attribute type 32 has an invalid length. [ 470.646945][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'. [ 470.669337][T16701] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 470.735634][T16651] team0: Port device team_slave_0 added [ 470.762188][T16651] team0: Port device team_slave_1 added [ 470.798935][T16706] netlink: 'syz.2.3707': attribute type 10 has an invalid length. [ 470.827996][T16706] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.840582][T16706] bond0: (slave team0): Enslaving as an active interface with an up link [ 470.878848][T16651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.890990][T16651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.919634][T16651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.933704][T16651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.941493][T16651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.969128][T16651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.004847][T16706] netlink: 'syz.2.3707': attribute type 10 has an invalid length. [ 471.018321][T16706] bond0: (slave team0): Releasing backup interface [ 471.031334][T16706] bridge0: port 3(team0) entered blocking state [ 471.045615][T16706] bridge0: port 3(team0) entered disabled state [ 471.052761][T16706] team0: entered allmulticast mode [ 471.058229][T16706] team_slave_0: entered allmulticast mode [ 471.064091][T16706] team_slave_1: entered allmulticast mode [ 471.074589][T16706] team0: entered promiscuous mode [ 471.079912][T16706] team_slave_0: entered promiscuous mode [ 471.086055][T16706] team_slave_1: entered promiscuous mode [ 471.190200][T16651] hsr_slave_0: entered promiscuous mode [ 471.200524][T16651] hsr_slave_1: entered promiscuous mode [ 471.212156][T16651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.224827][T16651] Cannot create hsr debugfs directory [ 471.237517][T16565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.309627][T16712] netlink: 'syz.2.3709': attribute type 2 has an invalid length. [ 471.354434][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'. [ 471.386965][ T29] audit: type=1800 audit(1719635442.996:28): pid=16715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3709" name="memory.events" dev="sda1" ino=1990 res=0 errno=0 [ 471.622704][T16565] veth0_vlan: entered promiscuous mode [ 471.709450][T16565] veth1_vlan: entered promiscuous mode [ 471.767215][T16727] Unsupported ieee802154 address type: 0 [ 471.805284][T16565] veth0_macvtap: entered promiscuous mode [ 471.818798][T16565] veth1_macvtap: entered promiscuous mode [ 471.863374][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.874569][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.891624][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.905658][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.915817][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.926732][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.938684][T16565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.952555][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 471.997133][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.009477][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.019786][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.030558][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.040565][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.051189][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.069297][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.082385][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.105773][T16565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.130302][T16565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.139758][ T53] Bluetooth: hci3: command tx timeout [ 472.148771][T16565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.165056][T16565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.176450][T16565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.244569][T16730] lo speed is unknown, defaulting to 1000 [ 472.499643][T16733] netlink: 'syz.1.3717': attribute type 32 has an invalid length. [ 472.522061][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 472.557169][T16733] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 472.609926][T16651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.642057][ T5276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.651778][ T5276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.677092][T16651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.736019][T16651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.790854][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.802392][T16651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.820551][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.326206][T16651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.405409][T16651] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.430781][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.438033][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.476043][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.483208][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.793870][T16763] Unsupported ieee802154 address type: 0 [ 473.934850][T16651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.135387][T16777] netlink: 'syz.2.3729': attribute type 32 has an invalid length. [ 474.173709][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 474.193341][T16777] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 474.216968][ T53] Bluetooth: hci3: command tx timeout [ 474.433135][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.585315][T16651] veth0_vlan: entered promiscuous mode [ 474.602437][T16651] veth1_vlan: entered promiscuous mode [ 474.643408][T16651] veth0_macvtap: entered promiscuous mode [ 474.657974][T16651] veth1_macvtap: entered promiscuous mode [ 474.679321][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.690166][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.701096][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.713866][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.723754][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.735959][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.753275][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.764090][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.776343][T16651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.794753][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.811190][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.823707][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.834566][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.844603][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.856587][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.871670][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.882314][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.892483][T16651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.902995][T16651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.914837][T16651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.933901][T16651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.944826][T16651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.962148][T16651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.970967][T16651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.064715][ T5271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.074199][ T5271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.115016][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.123879][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.215231][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.305638][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.386418][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.551308][ T29] audit: type=1804 audit(1719635447.156:29): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 475.686897][ T29] audit: type=1804 audit(1719635447.156:30): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 475.782935][ T29] audit: type=1804 audit(1719635447.156:31): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 475.817251][ T51] bridge_slave_1: left allmulticast mode [ 475.823370][ T51] bridge_slave_1: left promiscuous mode [ 475.847386][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.865636][ T29] audit: type=1804 audit(1719635447.156:32): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 475.892199][ T51] bridge_slave_0: left allmulticast mode [ 475.906723][ T51] bridge_slave_0: left promiscuous mode [ 475.914030][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.944325][ T29] audit: type=1804 audit(1719635447.156:33): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 475.983034][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.994596][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.002828][ T29] audit: type=1804 audit(1719635447.156:34): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 476.003723][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.036178][ T29] audit: type=1804 audit(1719635447.156:35): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 476.063273][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.071246][ T29] audit: type=1804 audit(1719635447.156:36): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 476.108645][ T29] audit: type=1804 audit(1719635447.156:37): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3732" name="/root/syzkaller.HCdXcB/275/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 [ 476.133025][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.141536][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.731687][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.745137][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.760917][ T51] bond0 (unregistering): Released all slaves [ 476.785114][T16808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3738'. [ 476.827459][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3740'. [ 476.910250][T16818] lo speed is unknown, defaulting to 1000 [ 477.013104][T16825] netlink: 'syz.1.3741': attribute type 2 has an invalid length. [ 477.299290][T16806] lo speed is unknown, defaulting to 1000 [ 477.994808][ T51] hsr_slave_0: left promiscuous mode [ 478.016119][ T51] hsr_slave_1: left promiscuous mode [ 478.028853][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.045341][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.053669][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.061652][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.089439][ T51] veth1_macvtap: left promiscuous mode [ 478.095128][ T51] veth0_macvtap: left promiscuous mode [ 478.100981][ T51] veth1_vlan: left promiscuous mode [ 478.106391][ T51] veth0_vlan: left promiscuous mode [ 478.217283][ T53] Bluetooth: hci2: command tx timeout [ 478.712974][ T51] team0 (unregistering): Port device team_slave_1 removed [ 478.770408][ T51] team0 (unregistering): Port device team_slave_0 removed [ 479.326399][T16836] rdma_rxe: rxe_newlink: failed to add lo [ 479.608397][T16839] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 479.817519][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.827541][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.840455][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.856371][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.864548][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.876946][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.962739][T16806] chnl_net:caif_netlink_parms(): no params data found [ 480.075306][T16847] lo speed is unknown, defaulting to 1000 [ 480.298199][ T53] Bluetooth: hci2: command tx timeout [ 480.340391][T16806] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.374565][T16806] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.418314][T16806] bridge_slave_0: entered allmulticast mode [ 480.444977][T16806] bridge_slave_0: entered promiscuous mode [ 480.479862][T16806] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.508261][T16806] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.525916][T16806] bridge_slave_1: entered allmulticast mode [ 480.543175][T16806] bridge_slave_1: entered promiscuous mode [ 480.560293][T16867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3752'. [ 480.628355][T16806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.657133][T16869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3752'. [ 480.674344][T16806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.864523][T16875] rdma_rxe: rxe_newlink: failed to add lo [ 480.904691][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.979574][T16806] team0: Port device team_slave_0 added [ 481.011734][T16875] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 481.118267][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.144537][T16806] team0: Port device team_slave_1 added [ 481.181949][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 481.241119][T16806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.257581][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.290003][T16806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.359482][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.383356][T16893] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3760'. [ 481.434574][T16806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.461066][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.529787][T16806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.576977][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.594056][T16899] netlink: 'syz.2.3761': attribute type 13 has an invalid length. [ 481.604226][T16899] veth0_macvtap: left promiscuous mode [ 481.610384][T16899] macvtap0: entered promiscuous mode [ 481.639156][T16899] macvtap0: refused to change device tx_queue_len [ 481.775182][T16806] hsr_slave_0: entered promiscuous mode [ 481.786178][T16806] hsr_slave_1: entered promiscuous mode [ 481.976977][ T53] Bluetooth: hci3: command tx timeout [ 482.025031][T16906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3764'. [ 482.097488][T16911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3764'. [ 482.131317][ T51] bridge_slave_1: left allmulticast mode [ 482.146804][ T51] bridge_slave_1: left promiscuous mode [ 482.152727][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.174794][ T51] bridge_slave_0: left allmulticast mode [ 482.183176][ T51] bridge_slave_0: left promiscuous mode [ 482.196304][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.231432][T16919] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 482.376858][ T53] Bluetooth: hci2: command tx timeout [ 482.679494][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.692242][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.709285][ T51] bond0 (unregistering): Released all slaves [ 482.769177][T16847] chnl_net:caif_netlink_parms(): no params data found [ 482.839056][T16910] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 483.066734][T16927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.412091][T16950] sctp: [Deprecated]: syz.0.3778 (pid 16950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.412091][T16950] Use struct sctp_sack_info instead [ 483.652355][ T51] hsr_slave_0: left promiscuous mode [ 483.678057][ T51] hsr_slave_1: left promiscuous mode [ 483.697023][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.704529][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.713229][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.726761][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.779567][ T51] veth1_macvtap: left promiscuous mode [ 483.785218][ T51] veth0_macvtap: left promiscuous mode [ 483.793611][ T51] veth1_vlan: left promiscuous mode [ 483.799177][ T51] veth0_vlan: left promiscuous mode [ 484.056859][ T53] Bluetooth: hci3: command tx timeout [ 484.456771][ T53] Bluetooth: hci2: command tx timeout [ 484.515749][ T51] team0 (unregistering): Port device team_slave_1 removed [ 484.583178][ T51] team0 (unregistering): Port device team_slave_0 removed [ 485.127083][T16847] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.134478][T16847] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.154847][T16847] bridge_slave_0: entered allmulticast mode [ 485.170101][T16847] bridge_slave_0: entered promiscuous mode [ 485.243510][T16847] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.263239][T16847] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.283336][T16847] bridge_slave_1: entered allmulticast mode [ 485.291728][T16847] bridge_slave_1: entered promiscuous mode [ 485.415755][T16847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.455496][T16847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.594393][T16847] team0: Port device team_slave_0 added [ 485.616088][T16847] team0: Port device team_slave_1 added [ 485.729998][T16847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.746688][T16847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.786336][T16847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.829018][T16847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.837525][T16847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.863781][T16847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.893584][T16980] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3788'. [ 485.903886][T16806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.948628][T16806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 485.981500][T16806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.001135][T16847] hsr_slave_0: entered promiscuous mode [ 486.011064][T16847] hsr_slave_1: entered promiscuous mode [ 486.032558][T16847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.042159][T16847] Cannot create hsr debugfs directory [ 486.049543][T16806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.118916][T16965] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 486.136732][ T53] Bluetooth: hci3: command tx timeout [ 486.217294][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.229068][T16987] netlink: 1956 bytes leftover after parsing attributes in process `syz.0.3789'. [ 486.371224][T16989] netlink: 'syz.1.3791': attribute type 29 has an invalid length. [ 486.423522][T16989] netlink: 'syz.1.3791': attribute type 29 has an invalid length. [ 486.475738][T16990] netlink: 'syz.1.3791': attribute type 29 has an invalid length. [ 486.490740][T16992] sctp: [Deprecated]: syz.2.3792 (pid 16992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.490740][T16992] Use struct sctp_sack_info instead [ 486.562178][T16806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.664138][T16806] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.685585][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.692857][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.735455][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.742770][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.050207][T16847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.078673][T16847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.109068][T16847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.145328][T16847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.263544][T16806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.433148][T16806] veth0_vlan: entered promiscuous mode [ 487.467917][T16847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.483719][T16806] veth1_vlan: entered promiscuous mode [ 487.494673][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 487.511495][T17022] vlan4: entered promiscuous mode [ 487.528907][T16847] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.563388][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.570645][T12833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.606146][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.613439][T12833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.682645][T17025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3804'. [ 487.702098][T16806] veth0_macvtap: entered promiscuous mode [ 487.724790][T17025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3804'. [ 487.757661][T16806] veth1_macvtap: entered promiscuous mode [ 487.824601][T16847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.845658][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.856929][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.869474][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.880241][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.890326][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.901139][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.913558][T16806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.952345][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.972076][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.992279][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.005614][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.028653][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.040128][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.050874][T17014] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 488.070820][T16806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.097054][T16806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.116183][T16806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.132983][T16806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.162444][T16806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.174667][T16806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.183898][T16806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.219213][ T53] Bluetooth: hci3: command tx timeout [ 488.383195][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 488.445729][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3809'. [ 488.455558][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3809'. [ 488.549685][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.570011][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.641169][T16847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.659672][ T5276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.676604][ T5276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.696278][T17051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3813'. [ 488.904416][T17059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3815'. [ 488.933984][T17063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3815'. [ 489.079154][T17067] netlink: 'syz.1.3817': attribute type 32 has an invalid length. [ 489.118014][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 489.140858][T17067] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 489.268758][T16847] veth0_vlan: entered promiscuous mode [ 489.309884][T16847] veth1_vlan: entered promiscuous mode [ 489.368622][T16847] veth0_macvtap: entered promiscuous mode [ 489.382103][T16847] veth1_macvtap: entered promiscuous mode [ 489.419313][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.431738][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.442579][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.454134][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.464386][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.483558][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.506891][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.524342][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.539067][T16847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.561034][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.572353][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.584833][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.605113][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.615339][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.626325][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.641552][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.654925][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.673082][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.685311][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.699471][T16847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.725116][T16847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.748986][T16847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.759301][T16847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.768518][T16847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.925451][T17070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 490.028485][ T5271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.066029][ T5271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.153985][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.192155][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.731768][T17111] netlink: 'syz.1.3831': attribute type 32 has an invalid length. [ 490.749224][T17111] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 491.181174][ T1275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.971807][ T1275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.069656][ T1275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.169454][ T1275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.389510][ T1275] bridge_slave_1: left allmulticast mode [ 492.395445][ T1275] bridge_slave_1: left promiscuous mode [ 492.401704][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.412130][ T1275] bridge_slave_0: left allmulticast mode [ 492.418569][ T1275] bridge_slave_0: left promiscuous mode [ 492.424455][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.613043][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.631124][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.640940][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.656851][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.681838][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 492.691588][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.971262][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.986863][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.002518][ T1275] bond0 (unregistering): Released all slaves [ 493.042440][T17126] lo speed is unknown, defaulting to 1000 [ 493.050411][T17123] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 493.068158][T17122] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 493.618102][ T1275] hsr_slave_0: left promiscuous mode [ 493.624168][ T1275] hsr_slave_1: left promiscuous mode [ 493.630654][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.641251][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.649750][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.658871][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.685104][ T1275] veth1_macvtap: left promiscuous mode [ 493.690749][ T1275] veth0_macvtap: left promiscuous mode [ 493.698042][ T1275] veth1_vlan: left promiscuous mode [ 493.703364][ T1275] veth0_vlan: left promiscuous mode [ 494.213300][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.222978][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.242012][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.261677][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.271505][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 494.284046][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.577974][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 494.642681][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 494.779325][ T53] Bluetooth: hci2: command tx timeout [ 495.189266][T17126] chnl_net:caif_netlink_parms(): no params data found [ 495.332328][T17140] lo speed is unknown, defaulting to 1000 [ 495.518066][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.540256][T17150] __nla_validate_parse: 3 callbacks suppressed [ 495.540279][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'. [ 495.566033][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.597551][T17126] bridge_slave_0: entered allmulticast mode [ 495.622131][T17126] bridge_slave_0: entered promiscuous mode [ 495.635559][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.644503][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.652234][T17126] bridge_slave_1: entered allmulticast mode [ 495.671848][T17126] bridge_slave_1: entered promiscuous mode [ 495.774957][T17157] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 495.799550][T17156] IPVS: stopping backup sync thread 17157 ... [ 495.807957][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.841042][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.022416][T17126] team0: Port device team_slave_0 added [ 496.035669][T17164] netlink: 'syz.2.3845': attribute type 32 has an invalid length. [ 496.047170][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 496.059056][T17164] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 496.093537][T17126] team0: Port device team_slave_1 added [ 496.328651][ T1275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.378322][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.379528][ T53] Bluetooth: hci3: command tx timeout [ 496.385299][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.385332][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.463819][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.476987][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.505392][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.626266][ T1275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.669150][T17126] hsr_slave_0: entered promiscuous mode [ 496.679213][T17126] hsr_slave_1: entered promiscuous mode [ 496.730652][ T1275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.823084][T17163] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 496.865720][ T53] Bluetooth: hci2: command tx timeout [ 496.889632][ T1275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.156970][T17179] sctp: [Deprecated]: syz.1.3851 (pid 17179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.156970][T17179] Use struct sctp_sack_info instead [ 497.195216][T17140] chnl_net:caif_netlink_parms(): no params data found [ 497.238261][ T1275] bridge_slave_1: left allmulticast mode [ 497.243977][ T1275] bridge_slave_1: left promiscuous mode [ 497.258953][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.281571][ T1275] bridge_slave_0: left allmulticast mode [ 497.288809][ T1275] bridge_slave_0: left promiscuous mode [ 497.294649][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.413664][T17171] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 497.798209][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.810657][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.822896][ T1275] bond0 (unregistering): Released all slaves [ 498.351466][T17195] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3856'. [ 498.436156][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.453723][T17140] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.466703][ T53] Bluetooth: hci3: command tx timeout [ 498.467535][T17140] bridge_slave_0: entered allmulticast mode [ 498.480133][T17140] bridge_slave_0: entered promiscuous mode [ 498.524642][T17140] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.545464][T17140] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.556757][T17140] bridge_slave_1: entered allmulticast mode [ 498.564704][T17140] bridge_slave_1: entered promiscuous mode [ 498.697955][T17218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3861'. [ 498.763807][T17140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.791683][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3861'. [ 498.818195][ T1275] hsr_slave_0: left promiscuous mode [ 498.843842][ T1275] hsr_slave_1: left promiscuous mode [ 498.855978][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.864566][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.879730][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.889481][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.915187][ T1275] veth1_macvtap: left promiscuous mode [ 498.930934][ T1275] veth0_macvtap: left promiscuous mode [ 498.936941][ T53] Bluetooth: hci2: command tx timeout [ 498.946036][ T1275] veth1_vlan: left promiscuous mode [ 498.951696][ T1275] veth0_vlan: left promiscuous mode [ 499.151075][T17210] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 499.819842][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 499.880889][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 500.464316][T17140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.537819][ T53] Bluetooth: hci3: command tx timeout [ 500.751627][T17140] team0: Port device team_slave_0 added [ 500.793956][T17140] team0: Port device team_slave_1 added [ 500.953214][T17260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3872'. [ 500.962987][T17126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.981762][T17140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.990272][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.017129][ T53] Bluetooth: hci2: command tx timeout [ 501.037381][T17140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.057960][T17261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3872'. [ 501.068803][T17126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.090501][T17126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.110710][T17140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.125683][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.156653][T17140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.182785][T17126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.263234][T17140] hsr_slave_0: entered promiscuous mode [ 501.275783][T17140] hsr_slave_1: entered promiscuous mode [ 501.282849][T17140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.292025][T17140] Cannot create hsr debugfs directory [ 501.550673][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.611952][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.638600][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.645781][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.693622][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.700974][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.794385][T17126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.819758][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.991041][T17266] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 502.069595][T17140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 502.103245][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3878'. [ 502.147089][T17140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 502.172089][T17140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.210477][T17140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.321425][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.445731][T17285] lo speed is unknown, defaulting to 1000 [ 502.473479][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3881'. [ 502.500824][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 502.623189][ T53] Bluetooth: hci3: command tx timeout [ 502.741386][T17126] veth0_vlan: entered promiscuous mode [ 502.766573][T17303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3884'. [ 502.789020][T17303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3884'. [ 502.840761][T17140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.867931][T17126] veth1_vlan: entered promiscuous mode [ 502.916214][T17140] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.956124][T17304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3883'. [ 503.021136][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.028449][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.094623][T17126] veth0_macvtap: entered promiscuous mode [ 503.147657][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.154842][T12833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.223114][T17126] veth1_macvtap: entered promiscuous mode [ 503.412780][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.433944][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.446255][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.457709][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.467761][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.478435][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.493571][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.557270][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.569716][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.580570][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.591626][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.602772][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.613931][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.624475][T17126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.645124][T17126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.663831][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.799717][T17126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.810105][T17126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.823335][T17126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.836281][T17126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.210642][T17315] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 504.236684][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.255731][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.332539][T17330] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.382370][ T5271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.404684][ T5271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.452868][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.704407][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 504.729392][T17338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3895'. [ 505.197679][T17140] veth0_vlan: entered promiscuous mode [ 505.248767][T17140] veth1_vlan: entered promiscuous mode [ 505.318516][T17140] veth0_macvtap: entered promiscuous mode [ 505.330469][T17140] veth1_macvtap: entered promiscuous mode [ 505.388901][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.405344][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.417941][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.428827][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.439071][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.451566][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.461576][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.473910][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.487211][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.509347][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.520018][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.530949][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.544278][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.565812][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.586400][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.604081][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.614745][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.625082][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.635647][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.647989][T17140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.665365][T17381] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 505.690358][T17140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.699743][T17140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.709741][T17140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.718715][T17140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.841864][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.851832][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.898046][ T5276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.912539][ T5276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.082981][T17389] __nla_validate_parse: 1 callbacks suppressed [ 506.083004][T17389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3908'. [ 506.116848][T17389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3908'. [ 506.127539][T17373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 506.191300][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'. [ 506.295581][T17398] team0: No ports can be present during mode change [ 506.378007][T17400] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 506.385825][T17400] netlink: 112848 bytes leftover after parsing attributes in process `syz.1.3911'. [ 506.405762][T17400] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 506.663074][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.013898][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.113438][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.214667][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.357276][ T51] bridge_slave_1: left allmulticast mode [ 507.363075][ T51] bridge_slave_1: left promiscuous mode [ 507.376025][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.398557][ T51] bridge_slave_0: left allmulticast mode [ 507.404286][ T51] bridge_slave_0: left promiscuous mode [ 507.427196][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.009285][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.033093][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.050726][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.068343][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.076242][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 508.083935][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.212207][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.228110][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.246379][ T51] bond0 (unregistering): Released all slaves [ 508.262681][T17422] netlink: 'syz.0.3915': attribute type 13 has an invalid length. [ 508.319492][T17427] lo speed is unknown, defaulting to 1000 [ 508.789807][ T51] hsr_slave_0: left promiscuous mode [ 508.795956][ T51] hsr_slave_1: left promiscuous mode [ 508.815791][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.823718][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.831858][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.839379][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.866228][ T51] veth1_macvtap: left promiscuous mode [ 508.873849][ T51] veth0_macvtap: left promiscuous mode [ 508.881153][ T51] veth1_vlan: left promiscuous mode [ 508.886833][ T51] veth0_vlan: left promiscuous mode [ 509.386784][T17440] netlink: 'syz.0.3918': attribute type 3 has an invalid length. [ 509.394656][T17440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3918'. [ 509.411263][T17440] netlink: 'syz.0.3918': attribute type 3 has an invalid length. [ 509.419323][T17440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3918'. [ 509.754236][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.769118][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.781045][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.791488][ T51] team0 (unregistering): Port device team_slave_1 removed [ 509.801228][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.809565][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 509.825760][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 509.872891][ T51] team0 (unregistering): Port device team_slave_0 removed [ 510.066060][T17435] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 510.137365][ T53] Bluetooth: hci2: command tx timeout [ 510.673526][T17442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3921'. [ 510.689019][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3922'. [ 510.767700][T17444] lo speed is unknown, defaulting to 1000 [ 510.904295][T17427] chnl_net:caif_netlink_parms(): no params data found [ 511.173535][T17473] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 511.606327][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.632008][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.654104][T17427] bridge_slave_0: entered allmulticast mode [ 511.679196][T17427] bridge_slave_0: entered promiscuous mode [ 511.749270][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.765446][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.784494][T17427] bridge_slave_1: entered allmulticast mode [ 511.800741][T17427] bridge_slave_1: entered promiscuous mode [ 511.897694][ T53] Bluetooth: hci3: command tx timeout [ 511.936043][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.974353][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.189253][T17427] team0: Port device team_slave_0 added [ 512.218982][ T53] Bluetooth: hci2: command tx timeout [ 512.307887][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.417798][T17427] team0: Port device team_slave_1 added [ 512.517423][T17488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 512.572309][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.618055][T17494] netlink: 696 bytes leftover after parsing attributes in process `syz.1.3934'. [ 512.754181][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.762095][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.795657][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.839243][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.870246][T17498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3935'. [ 513.021922][T17502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3935'. [ 513.047910][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.071372][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.109353][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.194363][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.215832][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3937'. [ 513.235478][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'. [ 513.404493][T17427] hsr_slave_0: entered promiscuous mode [ 513.438082][T17427] hsr_slave_1: entered promiscuous mode [ 513.453233][T17444] chnl_net:caif_netlink_parms(): no params data found [ 513.599990][T17529] netlink: 'syz.0.3942': attribute type 10 has an invalid length. [ 513.651842][T17529] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.665210][T17529] bond0: (slave team0): Enslaving as an active interface with an up link [ 513.747399][T17535] netlink: 'syz.2.3945': attribute type 32 has an invalid length. [ 513.755504][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 513.768243][T17535] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 513.853527][T17532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3944'. [ 513.977300][ T53] Bluetooth: hci3: command tx timeout [ 513.984795][ T51] bridge_slave_1: left allmulticast mode [ 513.990873][ T51] bridge_slave_1: left promiscuous mode [ 513.997134][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.014407][ T51] bridge_slave_0: left allmulticast mode [ 514.022148][ T51] bridge_slave_0: left promiscuous mode [ 514.028116][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.298745][ T53] Bluetooth: hci2: command tx timeout [ 514.824832][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.907466][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.970641][ T51] bond0 (unregistering): Released all slaves [ 515.455145][T17551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3949'. [ 515.576718][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 515.623121][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 515.629816][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 515.636525][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 515.643071][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 515.649773][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 515.656326][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 515.768406][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 515.792500][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.803193][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.845350][T17444] bridge_slave_0: entered allmulticast mode [ 515.856433][T17444] bridge_slave_0: entered promiscuous mode [ 515.879077][T17561] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.888768][T17561] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.897691][T17561] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.906587][T17561] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.020567][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.057187][ T53] Bluetooth: hci3: command tx timeout [ 516.066781][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.074285][T17444] bridge_slave_1: entered allmulticast mode [ 516.083439][T17444] bridge_slave_1: entered promiscuous mode [ 516.283041][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.377293][ T53] Bluetooth: hci2: command tx timeout [ 516.430759][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.469096][T17587] netlink: 'syz.2.3960': attribute type 32 has an invalid length. [ 516.510607][T17587] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 516.780954][ T51] hsr_slave_0: left promiscuous mode [ 516.798397][ T51] hsr_slave_1: left promiscuous mode [ 516.814750][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.825103][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.845857][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.874122][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.908920][ T51] veth1_macvtap: left promiscuous mode [ 516.914668][ T51] veth0_macvtap: left promiscuous mode [ 516.920835][ T51] veth1_vlan: left promiscuous mode [ 516.926309][ T51] veth0_vlan: left promiscuous mode [ 517.676373][ T51] team0 (unregistering): Port device team_slave_1 removed [ 517.733811][ T51] team0 (unregistering): Port device team_slave_0 removed [ 518.143086][ T53] Bluetooth: hci3: command tx timeout [ 518.265524][T17599] __nla_validate_parse: 1 callbacks suppressed [ 518.265546][T17599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3963'. [ 518.330755][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3964'. [ 518.364174][T17444] team0: Port device team_slave_0 added [ 518.390458][T17444] team0: Port device team_slave_1 added [ 518.436913][T17619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3968'. [ 518.584499][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.627531][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.722802][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.749846][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.760184][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.798672][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.921707][T17444] hsr_slave_0: entered promiscuous mode [ 518.934520][T17444] hsr_slave_1: entered promiscuous mode [ 518.961742][T17444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.975297][T17444] Cannot create hsr debugfs directory [ 519.226442][T17427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.274946][T17427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.323906][T17427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.365657][T17427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.465294][T17650] netlink: 'syz.2.3975': attribute type 32 has an invalid length. [ 519.482094][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 519.491465][T17650] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 519.642131][T17659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3977'. [ 519.654599][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 519.667583][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3977'. [ 519.919425][T17427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.960475][T17427] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.995295][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.002477][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.014787][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.022018][T12829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.260062][T17444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.297868][T17444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.331614][T17444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.354922][T17444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 520.372486][T17680] openvswitch: netlink: Message has 4 unknown bytes. [ 520.424629][T17427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.594725][T17427] veth0_vlan: entered promiscuous mode [ 520.612891][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.636326][T17427] veth1_vlan: entered promiscuous mode [ 520.674039][T17444] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.691510][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.698822][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.746527][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.753715][T12832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.838161][T17427] veth0_macvtap: entered promiscuous mode [ 520.897629][T17427] veth1_macvtap: entered promiscuous mode [ 520.970442][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.996097][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.016110][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.027655][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.054258][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.078598][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.094686][T17427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.173858][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.227120][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.258094][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.297303][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.326866][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.364325][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.395110][T17427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.416071][T17427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.449459][T17427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.539447][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.568020][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.576487][T17698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3989'. [ 521.586989][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.599743][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.616942][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.624593][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.636329][T17701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3989'. [ 521.680387][T17427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.709529][T17427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.718876][T17427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.736780][T17427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.968582][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 522.008226][T17717] netlink: 'syz.2.3992': attribute type 32 has an invalid length. [ 522.029431][T17717] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 522.081404][T17703] lo speed is unknown, defaulting to 1000 [ 522.114046][T17722] openvswitch: netlink: Message has 4 unknown bytes. [ 522.124278][T17444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.126855][T17717] Bluetooth: MGMT ver 1.22 [ 522.139821][ T5276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.153671][ T5276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.260333][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.276197][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.784700][T17444] veth0_vlan: entered promiscuous mode [ 522.815367][T17734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.826833][T17444] veth1_vlan: entered promiscuous mode [ 522.828480][T17734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.851298][ T5100] IPVS: starting estimator thread 0... [ 522.852025][T17703] chnl_net:caif_netlink_parms(): no params data found [ 522.957425][T17735] IPVS: using max 18 ests per chain, 43200 per kthread [ 523.057935][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.072467][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.080198][T17703] bridge_slave_0: entered allmulticast mode [ 523.089757][T17703] bridge_slave_0: entered promiscuous mode [ 523.127518][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.134772][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.160900][T17703] bridge_slave_1: entered allmulticast mode [ 523.169745][T17703] bridge_slave_1: entered promiscuous mode [ 523.180202][T17444] veth0_macvtap: entered promiscuous mode [ 523.214529][T17444] veth1_macvtap: entered promiscuous mode [ 523.243312][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.265239][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.318532][T17703] team0: Port device team_slave_0 added [ 523.329223][T17703] team0: Port device team_slave_1 added [ 523.370554][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.380689][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.410960][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.428886][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.435924][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.467350][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.533276][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.549776][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.560079][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.572528][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.585371][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.599482][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.610195][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.621002][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.633314][T17444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.660838][T17703] hsr_slave_0: entered promiscuous mode [ 523.667977][T17703] hsr_slave_1: entered promiscuous mode [ 523.674478][T17703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.683030][T17703] Cannot create hsr debugfs directory [ 523.737712][ T5103] Bluetooth: hci0: command tx timeout [ 523.804061][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.815082][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.828457][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.839144][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.849490][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.861213][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.871446][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.882294][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.892414][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.905470][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.927219][T17444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.942283][T17444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.951441][T17444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.961309][T17444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.972570][T17444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.217290][T17758] __nla_validate_parse: 1 callbacks suppressed [ 524.217312][T17758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4001'. [ 524.248374][T17762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4001'. [ 524.347515][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 524.451473][T17703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.490647][T17771] openvswitch: netlink: Message has 4 unknown bytes. [ 524.511733][T17772] netlink: 'syz.2.4003': attribute type 32 has an invalid length. [ 524.529354][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 524.539309][T17772] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 524.605219][T17703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.648255][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.656120][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.703088][T17703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.741281][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.749988][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.810553][T17703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.092756][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.174785][T17703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.214128][T17703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.231387][T17703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.245576][T17703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.401123][T17703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.428059][T17703] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.451183][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.458384][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.478137][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.485283][T12829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.816585][ T5103] Bluetooth: hci0: command tx timeout [ 525.841128][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 525.887879][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.065836][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.123285][T17703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.199173][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.284404][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.300931][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.309402][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.318546][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.329893][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.337667][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.365742][T17703] veth0_vlan: entered promiscuous mode [ 526.425331][ T65] bridge_slave_1: left allmulticast mode [ 526.432032][ T65] bridge_slave_1: left promiscuous mode [ 526.439882][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.450310][ T65] bridge_slave_0: left allmulticast mode [ 526.456089][ T65] bridge_slave_0: left promiscuous mode [ 526.473172][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.926282][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.945441][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.957516][ T65] bond0 (unregistering): Released all slaves [ 526.972334][T17703] veth1_vlan: entered promiscuous mode [ 526.999435][T17787] lo speed is unknown, defaulting to 1000 [ 527.084558][T17703] veth0_macvtap: entered promiscuous mode [ 527.107420][T17703] veth1_macvtap: entered promiscuous mode [ 527.202546][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.213895][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.226104][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.237828][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.247832][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.268655][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.278842][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.291904][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.302175][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.312815][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.325105][T17703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.412976][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.428619][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.439815][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.450329][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.460678][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.471282][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.482432][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.494489][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.504873][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.515391][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.525390][T17703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.540800][T17703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.552778][T17703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.664605][T17703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.695918][T17703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.722060][T17703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.739343][T17703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.906797][ T5103] Bluetooth: hci0: command tx timeout [ 527.995462][ T65] hsr_slave_0: left promiscuous mode [ 528.004721][ T65] hsr_slave_1: left promiscuous mode [ 528.013629][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.021431][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.033582][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.041612][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.083065][ T65] veth1_macvtap: left promiscuous mode [ 528.092104][ T65] veth0_macvtap: left promiscuous mode [ 528.106438][ T65] veth1_vlan: left promiscuous mode [ 528.115674][ T65] veth0_vlan: left promiscuous mode [ 528.174466][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.185035][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.194653][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.207754][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.216133][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 528.226305][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.387350][ T53] Bluetooth: hci2: command tx timeout [ 528.880422][ T65] team0 (unregistering): Port device team_slave_1 removed [ 528.930142][ T65] team0 (unregistering): Port device team_slave_0 removed [ 529.502937][T17798] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 529.514349][T17798] gretap1: entered promiscuous mode [ 529.521492][T17798] gretap1: entered allmulticast mode [ 529.544094][T17800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4010'. [ 529.556733][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 529.565831][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 529.879557][T17812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4012'. [ 529.897871][T17819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4012'. [ 529.925001][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4013'. [ 529.939075][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.949999][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.960957][T17804] lo speed is unknown, defaulting to 1000 [ 529.977223][ T53] Bluetooth: hci0: command tx timeout [ 530.095010][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.126991][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.127960][T17787] chnl_net:caif_netlink_parms(): no params data found [ 530.142699][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 530.297182][ T53] Bluetooth: hci3: command tx timeout [ 530.387670][T17827] netlink: 'syz.2.4015': attribute type 32 has an invalid length. [ 530.395553][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'. [ 530.459141][ T53] Bluetooth: hci2: command tx timeout [ 530.489262][T17827] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 530.578144][T17832] openvswitch: netlink: Message has 4 unknown bytes. [ 530.714429][T17787] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.731652][T17787] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.744020][T17787] bridge_slave_0: entered allmulticast mode [ 530.760670][T17787] bridge_slave_0: entered promiscuous mode [ 530.815157][T17787] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.829102][T17787] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.843825][T17787] bridge_slave_1: entered allmulticast mode [ 530.863389][T17787] bridge_slave_1: entered promiscuous mode [ 531.230956][T17787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.355045][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.450937][T17787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.699447][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.834845][T17854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4024'. [ 531.867733][T17855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4024'. [ 532.037482][T17787] team0: Port device team_slave_0 added [ 532.080797][T17787] team0: Port device team_slave_1 added [ 532.377179][ T53] Bluetooth: hci3: command tx timeout [ 532.537935][ T53] Bluetooth: hci2: command tx timeout [ 533.640467][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.659643][T17787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.674225][T17787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.702303][T17787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.722622][T17874] netlink: 'syz.2.4028': attribute type 32 has an invalid length. [ 533.740804][T17874] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 533.874853][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.915682][T17804] chnl_net:caif_netlink_parms(): no params data found [ 533.942102][T17787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.950027][T17787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.976289][T17787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.214723][T17787] hsr_slave_0: entered promiscuous mode [ 534.225136][T17787] hsr_slave_1: entered promiscuous mode [ 534.310536][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.350814][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.367017][T17804] bridge_slave_0: entered allmulticast mode [ 534.383493][T17905] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 534.392593][T17804] bridge_slave_0: entered promiscuous mode [ 534.460722][ T53] Bluetooth: hci3: command tx timeout [ 534.467445][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.474631][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.482186][T17804] bridge_slave_1: entered allmulticast mode [ 534.491684][T17804] bridge_slave_1: entered promiscuous mode [ 534.614123][T17804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.624503][ T53] Bluetooth: hci2: command tx timeout [ 534.701163][T17804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.819792][T17917] __nla_validate_parse: 6 callbacks suppressed [ 534.819813][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4040'. [ 534.885134][T17804] team0: Port device team_slave_0 added [ 534.907371][ T65] bridge_slave_1: left allmulticast mode [ 534.913092][ T65] bridge_slave_1: left promiscuous mode [ 534.937650][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.957262][ T65] bridge_slave_0: left allmulticast mode [ 534.965476][ T65] bridge_slave_0: left promiscuous mode [ 534.974912][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.472163][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.489037][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.503115][ T65] bond0 (unregistering): Released all slaves [ 535.539380][T17804] team0: Port device team_slave_1 added [ 535.619540][T17927] netlink: 'syz.2.4044': attribute type 32 has an invalid length. [ 535.628283][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 535.637875][T17927] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 535.673747][T17804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.694688][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.738036][T17804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.769349][T17804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.788131][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.815493][T17804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.984087][T17937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4048'. [ 536.208044][T17938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4048'. [ 536.235262][T17804] hsr_slave_0: entered promiscuous mode [ 536.272417][T17804] hsr_slave_1: entered promiscuous mode [ 536.300354][T17804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.326940][T17804] Cannot create hsr debugfs directory [ 536.537179][ T53] Bluetooth: hci3: command tx timeout [ 536.820575][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4054'. [ 536.829969][T17970] netlink: 'syz.0.4058': attribute type 32 has an invalid length. [ 536.838257][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 536.847745][T17970] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 536.884596][ T65] hsr_slave_0: left promiscuous mode [ 536.897216][ T65] hsr_slave_1: left promiscuous mode [ 536.911185][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.925607][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.935325][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.944337][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.982335][ T65] veth1_macvtap: left promiscuous mode [ 536.989855][ T65] veth0_macvtap: left promiscuous mode [ 536.995559][ T65] veth1_vlan: left promiscuous mode [ 537.000979][ T65] veth0_vlan: left promiscuous mode [ 537.743697][ T65] team0 (unregistering): Port device team_slave_1 removed [ 537.808200][ T51] ================================================================== [ 537.816337][ T51] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 537.824410][ T51] Read of size 8 at addr ffff88807aaca8b8 by task kworker/u8:3/51 [ 537.832222][ T51] [ 537.834570][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc5-syzkaller-01097-g748e3bbf4721 #0 [ 537.844651][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 537.854734][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 537.860205][ T51] Call Trace: [ 537.863484][ T51] [ 537.866411][ T51] dump_stack_lvl+0x241/0x360 [ 537.871113][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.876308][ T51] ? __pfx__printk+0x10/0x10 [ 537.880913][ T51] ? _printk+0xd5/0x120 [ 537.885081][ T51] ? __virt_addr_valid+0x183/0x520 [ 537.890264][ T51] ? __virt_addr_valid+0x183/0x520 [ 537.895380][ T51] print_report+0x169/0x550 [ 537.899888][ T51] ? __virt_addr_valid+0x183/0x520 [ 537.905002][ T51] ? __virt_addr_valid+0x183/0x520 [ 537.910202][ T51] ? __virt_addr_valid+0x44e/0x520 [ 537.915336][ T51] ? __phys_addr+0xba/0x170 [ 537.919857][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 537.925161][ T51] kasan_report+0x143/0x180 [ 537.929672][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 537.935016][ T51] l2tp_tunnel_del_work+0xe5/0x330 [ 537.940164][ T51] ? process_scheduled_works+0x945/0x1830 [ 537.945888][ T51] process_scheduled_works+0xa2c/0x1830 [ 537.951449][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.957433][ T51] ? assign_work+0x364/0x3d0 [ 537.962039][ T51] worker_thread+0x86d/0xd50 [ 537.966662][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 537.972599][ T51] ? __kthread_parkme+0x169/0x1d0 [ 537.977651][ T51] ? __pfx_worker_thread+0x10/0x10 [ 537.982765][ T51] kthread+0x2f0/0x390 [ 537.986837][ T51] ? __pfx_worker_thread+0x10/0x10 [ 537.991950][ T51] ? __pfx_kthread+0x10/0x10 [ 537.996543][ T51] ret_from_fork+0x4b/0x80 [ 538.000963][ T51] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 538.005581][ T51] ret_from_fork_asm