last executing test programs: 1m33.972491148s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 1m32.774955897s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 1m8.952824182s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 1m8.95274214s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 1m8.952717166s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 1m8.952024878s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 52.126198347s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 50.1484281s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 33.280903341s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 30.880250329s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 13.18186529s ago: executing program 1 (id=322): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 9.36328245s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="040018"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b01f0000000c3dea6e6f78aca3c0000000000000000c10c9be9415e387bf6e9f8f66b5a1ea373ca9775a92c0f8ee3cffece620e1033303ecb3d8399062458fced28e2f47cf3dca7747cee8e7a6d2008fe44c3eb248c17e70f3b737f698c74e6234bb5dd8300b73f3f8b1ebb8bf7dba38a519494160d78a1145f5ffc12c5e1d92a64c055372b4cfd2d08825b37c465"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100001000100fedbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990044c600006c00000005008a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0xe9e0dc458c9f2429}, 0x800) 1.731392078s ago: executing program 3 (id=1781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 1.65067702s ago: executing program 0 (id=1782): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001740)={'broute\x00', 0x0, 0x0, 0x0, [0x42, 0x1, 0x7, 0x0, 0x4, 0x6], 0x0, 0x0}, 0x78) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x4e24, @multicast2}], 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="8908007000fc00def9ffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x87, 0x794, 0x44, 0x8100}}, {0x14, 0x1, {0x6, 0x3be, 0x0, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1.463575694s ago: executing program 2 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x6}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40020) (async) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x6}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40020) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700010008000300fe254a3eb21790cebcc297d3be37295c260c7817dbdac4c8e12bab641b149a5a70de68387f58b459944fdcc24c6ff66d688160a06855477c783b9105fc7336010000002d5235a75d3336f51b3caa8352dbf5a288e68585eadd2acf5cf0d7c5580ec338312c94cb1f4bb8b17710b89a01eacd8898b915e4ddbbecbeb79c618e2ef707b263bfb6d23d13c77f66beadb8e02ccb0ddd0efdd7a2e7ba21a9e163a459a0fdff03db669f38f904dce04ee855a17b3ab7f28152a816929fa485b95ffe508e2011635d2226a425b36e8644a939ce971f723b336fecb0783579dd", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001400040074756e6c3000"/32], 0x3c}}, 0x0) 1.46246978s ago: executing program 0 (id=1784): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x2}, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) 1.311848288s ago: executing program 0 (id=1785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = getpid() r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)={0xb0, 0x41, 0x10, 0x70bd25, 0x25dfdbfe, "", [@nested={0xa0, 0x3a, 0x0, 0x1, [@nested={0x4, 0x133}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@empty}, @generic="38de1e9ec3aea723a31b67c8460115903e9c777551c3d4b3946a7c52c3097b1ea6e6e1b0993356272fb2bd383c8a189e890b4f74a509febb88f7861e9bebfa0dc0188296f0b42799193f09cd719466021d2472d997a58f4ed0b3abb6fd39e936804466bb412b35feffa55b63259926681264abee8bbd15f203f5a5357126a3bbc858b9d5c6d1f959"]}]}, 0xb0}, {&(0x7f00000012c0)={0x12e4, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xc, 0x13a, 0x0, 0x0, @u64=0x5}, @generic="da3d8bab7e2e5b3d43ff3f669b82d8096bc7fd7adaa49da83e80e799664de8963b8e7e", @nested={0x57, 0x55, 0x0, 0x1, [@generic="9678f06a118e65985492fae2a60e9ecbd6cd8f010743dec4ea98fa373e76cf74b7cf39028902", @nested={0x4, 0x120}, @generic="57eaa790a116bc6a46326069100ba13e74cd1e1b7f", @typed={0x14, 0x99, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x123e, 0x131, 0x0, 0x1, [@nested={0x11e0, 0x93, 0x0, 0x1, [@generic="5e67aefa14b7b62d08aef1a3eccdec7235e142ff1e4a78b46534477af06d5f8448cfeca70d66d61617dd0349d8f4d06360365c6d21767d01332d2f429cdd7a7a56d83de284765ed5c2dd93f21d1566616e273f1c07e082fe3615dc52d9504803793d1208377c55b58e649a0a2347ec5328c2fbde15440166140e0bc64a4b659edf74d927cb1f0f9dc1ff6ea5c91f1925173a870e0b741a168288d4f816c89407c715", @generic="95daeb30f67ba68dcab841e933ddfc1cc8cab3a656d632aac50e41654294a4a20b4eea388f1b", @nested={0x4, 0x95}, @generic="7b308dd7b0f5ac75078024a116b42a628f3850aabfbec9024e7137437e072f85e4a24d5139fdf5838b2d08124e46fd3d703c61cd5ab336c8e301be1d33d5d3ef8fa13c202313a1e89f7b3ba862163e7083bc20f96c1b0c40560b43f861e4d630609a398c1c6a7d9f4029deb5dd801e579f09d9426dc84a0983f3dfbd5f945606444e34494a64601383a341a107ea119bc1cade97663b066fe3487a5e1f117ee71d6fd0f4414542a37e18f1674080bde1af5c", @typed={0x8, 0x82, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x2}, @generic="25b363d278bb0b84584e17e24cc2ce31c5fb2368e34025616e004bff0eaf5f74e0b5265e7c9762bbcbf92804e4e9827b14f119393e85043e045be9f4466aad1327361fd1371f4901f0aa999c44a9", @generic="bce062cb406ad38a6f77f7914d07bd93cba612d8f383011e19cf29de715a9de232c9b5a55132fad1d19cf25903d9fb75fc1e25403f7ec2414c1c7a609ded8a27e767f7f900bc41377c5dfcdfaee47cfed8dd9fa2ddd48983fe1e2f4a29482cfc5e7b6ee7c8ae1b5d09fe57df69dc2ed619b0ef750eac9449d5b91d2a4b1d1a5e721a81ad701346a9844ccfdb40f2914c928736ecbb5977caaa15d477296fc77b0c8bf211b866d1ef0e3583f80ae3c8fba64a0b0d413fec507934b6b7322f63fc3aa307a5c6b54f8d26c4302f3fb60dce15535767f06ba3e5e8948d430b4a7aa7a8e0f57ae1ea380caafa679ad969300b613f86e119c209e7d68c82113114cb1584b5ed34e72364af0adb451f1786c0798da014c66f5eb6185a93a809894a0977fc44ecf002a2af1a716ef9722487cb16afbf339fc3b1ba03bffd35fa5230b07d265a6da0bd4395f724cbc9ad16d8777af89d9dbe9bad99b6ff7dc4761aa92f3f435c4d451e5b90a72fac8d8da765fe70b754afc4ad45baa6b99c5e74971f49ab9595b8d4ed442407085ea815324e101a368890b0af18ac6fbdd46cae38696bde91ad3ae384068887e6740d2633a3efa455a7071c3b317887448be09daefc07d844b703f4d4e7a6ecc7f503688b4a884aabed2d3650ed343840f83a15ce455f29676ce28a6d964c37ff1bdabb0a680e9948b751d6ee648995991a87d3ec4dec36faabcaaf275530bb6923e919a87f397e78572ea8406b7bb3c6ed2808ee494cbc9cf58355ebd0ccb6645aa15869fd2bbe9d5bc08352be6ea9427652e2f59f9cbc30e8feb9a302b616edb443a0a76658e69df8928ce9be334090c010730a4b2a345a5a69de296e38092ef60e127ed73dfae5553440c9207aaa76588afee8444831396df900f6a8178c43acf6614d939445c9bbd5f853b085712383bf4603bd76f7822d81906df15028ccbab31b92b56744bc315017b70e8a86a516bf366e60a04d20c38ed0cb578f81869c6a4a79ddd22189332d11a069307ba6e51f4f86a6a8fb642d9b9d499696b8850fd47a085f91f1b09d599ee4e560f64dd392042bd1e31b243ac8093dbf5498cb1c1291b6b448928006b80bee13a5a9ef20da1b490c7b732180fcf55d8ff8a277f71c67bffb17620ff45d74c08fb5b44bf19eada2e3a4d49f93d6a26d8bcb19a3aa112c4c25abfdfcb7c9177bace98da270c574b4727cdd9c8a2c79af4d6e3e1bd6e027f9cbc5b8d46f20d83ce087929cd700985c874f393fd24537e3793aec1870cbaf85b45bf7f06d0dbcb2b1acd68978a64992fe11bb9f365b933be9a7a93ced30d51e7b386f951fec1c3e06a74fa59130cec5c1f4aba109776f7348b5b93232a4669c6dd058a1cf873c1686fd481ee4100269c38968b641081a55c57138d94efa529e96c1de83f4dd4bb6f506548df1bd0de4733e239eeb80dda56c6c476a5afac6a81a7638c32c57043bb5479823abb9c18dbe8d8d4983fa8df294006d9ff3886665d25627614eb64ce392c8389bb20debad1e257ecef27eca0a0dc6b4d026ada815b17ded8bf16ac406f72064332b7dfe7a385ca5a9c666f16cab6853b18b896ef4edf0f534cb336de52b01352b44dece71468862ad58c40ca80996ebed3e2f69958746ec95005598f552227d636a52c04f21708bdfef26b0bf68c7998bcd184eafeae4aeb431c344526f29376a4c603b2149af93c9fefe158b7610d546b4a3afa502bcda00d649408fedf22b12bd318cabe49f0ac59bd07ee42d1240f514465e96fd0852238c3a5ccadb3795bc9895fe10158e430c04854a3c071ed20e400d50c24bb8fa55ef0238eb2ff3125d2a916826486896fc51fc225bca36cd348ef5339e60e016c176959af72310a653bf430e0d0ecdbb54fcec00e3794a4d486f2d154a3f0fd61c279163af6b031488632ad87af8cda12854faa8835a8feb8146bc34b2c2cbddab62d25505125557738ba7d37b6f61117630c191fdddce782c48ab9eca89a898560acd859b5ebde1dc8bebd24d3a5be6806ba2c323c06bc62774979fe6fa1f6d43a906a15da8f669095142ccc12cc88139e0ab7292c0ad450d4a745a06e7018402ead73af61209adad464c0037f53cfbad460d2cbac9d90a9bdd6cb74006dc9077d258832f90049bb89b5dd85ca7b8a8897f1f754671857382ec6eb37948842463f821c351e456c4643f0fd211b7f65903cc5e7580a0e9254402912dd6f7a00a66838d12a8591354b245905ef728c99758c991ea60685ce9f54e12e1a5ceed50b03247a2f6e9ced73f067d11898863aec19d0536cf1cb26e6e8229d2f3f03190ce7f59365dcbf2b2973b084af3404f1461a5f0c5ea0680f44bfcf20da5d197c2602c7ca423c516692a393358bcef08768ad5d4d79261138e088a330083ca28e7d7eb30a8ba44259ff1a57211d7429fc834a99b734cc5fca7f593c036bab221fc4d6d4d909e94f5d989ec18e6a08e49aeddc7f680438cfdf6ebdcb0e2887ee1d1fb02de037fdc473c75ee9ebbd8b192bc7f9d8317ecf62a8f69d1ea0dc341556cda4cc471e46fa9efc0e22790fd29dc4e23610eac3962ba9d7808efb5d4ce92f7304c0ded6273ccfbe2768e3c12750166a63702723fba990969f8a3265cff7bec2392265bc697fd18828a4c22f73412f955357d84a914bcdd184c563f5d4282b89dc3d6f166c32e1098ffeb501b5c872de1cba1b501949927408c6ea7abd357118bf640e7e8faacd3b48e0bff1b728cecbf4c2d5f1e6d135fd9574f7e98ccc5249e1b38844295759cf13262aef9506c503cd293b4034930a6e5aed925d4a2204b2b06ffa085a21d70329c663ba61bc3972c0efe4a6d6c0c2222358ae26f4826a0b9aa4c92de016eda81d6aefd1de464623d9dc502c4eaa26eb10c8d84b5f81ed565853ee1c0e26033e0ab9eab3a8bc38f4d85bf573292b5b63a353d2e77feadde39fa9c04be430f67e3c50826aa10c93f3d3e79c7b73c7e67d94f2dcf43ee057839feba3103445652a4c7d1ffcd15a8046c43086ccd4b0b8005f03ec56b7c5875f276f9cf6800d8201d271f68f7549c8685fb3957924fe87312292dc147bc67eeb16fde4a0e14e94b6cd1eb65cf746bb0db1de1a15044e4a221c670b0ce09c33c1e07ef2349ec4553655669d907fb7a86c2a35208a1f503e41e1a05569f2ae13acf9509f07ff6fcc7e1eef8cc6624b781f01bcbeaa60697686c25aa0c0c3dde24c4a9b3211084d5375c568e47d277bfb1758e82dff3f28f7664b5d732c845cc3c4d6d468046e98a9413241e65c655c1527f01f88ba7bd8955c7a1e1585d5b8810fc9b155deb276b3fa2521bddbdc1ad8ba5307adf91bc39fa4394a791a48be2c5421c41f9a4fe79f356770a0681d6ab8416bd16a6272dd3bf248fd495412382825130b4ecdc763bcc622c803bee47ca7bd701233331229d51280cdcf3368a4bccd393e99cca5e4bcbe9a1663f3749230d25b3e21e05a81d524410f848654a618e430178a7384d5d662d6de967e5e00318729c8b993705ca5ea0bb96c61b8ab3174a9894b8cbcf069ce40a6b21b22658c205714a0a84181d3d545095a3a0bd3543773103b4e453d94bf77725c67f99299d70f109d28f24e3af8fabd52613989c5dcdae13c574698e81a9c763d0833496080ee02149ca76906f42ed4af208e7a0ec597fa27e2dc42dbcf22ddc877421f3b51ffae683caf74a8e742d358b26e4616635f2c259e10097bad1f291c47609ee1f63081f05e3476c2a00e3fbc0fe9fab110a549ed6888861b46bc23a0e2104b3d0071087e77e912d7501a05af83a9c2604767306e176418981163133860400c9890a4d5ba0d848c6241a1671a92e3dc25d0bdfe4e5625bfbc2191510c65d0d4ecdd24b6e46f344cd62566c3354e33e55f68f6b6cf4991026e786bf248d1ab810391384f02608b44219c512ccb3dd19140932e3bc591f6d638a0f40b664180b6e106059d253f9c8f6fb126728f3cf42d648a55f1452bed4784805f885dc218d1e5e0120b7b4bb784ead9caf1e02fb646e669d17d1a03fc73e715e3bb9b016c068910825694884c42d9ae19c3ae9c55245b75ed31bf708a02fa6e402740702e695d7f5b8d1b64b7177fc70a9245a0a42453b8caa8865ee6ddb804f1f49c215bff22b1203df469311dd28554c1b986aa914af6b1d6e730fead0d0c81d7d17b9e727cb34f053979eaf3ccd15bec3d812e7c60ba64b46ff9f523c1c9b241cf27fd9c1d81a21860c13351b1f52eeaa51e9df8fa0fe86384abd2f10308fd7a8229baeb92cf7b29e9d1637614ff463b35a176684e4ccfd20ba8553802cbb2b5103fc012639bd1501c1013dc0a79b07881bae799ab111d9010ba1562e2469fbce0dd3d35a48e531f94c58893318049cbea167d5a569f796d88384c11433b707d0d029542774d7e82256b95d0492c2f3df5a6e4b03e0c20bd94d9c5e1024110763b982eef0b6a968a5ab1ceb4fbe51b929879f9f446386087d461fdaf221c4d379a78ea04a541cadf452dc7fdd1e6d9a1152a9b6ac4baab4810d0bc1cdd05532d490ba5d5e34aa52a1396b597845fdfda8a4fc1b4e5dbef74a349836690ebfa78339e101062913c55129470c7d3dff96e51b922bebcc2cb9f80e9474ea86e18dfccc559daf97b1856eb7dceaa511d1e9cfe2bec1b230a0fd9314df9fb9788127eab85be1ef8f31279ef9034b779a422cd58040be5e3219a2fa631cfcffd9bdabcde529fd476cfc801ff44f6fb985909c4fb24b29c9eab45125935c7e70bad8282ad859780eb8ede7bce138c7dbda4583baadea3e5e5958944241c41ce814d27857f766dc5c6439955ed2169359228c3afa32fb58379516beba647f943455b6d7964a15befe45833ebc38be6e878ed0e2d6750cfd06e86ced4e33191bf03b59274a28121147b47014fd06d2385baf6d8f1b99e2ff15bd07c64aa9d99aff5d477205ab8b91f3431590ad95a50f32dab7e4018d7c273d92d49c2b4097228ccc5c4959fadb8457fdcf0cff8c20729c3fd3fd256775694d1bb520f87da1adba6d2f4e0188cae68de720f39532c31b6dce364400fd9f21ed95db77273d4b406712bf5f1e545a029679549faf0e99381c52c768fcb7c5b99e45f334cadd245fa0485c39bfeb600556c09c52ef3bcabecd651d8b83413fdd5cdbb50ea24234b8f396069787b7af11781b6e5a55437e84c4831b5b930670008e6d3d3ba0ff2945b7c31d5b48ce0656a11cc60f0b12edb3ad38f17578fd20bb28f6db5cc140fad3a13f95a0b300c93371ded18e4307911eadb22f3881b97416f20abf4a629a64e25d6db6d0499d88d3b5bf25ac7166952859511671faa54bcff47a4c93d6cd6f9830f7ad318c902dc67b5940c8ee08bf7540fa666e9b02b087d001b2511a0a4dee42f272a78ddfc4d49df76e565963d61af2b86bd8f3fda419444cde6a272e682d292c76b97ee1fea54b015a2ca16e49c97d67a9a47ab18045cfc3324dae438283bffedfc434515475514fcb61eca7c7c97171322b1c7dac1335f6be2f67cedb84364e8d0843de232e6c8d035308a68dab5236c2db17c8750d4491bd69be72407e5d822ee941bd04b86d8aee5d2fef6fe2ca485f6c0d93f7cf40566eeca268915e6e85611c4ed1752f7316dd983df908d5ade6c3504e9e3e278dca7213cf07247932802b862fe796d07a2c9f1e1c782dbe05e9a7b10344f6bf69cb7ddf10f1fbc97e0f28acbb0f64491578b808cc953bf72601d984a6988e34afe7478ffc0823b0b19a21b196ad14f83c41"]}, @nested={0x24, 0x46, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @pid=r7}, @typed={0x15, 0x149, 0x0, 0x0, @binary="7846fa083c381f9d866d3891d696dab002"}]}, @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@empty}, @generic="6fc3df8e5482", @typed={0xc, 0x130, 0x0, 0x0, @u64=0x58d6}, @generic="c448052a9154e6f4be1295e13072cb0c"]}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r7}, @typed={0x4, 0xf1}]}, 0x12e4}], 0x2, 0x0, 0x0, 0x600048d0}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r13) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r14, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4040014) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r4, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 1.304750042s ago: executing program 3 (id=1786): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x5c, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x3c, 0x1a, 0x0, 0x1, @macsec={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0xb}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xb}, @IFLA_MACSEC_ES={0x5, 0xa, 0x2}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x10}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x59}]}}}]}, 0x5c}}, 0x4050) 1.036066331s ago: executing program 2 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) 983.879558ms ago: executing program 3 (id=1788): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x638, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x5c2, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x638}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x95}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 895.109957ms ago: executing program 0 (id=1789): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x36, r6}) 827.185684ms ago: executing program 2 (id=1790): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) r2 = socket(0x23, 0x5, 0x0) setsockopt$llc_int(r2, 0x10c, 0xe, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_getnetconf={0x4c, 0x52, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7b}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6b4e16b4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4ae}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfff}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7ff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 707.984664ms ago: executing program 3 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="381ee887a32100"], 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="bdf0d2f210000100000080008000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010069703665727370616e000000040002800a0001000000000000000000"], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)="711f0b8d0bfa464eb5913da976", 0xd}}, 0x24000840) recvmmsg(r5, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2162, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000340)={r7, 0x9, 0x79, "374a23b477cc38d9efd459e09fe15cf0786ee3666a832a970e005bd82de7f453c52f3e4fbcda8ff188e4c140076b8720998edf17defdb54c13182ce72be91939368713d2269e121cdfa617b68c5ff10d2fad8d17fa70d249b49aba97c746f87e956e6776fbc195d3e93e81acffb656b262f3d337fc6a8fde12"}, 0x81) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r8, 0x3ff}, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="68b4bbd034338416177e1c0000c4c1decbac9e537526fb5194b44416002d00010000000000000000000400"], 0x1c}], 0x1}, 0x0) 552.5426ms ago: executing program 2 (id=1792): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x20}}) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080), 0x4) (async) close(0x3) (async) shutdown(r1, 0x0) (async) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00010000000000050011802f00000000006efbc9000000000000"], 0x1c}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) read$alg(r4, &(0x7f0000000840)=""/155, 0x9b) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1, 0x70bd26}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f00000003c0)=""/21, 0x20}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f00000004c0)=""/8}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000700)=""/200, 0xc8}], 0x1000000000000216, &(0x7f00000005c0)=""/24, 0x18}, 0x11103) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x2a, 0x1000, 0x62}, 0x2c) 480.431612ms ago: executing program 0 (id=1793): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x358, 0x11, 0x148, 0x0, 0x10, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x358, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x4, 0x5, [0x3f, 0x13, 0x8, 0x1c, 0xf, 0x39, 0x2b, 0x6, 0x38, 0xb, 0x17, 0x7, 0x16, 0x31, 0x10, 0x12], 0x1, 0xae3a, 0x8}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x508) 343.77606ms ago: executing program 3 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000cb7e0f5104ed2098912571d7780000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x11}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000800000000095030220f9fa8cd34e"], &(0x7f0000000c40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="70971b398d92e1258402f6198ae37afa8e294e5715056f9c21b64cf97469b49f0639f312d9036b5945fef33f25c1bbfbc910c35d5bd45adfa45ec074d9d22c3a14fbea2aee7bf3d2652a49578893d0f96ddf2c7a4c90f8ea4d5a4aa711", @ANYRES64=0x0], 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ip6tnl0\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '$-)\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004084}, 0x4005) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000dc0)="29151844fccb558dfa85722e5030ec5894620ae990883e5659bf91c6d18ce05e262fd6a588695958ec99c9beb305cf2cd5d517d5fad26c6c4e97e3bff30fae6e67740a3f8a66ea340426084a7bd14ce17cdbe0fddd5012f0ff2d0057bf23fe822ef878864d78469c3e838f1feaedc8dbb67a3f7b93426bce18e59e93eb8562db73080d8bfa51590232723d3aa7098a601205", &(0x7f00000000c0)=@udp=r8, 0x2}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000940)={0x7, 0x1}, 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0xcd, 0x1, 0x8, @local, @private1, 0x7, 0x8, 0x3, 0x3}}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r13 = socket(0x10, 0x80002, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="700000000001010800000000000000000200000808000840000000073c000d80080001000a010100080001007f00ef0108000100ac1414aa080002000000000008000100fc626fbabfeaba76b5053ea049e804ac14142408000100ac1e010108000100ac1414aa08001a400000468306001240000100000800084000000000"], 0x70}, 0x1, 0x0, 0x0, 0xc800}, 0x41) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x28, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x7, 0xe, 0x7, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', r11, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x4, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0x0, 0x6}, {0x3, 0x3, 0x4, 0xc}, {0x3, 0x4, 0xa, 0x9}, {0x3, 0x5, 0xe, 0xb}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x0) 340.688115ms ago: executing program 2 (id=1795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x190, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x8}], 0x0, 0x2}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x2, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x2001}, 0x80, 0x1000, 0x4e29, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0xffffffffffffff6a, 0x3, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 91.463033ms ago: executing program 2 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0018110000000000ff00"/20, @ANYRES32=r3, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a00180000781400"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0018110000000000ff00"/20, @ANYRES32=r3, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a00180000781400"], 0x38}}, 0x0) (async) 77.521228ms ago: executing program 0 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0xe}}, [@TCA_CHAIN={0x20, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fe00ac37fd8cdc5bad89157bd8141500"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 0s ago: executing program 3 (id=1798): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a80), 0x0, 0x4818) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmmsg$sock(r0, &(0x7f0000005a80), 0x0, 0x4818) (async) kernel console output (not intermixed with test programs): devsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.962273][ T3548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.201398][ T3548] bridge_slave_1: left allmulticast mode [ 250.209882][ T3548] bridge_slave_1: left promiscuous mode [ 250.220681][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.233621][ T3548] bridge_slave_0: left allmulticast mode [ 250.243670][ T3548] bridge_slave_0: left promiscuous mode [ 250.251096][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.495228][T11403] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1265'. [ 250.848999][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.870795][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.871480][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.887474][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.898218][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.906959][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.907178][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.938691][ T3548] bond0 (unregistering): Released all slaves [ 250.955040][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 251.269465][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'. [ 251.348732][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 251.387396][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 251.458226][T11426] netlink: 'syz.0.1266': attribute type 13 has an invalid length. [ 251.623612][ T3548] hsr_slave_0: left promiscuous mode [ 251.662678][ T3548] hsr_slave_1: left promiscuous mode [ 251.679769][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.701955][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.728642][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.752493][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.770179][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1270'. [ 251.809190][ T3548] veth1_macvtap: left promiscuous mode [ 251.815271][ T3548] veth0_macvtap: left promiscuous mode [ 251.823390][ T3548] veth1_vlan: left promiscuous mode [ 251.830273][ T3548] veth0_vlan: left promiscuous mode [ 251.957426][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.967814][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.976538][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.985877][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.993967][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.339016][T11451] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1273'. [ 252.356089][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 252.580174][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 252.650035][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 253.007012][ T5835] Bluetooth: hci0: command tx timeout [ 253.273002][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 253.543780][T11409] chnl_net:caif_netlink_parms(): no params data found [ 253.631605][T11483] veth0_vlan: left promiscuous mode [ 253.643339][T11483] vlan0: entered promiscuous mode [ 253.671628][T11483] veth0_vlan: entered promiscuous mode [ 253.818858][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1283'. [ 253.937994][T11492] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1282'. [ 254.051285][ T5835] Bluetooth: hci1: command tx timeout [ 254.164223][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.179960][T11503] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 254.192032][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.208768][T11409] bridge_slave_0: entered allmulticast mode [ 254.217714][T11507] netlink: 'syz.3.1286': attribute type 7 has an invalid length. [ 254.227514][T11409] bridge_slave_0: entered promiscuous mode [ 254.241587][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.248796][T11507] netlink: 'syz.3.1286': attribute type 8 has an invalid length. [ 254.257187][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.272756][T11409] bridge_slave_1: entered allmulticast mode [ 254.296799][T11507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 254.313484][T11409] bridge_slave_1: entered promiscuous mode [ 254.372476][T11503] team0: Cannot enslave team device to itself [ 254.454369][T11445] chnl_net:caif_netlink_parms(): no params data found [ 254.633835][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.681609][T11519] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 254.749770][ T3548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.803559][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.927421][ T3548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.088491][ T56] Bluetooth: hci0: command tx timeout [ 255.293512][ T3548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.327171][T11551] netlink: 'syz.0.1294': attribute type 8 has an invalid length. [ 255.337361][T11409] team0: Port device team_slave_0 added [ 255.355640][T11546] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1293'. [ 255.369268][T11546] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1293'. [ 255.384809][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'. [ 255.470069][ T3548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.534283][T11409] team0: Port device team_slave_1 added [ 255.742866][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.761252][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.837861][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.880261][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.887993][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.922755][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.962109][T11445] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.977771][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.985697][T11445] bridge_slave_0: entered allmulticast mode [ 255.994078][T11445] bridge_slave_0: entered promiscuous mode [ 256.014465][T11568] openvswitch: netlink: EtherType 50a is less than min 600 [ 256.085434][T11445] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.096359][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.112064][T11445] bridge_slave_1: entered allmulticast mode [ 256.127689][T11445] bridge_slave_1: entered promiscuous mode [ 256.130642][ T5835] Bluetooth: hci1: command tx timeout [ 256.262908][T11409] hsr_slave_0: entered promiscuous mode [ 256.273802][T11409] hsr_slave_1: entered promiscuous mode [ 256.384007][T11445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.402316][T11445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.532376][ T3548] bridge_slave_1: left allmulticast mode [ 256.540159][ T3548] bridge_slave_1: left promiscuous mode [ 256.546455][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.559869][ T3548] bridge_slave_0: left allmulticast mode [ 256.566143][ T3548] bridge_slave_0: left promiscuous mode [ 256.572101][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.152889][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.163967][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.165626][ T5835] Bluetooth: hci0: command tx timeout [ 257.185044][ T3548] bond0 (unregistering): Released all slaves [ 257.204817][T11445] team0: Port device team_slave_0 added [ 257.246547][T11445] team0: Port device team_slave_1 added [ 257.416932][T11445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.446508][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.525019][T11445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.655295][T11445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.662760][T11445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.706038][T11445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.126677][T11637] netlink: 'syz.0.1313': attribute type 11 has an invalid length. [ 258.147662][ T3548] hsr_slave_0: left promiscuous mode [ 258.155550][T11637] netlink: 'syz.0.1313': attribute type 11 has an invalid length. [ 258.167955][ T3548] hsr_slave_1: left promiscuous mode [ 258.174718][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1313'. [ 258.186557][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.203056][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.205107][ T5835] Bluetooth: hci1: command tx timeout [ 258.267177][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.275633][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.303784][ T3548] veth1_macvtap: left promiscuous mode [ 258.310894][ T3548] veth0_macvtap: left promiscuous mode [ 258.318440][ T3548] veth1_vlan: left promiscuous mode [ 258.323887][ T3548] veth0_vlan: left promiscuous mode [ 258.333803][T11643] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1315'. [ 258.353950][T11645] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1316'. [ 259.016935][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 259.068581][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 259.246106][ T5835] Bluetooth: hci0: command tx timeout [ 259.502866][T11445] hsr_slave_0: entered promiscuous mode [ 259.509819][T11445] hsr_slave_1: entered promiscuous mode [ 259.517549][T11445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.525830][T11445] Cannot create hsr debugfs directory [ 259.691442][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 259.704716][T11668] xt_hashlimit: overflow, try lower: 4294967295/0 [ 259.910436][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 260.289426][ T5835] Bluetooth: hci1: command tx timeout [ 260.573563][T11691] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1326'. [ 260.922760][T11707] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1330'. [ 260.992024][T11707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 261.232593][T11409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.272694][T11409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.349743][T11409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.371721][T11409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.860431][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.875311][T11445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.898226][T11445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.918193][T11445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.941140][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.951889][T11445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.980604][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.987841][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.013725][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.021000][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.229839][T11445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.270064][T11445] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.307098][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.314355][ T7688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.360909][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.368142][ T7688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.557381][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1339'. [ 262.569693][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 262.585822][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 262.609543][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.776060][T11409] veth0_vlan: entered promiscuous mode [ 262.802378][T11409] veth1_vlan: entered promiscuous mode [ 262.873295][T11409] veth0_macvtap: entered promiscuous mode [ 262.893562][T11409] veth1_macvtap: entered promiscuous mode [ 262.973240][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.990463][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.000893][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.025249][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.038812][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.049736][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.062572][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.102577][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.113419][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.131039][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.141754][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.158735][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.189998][T11409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.200859][T11409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.213239][T11409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.224091][T11409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.252391][T11445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.401096][ T7688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.428307][ T7688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.514023][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.533038][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.834279][T11795] tipc: New replicast peer: 255.255.255.255 [ 263.878432][T11795] tipc: Enabled bearer , priority 10 [ 264.164834][T11445] veth0_vlan: entered promiscuous mode [ 264.195463][T11445] veth1_vlan: entered promiscuous mode [ 264.270927][T11445] veth0_macvtap: entered promiscuous mode [ 264.356824][T11445] veth1_macvtap: entered promiscuous mode [ 264.426965][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.447798][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.474625][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.494898][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.534270][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.564899][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.575835][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.591149][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.603958][T11445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.650333][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.684436][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.701240][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.719642][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.744872][T11445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.759036][T11445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.782237][T11445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.851545][T11445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.871484][T11445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.882041][T11445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.891884][T11445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.058435][ T7688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.297368][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.310509][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.368115][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.413736][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.687980][ T7688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.901434][ T7688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.026800][ T7688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.207995][T11870] netlink: 'syz.0.1351': attribute type 3 has an invalid length. [ 266.224767][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'. [ 266.267791][T11870] netlink: 'syz.0.1351': attribute type 23 has an invalid length. [ 266.418690][ T7688] bridge_slave_1: left allmulticast mode [ 266.424420][ T7688] bridge_slave_1: left promiscuous mode [ 266.439537][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.460163][ T7688] bridge_slave_0: left allmulticast mode [ 266.476212][ T7688] bridge_slave_0: left promiscuous mode [ 266.482036][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.739485][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.751313][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.762188][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.783024][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.794152][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.967758][ T7688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.979884][ T7688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.990381][ T7688] bond0 (unregistering): Released all slaves [ 267.089175][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1353'. [ 267.421812][T11893] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1356'. [ 267.620220][ T7688] hsr_slave_0: left promiscuous mode [ 267.629284][ T7688] hsr_slave_1: left promiscuous mode [ 267.647258][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.654988][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.683327][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.697657][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.706157][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.714988][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.723629][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.739787][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.748878][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.778250][ T7688] veth1_macvtap: left promiscuous mode [ 267.783925][ T7688] veth0_macvtap: left promiscuous mode [ 267.789809][ T7688] veth1_vlan: left promiscuous mode [ 267.796137][ T7688] veth0_vlan: left promiscuous mode [ 268.747891][T11929] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 268.801604][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1363'. [ 268.847601][ T56] Bluetooth: hci0: command tx timeout [ 268.861162][ T7688] team0 (unregistering): Port device team_slave_1 removed [ 268.872620][T11931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.910117][ T7688] team0 (unregistering): Port device team_slave_0 removed [ 269.417816][T11929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.634811][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 269.661739][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 269.694831][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 269.808899][ T56] Bluetooth: hci1: command tx timeout [ 269.848744][T11879] chnl_net:caif_netlink_parms(): no params data found [ 270.035436][T11959] netlink: 'syz.3.1369': attribute type 7 has an invalid length. [ 270.094077][T11959] : entered promiscuous mode [ 270.292773][T11974] xt_TCPMSS: Only works on TCP SYN packets [ 270.369739][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.398583][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.425830][T11879] bridge_slave_0: entered allmulticast mode [ 270.462307][T11879] bridge_slave_0: entered promiscuous mode [ 270.501972][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.510031][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.517673][T11879] bridge_slave_1: entered allmulticast mode [ 270.583027][T11879] bridge_slave_1: entered promiscuous mode [ 270.681046][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1376'. [ 270.803609][T11879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.848245][T11997] pim6reg1: entered promiscuous mode [ 270.865836][T11997] pim6reg1: entered allmulticast mode [ 270.917978][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 270.927066][ T56] Bluetooth: hci0: command tx timeout [ 270.957939][T11879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.222117][T11879] team0: Port device team_slave_0 added [ 271.377799][ T7688] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.429621][T11879] team0: Port device team_slave_1 added [ 271.433925][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 271.567165][T11901] chnl_net:caif_netlink_parms(): no params data found [ 271.594768][T12022] netlink: 'syz.0.1384': attribute type 1 has an invalid length. [ 271.687956][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1386'. [ 271.713083][ T7688] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.762233][T12031] ªªªªªª€,: renamed from vlan0 (while UP) [ 271.779582][T12024] tipc: Enabled bearer , priority 10 [ 271.885397][ T56] Bluetooth: hci1: command tx timeout [ 271.959919][T12030] veth7: entered promiscuous mode [ 272.017639][T11879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.058270][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.143155][T11879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.158761][T11879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.175832][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.237812][T11879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.302106][ T7688] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.497834][ T7688] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.648694][T11879] hsr_slave_0: entered promiscuous mode [ 272.665850][T11879] hsr_slave_1: entered promiscuous mode [ 272.817942][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.825989][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.835310][T11901] bridge_slave_0: entered allmulticast mode [ 272.844383][T11901] bridge_slave_0: entered promiscuous mode [ 272.908552][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.931329][T11901] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.945153][T11901] bridge_slave_1: entered allmulticast mode [ 272.952994][T11901] bridge_slave_1: entered promiscuous mode [ 273.005323][ T56] Bluetooth: hci0: command tx timeout [ 273.211622][T11901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.230189][ T7688] bridge_slave_1: left allmulticast mode [ 273.237748][ T7688] bridge_slave_1: left promiscuous mode [ 273.243604][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.260929][ T7688] bridge_slave_0: left allmulticast mode [ 273.269936][ T7688] bridge_slave_0: left promiscuous mode [ 273.277907][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.769071][ T7688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.780125][ T7688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.790522][ T7688] bond0 (unregistering): Released all slaves [ 273.811901][T11901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.947694][T11901] team0: Port device team_slave_0 added [ 273.962273][T11901] team0: Port device team_slave_1 added [ 273.968007][ T5835] Bluetooth: hci1: command tx timeout [ 274.062940][T11901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.070312][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.096377][T11901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.109298][T11901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.117423][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.149483][T11901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.192722][ T7688] hsr_slave_0: left promiscuous mode [ 274.198781][ T7688] hsr_slave_1: left promiscuous mode [ 274.205278][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.212716][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.222213][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.230635][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.249952][ T7688] veth1_macvtap: left promiscuous mode [ 274.255735][ T7688] veth0_macvtap: left promiscuous mode [ 274.261337][ T7688] veth1_vlan: left promiscuous mode [ 274.266825][ T7688] veth0_vlan: left promiscuous mode [ 274.683008][ T7688] team0 (unregistering): Port device team_slave_1 removed [ 274.723092][ T7688] team0 (unregistering): Port device team_slave_0 removed [ 275.086630][ T5835] Bluetooth: hci0: command tx timeout [ 275.259772][T11901] hsr_slave_0: entered promiscuous mode [ 275.283512][T11901] hsr_slave_1: entered promiscuous mode [ 275.291837][T11901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.303780][T11901] Cannot create hsr debugfs directory [ 276.045168][ T5835] Bluetooth: hci1: command tx timeout [ 276.053304][T11879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.075426][T11879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.086181][T11879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.112925][T11879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.178387][T11901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.194667][T11901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.214273][T11901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.226249][T11901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.332953][T11879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.364193][T11879] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.388895][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.396069][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.420348][T11901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.431481][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.438751][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.478909][T11901] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.538450][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.545691][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.563283][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.570529][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.971646][T11879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.013337][T11901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.073079][T11879] veth0_vlan: entered promiscuous mode [ 277.093104][T11879] veth1_vlan: entered promiscuous mode [ 277.150132][T11879] veth0_macvtap: entered promiscuous mode [ 277.183829][T11879] veth1_macvtap: entered promiscuous mode [ 277.219574][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.241849][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.253980][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.266178][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.295102][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.312105][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.334134][T11879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.371082][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.405393][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.426172][T11879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.438443][T11879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.450451][T11879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.494424][T11879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.504111][T11879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.521056][T11879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.530318][T11879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.658914][T11901] veth0_vlan: entered promiscuous mode [ 277.711064][T11901] veth1_vlan: entered promiscuous mode [ 277.738656][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.762658][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.815595][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.823467][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.847255][T11901] veth0_macvtap: entered promiscuous mode [ 277.868805][T11901] veth1_macvtap: entered promiscuous mode [ 277.912654][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.929636][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.955075][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.968049][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.980224][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.991472][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.001685][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.012928][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.050232][T11901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.092449][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.105837][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.120982][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.132916][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.143616][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.154860][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.173031][T11901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.190117][T11901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.200805][T11901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.210390][T11901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.219464][T11901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.388973][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.411043][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.459842][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.469596][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.008297][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.797969][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.015874][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.046994][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.056731][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.065668][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.074388][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.083260][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.097118][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.307385][ T53] bridge_slave_1: left allmulticast mode [ 280.313167][ T53] bridge_slave_1: left promiscuous mode [ 280.319748][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.330079][ T53] bridge_slave_0: left allmulticast mode [ 280.337243][ T53] bridge_slave_0: left promiscuous mode [ 280.342982][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.692032][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.704506][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.715084][ T53] bond0 (unregistering): Released all slaves [ 280.799331][T12169] chnl_net:caif_netlink_parms(): no params data found [ 280.992745][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.020938][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.029968][T12169] bridge_slave_0: entered allmulticast mode [ 281.044503][T12169] bridge_slave_0: entered promiscuous mode [ 281.126551][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.139876][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.165295][T12169] bridge_slave_1: entered allmulticast mode [ 281.177191][T12169] bridge_slave_1: entered promiscuous mode [ 281.289657][T12169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.322146][ T53] hsr_slave_0: left promiscuous mode [ 281.329568][ T53] hsr_slave_1: left promiscuous mode [ 281.345830][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.353309][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.369359][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.384447][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.389992][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.408267][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.422263][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.431758][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.439756][ T53] veth1_macvtap: left promiscuous mode [ 281.446035][ T53] veth0_macvtap: left promiscuous mode [ 281.447104][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.451767][ T53] veth1_vlan: left promiscuous mode [ 281.464359][ T53] veth0_vlan: left promiscuous mode [ 281.963682][ T53] team0 (unregistering): Port device team_slave_1 removed [ 282.008802][ T53] team0 (unregistering): Port device team_slave_0 removed [ 282.129307][ T5835] Bluetooth: hci0: command tx timeout [ 282.432886][T12169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.548899][T12169] team0: Port device team_slave_0 added [ 282.574224][T12169] team0: Port device team_slave_1 added [ 282.660172][T12169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.685712][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.713657][T12169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.727757][T12169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.735529][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.769981][T12169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.873432][T12169] hsr_slave_0: entered promiscuous mode [ 282.885997][T12169] hsr_slave_1: entered promiscuous mode [ 283.083147][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.234013][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.272569][T12189] chnl_net:caif_netlink_parms(): no params data found [ 283.335675][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.411618][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.547817][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.559035][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.567554][T12189] bridge_slave_0: entered allmulticast mode [ 283.568038][ T5835] Bluetooth: hci1: command tx timeout [ 283.577861][T12189] bridge_slave_0: entered promiscuous mode [ 283.587840][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.596615][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.603851][T12189] bridge_slave_1: entered allmulticast mode [ 283.612839][T12189] bridge_slave_1: entered promiscuous mode [ 283.709992][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.729016][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.915720][T12189] team0: Port device team_slave_0 added [ 283.925252][T12189] team0: Port device team_slave_1 added [ 283.967223][ T53] bridge_slave_1: left allmulticast mode [ 283.976083][ T53] bridge_slave_1: left promiscuous mode [ 283.997554][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.022351][ T53] bridge_slave_0: left allmulticast mode [ 284.035165][ T53] bridge_slave_0: left promiscuous mode [ 284.047190][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.204813][ T5835] Bluetooth: hci0: command tx timeout [ 284.458664][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.469644][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.482271][ T53] bond0 (unregistering): Released all slaves [ 284.497730][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.505645][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.533630][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.608159][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.616079][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.642600][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.776196][T12189] hsr_slave_0: entered promiscuous mode [ 284.782843][T12189] hsr_slave_1: entered promiscuous mode [ 284.790431][T12189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.798960][T12189] Cannot create hsr debugfs directory [ 284.895563][T12169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.933097][T12169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.948149][ T53] hsr_slave_0: left promiscuous mode [ 284.956035][ T53] hsr_slave_1: left promiscuous mode [ 284.961955][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.970369][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.979239][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.987027][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.005177][ T53] veth1_macvtap: left promiscuous mode [ 285.010753][ T53] veth0_macvtap: left promiscuous mode [ 285.016524][ T53] veth1_vlan: left promiscuous mode [ 285.021848][ T53] veth0_vlan: left promiscuous mode [ 285.444932][ T53] team0 (unregistering): Port device team_slave_1 removed [ 285.486024][ T53] team0 (unregistering): Port device team_slave_0 removed [ 285.657021][ T5835] Bluetooth: hci1: command tx timeout [ 285.889200][T12169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.914100][T12169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.289440][ T5835] Bluetooth: hci0: command tx timeout [ 286.331211][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.393801][T12169] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.465155][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.472355][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.520327][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.527578][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.580255][T12189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.600523][T12189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.615621][T12189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.641398][T12189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.817368][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.861032][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.886936][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.894115][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.959482][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.966731][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.021044][T12169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.151348][T12169] veth0_vlan: entered promiscuous mode [ 287.193686][T12169] veth1_vlan: entered promiscuous mode [ 287.240814][T12169] veth0_macvtap: entered promiscuous mode [ 287.259603][T12169] veth1_macvtap: entered promiscuous mode [ 287.308802][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.326995][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.355094][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.366912][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.377247][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.401186][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.414107][T12169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.430287][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.441005][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.458113][T12169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.468828][T12169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.480211][T12169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.508145][T12169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.520634][T12169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.530856][T12169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.544412][T12169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.563969][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.709535][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.724331][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.736730][ T5835] Bluetooth: hci1: command tx timeout [ 287.789402][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.831375][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.103267][T12189] veth0_vlan: entered promiscuous mode [ 288.117131][T12189] veth1_vlan: entered promiscuous mode [ 288.171219][T12189] veth0_macvtap: entered promiscuous mode [ 288.184056][T12189] veth1_macvtap: entered promiscuous mode [ 288.219378][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.233676][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.248654][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.263095][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.278035][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.289995][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.304160][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.316320][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.328589][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.351189][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.373505][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.385794][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.396393][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.406638][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.417557][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.429389][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.444226][T12189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.454089][T12189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.464148][T12189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.473065][T12189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.580188][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.607149][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.655389][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.663279][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.892869][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.428205][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.923337][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.987607][T12331] SET target dimension over the limit! [ 290.069777][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.338089][ T36] bridge_slave_1: left allmulticast mode [ 290.343318][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.344079][ T36] bridge_slave_1: left promiscuous mode [ 290.358295][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.359330][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.374962][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.386687][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.401368][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.428284][ T36] bridge_slave_0: left allmulticast mode [ 290.440401][ T36] bridge_slave_0: left promiscuous mode [ 290.449482][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.826058][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.841102][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.851531][ T36] bond0 (unregistering): Released all slaves [ 291.132203][T12353] bond4: entered promiscuous mode [ 291.137795][T12353] bond4: entered allmulticast mode [ 291.145546][T12353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.172622][T12364] netlink: 'syz.0.1391': attribute type 21 has an invalid length. [ 291.209992][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 291.219525][T12364] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1391'. [ 291.342795][T12364] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1391'. [ 291.373325][T12358] netlink: 724 bytes leftover after parsing attributes in process `syz.0.1391'. [ 291.914853][ T36] hsr_slave_0: left promiscuous mode [ 291.941744][ T36] hsr_slave_1: left promiscuous mode [ 291.972521][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.003122][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.030704][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.045549][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.064731][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.073345][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.077318][T12402] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 292.083494][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.097466][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.107578][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.151012][ T36] veth1_macvtap: left promiscuous mode [ 292.157040][ T36] veth0_macvtap: left promiscuous mode [ 292.164093][ T36] veth1_vlan: left promiscuous mode [ 292.172971][ T36] veth0_vlan: left promiscuous mode [ 292.271299][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1400'. [ 292.450679][ T5835] Bluetooth: hci0: command tx timeout [ 292.568906][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 292.769245][ T36] team0 (unregistering): Port device team_slave_1 removed [ 292.813763][ T36] team0 (unregistering): Port device team_slave_0 removed [ 293.323338][T12407] veth5: entered promiscuous mode [ 293.364054][T12420] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 293.372424][T12417] bond_slave_1: entered promiscuous mode [ 293.380795][T12417] bond_slave_1: left promiscuous mode [ 293.883469][T12440] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 293.981731][T12341] chnl_net:caif_netlink_parms(): no params data found [ 294.211352][ T5835] Bluetooth: hci1: command tx timeout [ 294.257973][T12451] syz_tun: entered promiscuous mode [ 294.266727][T12451] syz_tun: left promiscuous mode [ 294.325299][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 294.529285][ T5835] Bluetooth: hci0: command tx timeout [ 294.744272][T12478] netlink: 'syz.3.1415': attribute type 4 has an invalid length. [ 294.845943][T12341] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.872616][T12341] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.883570][T12341] bridge_slave_0: entered allmulticast mode [ 294.892239][T12341] bridge_slave_0: entered promiscuous mode [ 294.905771][T12341] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.923193][T12341] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.939490][T12341] bridge_slave_1: entered allmulticast mode [ 294.949319][T12341] bridge_slave_1: entered promiscuous mode [ 295.077125][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.149838][T12341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.173272][T12341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.291479][T12504] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:21 [ 295.308814][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.366353][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.413241][T12341] team0: Port device team_slave_0 added [ 295.447282][T12398] chnl_net:caif_netlink_parms(): no params data found [ 295.566080][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.670810][T12341] team0: Port device team_slave_1 added [ 295.714786][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'. [ 296.084033][T12341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.108962][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.140692][T12341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.213275][T12341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.221460][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.255237][T12341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.285744][ T5835] Bluetooth: hci1: command tx timeout [ 296.608296][ T5835] Bluetooth: hci0: command tx timeout [ 296.624280][T12398] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.641442][T12398] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.673246][T12398] bridge_slave_0: entered allmulticast mode [ 296.709319][T12398] bridge_slave_0: entered promiscuous mode [ 296.731732][T12398] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.751827][T12398] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.761019][T12398] bridge_slave_1: entered allmulticast mode [ 296.786772][T12398] bridge_slave_1: entered promiscuous mode [ 296.981192][T12398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.102700][T12398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.124081][T12341] hsr_slave_0: entered promiscuous mode [ 297.135534][T12341] hsr_slave_1: entered promiscuous mode [ 297.144329][ T36] bridge_slave_1: left allmulticast mode [ 297.155027][ T36] bridge_slave_1: left promiscuous mode [ 297.160852][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.250833][ T36] bridge_slave_0: left allmulticast mode [ 297.284717][ T36] bridge_slave_0: left promiscuous mode [ 297.308397][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.984763][T12622] xt_nat: multiple ranges no longer supported [ 298.365674][ T5835] Bluetooth: hci1: command tx timeout [ 298.531090][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.561018][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.585961][ T36] bond0 (unregistering): Released all slaves [ 298.685403][ T5835] Bluetooth: hci0: command tx timeout [ 298.879001][T12655] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 298.987358][T12398] team0: Port device team_slave_0 added [ 299.051643][T12398] team0: Port device team_slave_1 added [ 299.289637][T12675] tipc: Failed to remove unknown binding: 66,3,3/0:2292785095/2292785096 [ 299.328364][T12398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.347170][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.417031][T12398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.522188][T12398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.541571][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.597278][T12398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.620079][T12683] netlink: 'syz.3.1454': attribute type 2 has an invalid length. [ 299.709773][ T36] hsr_slave_0: left promiscuous mode [ 299.721625][ T36] hsr_slave_1: left promiscuous mode [ 299.742381][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.752310][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.773556][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.781870][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.793655][T12693] netlink: 'syz.3.1457': attribute type 15 has an invalid length. [ 299.801994][T12696] sctp: [Deprecated]: syz.0.1458 (pid 12696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.801994][T12696] Use struct sctp_sack_info instead [ 299.819823][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1457'. [ 299.831710][ T36] veth1_macvtap: left promiscuous mode [ 299.840170][ T36] veth0_macvtap: left promiscuous mode [ 299.849423][ T36] veth1_vlan: left promiscuous mode [ 299.849872][T12700] xt_hashlimit: invalid rate [ 299.854851][ T36] veth0_vlan: left promiscuous mode [ 299.998700][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 300.024967][T12704] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 300.035251][T12704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.052462][T12704] netlink: 'syz.3.1457': attribute type 4 has an invalid length. [ 300.353720][ T36] team0 (unregistering): Port device team_slave_1 removed [ 300.398089][ T36] team0 (unregistering): Port device team_slave_0 removed [ 300.454826][ T5835] Bluetooth: hci1: command tx timeout [ 300.862044][T12398] hsr_slave_0: entered promiscuous mode [ 300.869205][T12398] hsr_slave_1: entered promiscuous mode [ 300.877050][T12398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.885378][T12398] Cannot create hsr debugfs directory [ 301.216128][T12714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'. [ 301.380836][T12724] Bluetooth: MGMT ver 1.23 [ 301.708668][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 301.751787][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 301.765917][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 302.360698][T12765] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 302.423749][T12765] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1473'. [ 302.503389][T12341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.539403][T12341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.591749][T12341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.659933][T12782] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 302.679347][T12341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.028814][T12341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.048078][T12795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.088373][T12341] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.136979][T12795] trusted_key: syz.3.1480 sent an empty control message without MSG_MORE. [ 303.187283][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.194461][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.276592][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.283797][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.358969][T12800] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 303.378419][T12804] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1484'. [ 303.384057][T12398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.409612][T12398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.430538][T12800] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 303.470352][T12398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.506413][T12398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.538020][T12800] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 303.562083][T12812] netlink: 'syz.2.1486': attribute type 10 has an invalid length. [ 303.596804][T12812] syz_tun: entered promiscuous mode [ 303.629369][T12812] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 304.004062][T12398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.070356][T12398] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.105123][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.112334][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.170944][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.178191][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.276314][T12341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.476055][T12341] veth0_vlan: entered promiscuous mode [ 304.521794][T12341] veth1_vlan: entered promiscuous mode [ 304.620086][T12341] veth0_macvtap: entered promiscuous mode [ 304.684373][T12341] veth1_macvtap: entered promiscuous mode [ 304.779503][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.824881][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.874786][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.906502][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.934931][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.956452][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.972549][T12341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.064152][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.094922][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.112673][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.152152][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.186295][T12341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.237864][T12341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.250562][T12341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.270298][T12341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.294659][T12341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.338769][T12880] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 305.438672][T12398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.769911][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.796167][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.939969][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.958929][T12913] bridge0: port 3(ipvlan0) entered blocking state [ 305.971893][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.001917][T12913] bridge0: port 3(ipvlan0) entered disabled state [ 306.020172][T12913] ipvlan0: entered allmulticast mode [ 306.055677][T12913] ipvlan0: left allmulticast mode [ 306.432018][T12398] veth0_vlan: entered promiscuous mode [ 306.605350][ T56] Bluetooth: hci1: command 0x0405 tx timeout [ 306.652562][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.676885][T12934] sctp: [Deprecated]: syz.2.1506 (pid 12934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.676885][T12934] Use struct sctp_sack_info instead [ 306.695161][T12938] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1507'. [ 306.710319][T12938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1507'. [ 306.730889][T12398] veth1_vlan: entered promiscuous mode [ 306.885911][ T3548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.085497][T12398] veth0_macvtap: entered promiscuous mode [ 307.179792][ T3548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.223424][T12398] veth1_macvtap: entered promiscuous mode [ 307.366536][ T3548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.409500][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.422335][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.432557][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.443822][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.453840][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.464428][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.474686][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.485955][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.498197][T12398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.510500][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.522472][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.532947][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.543510][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.553664][T12398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.564377][T12398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.576350][T12398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.601914][ T3548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.621111][T12398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.630589][T12398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.639593][T12398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.649497][T12398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.788649][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.797877][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.829592][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.842832][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.857428][ T3548] bridge_slave_1: left allmulticast mode [ 307.863512][ T3548] bridge_slave_1: left promiscuous mode [ 307.870339][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.880626][ T3548] bridge_slave_0: left allmulticast mode [ 307.887182][ T3548] bridge_slave_0: left promiscuous mode [ 307.893028][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.214810][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.227379][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.237576][ T3548] bond0 (unregistering): Released all slaves [ 308.632144][ T3548] hsr_slave_0: left promiscuous mode [ 308.654520][ T3548] hsr_slave_1: left promiscuous mode [ 308.661355][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.686436][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.708035][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.753585][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.817959][T12976] netlink: 'syz.3.1513': attribute type 10 has an invalid length. [ 308.861076][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1513'. [ 308.877202][ T3548] veth1_macvtap: left promiscuous mode [ 308.905030][ T3548] veth0_macvtap: left promiscuous mode [ 308.910745][ T3548] veth1_vlan: left promiscuous mode [ 308.941984][ T3548] veth0_vlan: left promiscuous mode [ 309.038146][T12990] netlink: 'syz.3.1513': attribute type 21 has an invalid length. [ 309.390955][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.400667][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.410407][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.421245][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.430348][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.720676][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 309.763040][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 310.147325][T12976] dummy0: entered promiscuous mode [ 310.153275][T12976] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 310.195818][T12990] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 311.133396][T12993] chnl_net:caif_netlink_parms(): no params data found [ 311.195693][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.205772][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.214062][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.226918][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.242407][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.484893][ T5835] Bluetooth: hci0: command tx timeout [ 311.672099][ T3548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.680712][T13052] x_tables: duplicate underflow at hook 2 [ 311.818808][ T3548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.950165][ T3548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.982402][T13059] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 312.109891][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 312.161103][T13069] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1527'. [ 312.180179][T13069] unsupported nlmsg_type 40 [ 312.182227][ T3548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.220041][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.238874][T12993] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.267434][T12993] bridge_slave_0: entered allmulticast mode [ 312.297417][T12993] bridge_slave_0: entered promiscuous mode [ 312.374202][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.406023][T12993] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.414394][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 312.433598][T12993] bridge_slave_1: entered allmulticast mode [ 312.457738][T12993] bridge_slave_1: entered promiscuous mode [ 312.850952][T12993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.073134][T12993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.094253][ T3548] bridge_slave_1: left allmulticast mode [ 313.100448][ T3548] bridge_slave_1: left promiscuous mode [ 313.119806][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.160452][ T3548] bridge_slave_0: left allmulticast mode [ 313.166581][ T3548] bridge_slave_0: left promiscuous mode [ 313.232593][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.324706][ T5835] Bluetooth: hci1: command tx timeout [ 313.564773][ T5835] Bluetooth: hci0: command tx timeout [ 313.958777][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.975097][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.987248][ T3548] bond0 (unregistering): Released all slaves [ 314.380883][T12993] team0: Port device team_slave_0 added [ 314.483084][T12993] team0: Port device team_slave_1 added [ 314.661952][T13027] chnl_net:caif_netlink_parms(): no params data found [ 314.664895][T13146] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 314.694902][T13146] netlink: 'syz.2.1545': attribute type 3 has an invalid length. [ 314.712998][T13146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1545'. [ 314.735492][T13154] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 314.890803][ T3548] hsr_slave_0: left promiscuous mode [ 314.918800][ T3548] hsr_slave_1: left promiscuous mode [ 314.937200][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.957717][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.981834][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.996658][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.026814][ T3548] veth1_macvtap: left promiscuous mode [ 315.032422][ T3548] veth0_macvtap: left promiscuous mode [ 315.043373][ T3548] veth1_vlan: left promiscuous mode [ 315.054852][ T3548] veth0_vlan: left promiscuous mode [ 315.418962][ T5835] Bluetooth: hci1: command tx timeout [ 315.625227][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 315.644801][ T5835] Bluetooth: hci0: command tx timeout [ 315.679474][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 316.243922][T12993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.264784][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.314465][T12993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.362700][T12993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.374230][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.423361][T12993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.970878][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.981113][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.990437][T13027] bridge_slave_0: entered allmulticast mode [ 317.002170][T13027] bridge_slave_0: entered promiscuous mode [ 317.013901][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.032531][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.049096][T13027] bridge_slave_1: entered allmulticast mode [ 317.078572][T13027] bridge_slave_1: entered promiscuous mode [ 317.126454][T12993] hsr_slave_0: entered promiscuous mode [ 317.139929][T13213] tls_set_device_offload_rx: netdev not found [ 317.149449][T12993] hsr_slave_1: entered promiscuous mode [ 317.281164][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.313087][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.484711][ T56] Bluetooth: hci1: command tx timeout [ 317.497336][T13027] team0: Port device team_slave_0 added [ 317.540454][T13027] team0: Port device team_slave_1 added [ 317.546111][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 317.546135][T13233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1563'. [ 317.678132][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.688064][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.718673][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.729464][ T56] Bluetooth: hci0: command tx timeout [ 317.752213][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.779410][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.829236][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.006438][T13027] hsr_slave_0: entered promiscuous mode [ 318.013189][T13027] hsr_slave_1: entered promiscuous mode [ 318.039064][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.075421][T13027] Cannot create hsr debugfs directory [ 318.305224][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 318.308702][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 318.572657][T13266] netlink: 'syz.3.1569': attribute type 12 has an invalid length. [ 318.581112][T13266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1569'. [ 319.206174][T12993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.357365][T12993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.384458][T13295] netlink: 'syz.3.1578': attribute type 32 has an invalid length. [ 319.394054][T12993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.503583][T12993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.565681][ T56] Bluetooth: hci1: command 0x0419 tx timeout [ 319.573586][T13303] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 319.628537][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 319.658048][T13312] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1580'. [ 319.672216][T13312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1580'. [ 319.842803][T13311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.851062][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1581'. [ 319.871096][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 319.904324][T13319] x_tables: unsorted entry at hook 1 [ 320.102236][T13328] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 320.186965][T12993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.202375][T13328] netlink: get zone limit has 8 unknown bytes [ 320.291626][T12993] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.337610][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.344840][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.369886][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.377157][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.399441][T13027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.451695][T13027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.513998][T13027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.609894][T13027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.852630][T13349] netlink: 'syz.3.1590': attribute type 10 has an invalid length. [ 321.030588][T13351] netlink: 'syz.2.1591': attribute type 64 has an invalid length. [ 321.648113][ T56] Bluetooth: hci1: command 0x0419 tx timeout [ 322.376314][T13349] team0: Device veth1_macvtap failed to register rx_handler [ 322.804268][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.909375][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.926497][T13372] IPVS: Unknown mcast interface: vcan0 [ 322.958460][T12993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.982350][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.989934][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.026303][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.033592][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.043759][T13378] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 323.257227][T13377] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 323.467563][T12993] veth0_vlan: entered promiscuous mode [ 323.531190][T12993] veth1_vlan: entered promiscuous mode [ 323.670865][T12993] veth0_macvtap: entered promiscuous mode [ 323.723497][T13407] xt_bpf: check failed: parse error [ 323.734296][T12993] veth1_macvtap: entered promiscuous mode [ 323.788685][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.815589][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.855822][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.898886][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.928246][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.953732][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.972232][T12993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.018190][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.033685][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.044027][T12993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.061544][T12993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.073478][T12993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.141041][T12993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.176938][T13428] __nla_validate_parse: 2 callbacks suppressed [ 324.176960][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 324.190058][T12993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.203537][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1607'. [ 324.214006][T12993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.223687][T12993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.264092][T13428] netlink: 'syz.3.1607': attribute type 11 has an invalid length. [ 324.388482][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.591213][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.628440][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.664136][T13454] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1611'. [ 324.841610][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.879578][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.193655][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 325.498042][T13487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1618'. [ 325.807019][ T3458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.843123][T13027] veth0_vlan: entered promiscuous mode [ 325.987857][ T3458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.076203][T13027] veth1_vlan: entered promiscuous mode [ 326.133480][T13027] veth0_macvtap: entered promiscuous mode [ 326.170525][T13027] veth1_macvtap: entered promiscuous mode [ 326.220142][ T3458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.259121][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.273667][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.285013][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.296005][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.306282][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.317349][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.332942][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.344065][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.369536][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.391993][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.407585][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.421046][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.436668][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.450928][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.466894][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.481196][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.502873][T13027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.519592][T13027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.531238][T13027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.545467][T13027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.582720][ T3458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.735515][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.743391][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.835748][ T3458] bridge_slave_1: left allmulticast mode [ 326.841457][ T3458] bridge_slave_1: left promiscuous mode [ 326.848686][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.865752][ T3458] bridge_slave_0: left allmulticast mode [ 326.871451][ T3458] bridge_slave_0: left promiscuous mode [ 326.883736][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.360480][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.372326][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.383415][ T3458] bond0 (unregistering): Released all slaves [ 327.401405][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.426109][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.000332][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 328.199098][ T3458] hsr_slave_0: left promiscuous mode [ 328.237488][T13570] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1625'. [ 328.263399][ T3458] hsr_slave_1: left promiscuous mode [ 328.270935][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.287464][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.310393][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.321575][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.330402][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.338943][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.348335][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.357059][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.393763][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.431092][ T3458] veth1_macvtap: left promiscuous mode [ 328.469918][ T3458] veth0_macvtap: left promiscuous mode [ 328.494326][ T3458] veth1_vlan: left promiscuous mode [ 328.502888][ T3458] veth0_vlan: left promiscuous mode [ 329.229980][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 329.299767][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 330.088227][T13619] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 330.138398][T13619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.318342][T13621] syzkaller0: entered promiscuous mode [ 330.324377][T13621] syzkaller0: entered allmulticast mode [ 330.386085][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 330.455567][ T56] Bluetooth: hci0: command tx timeout [ 330.520521][T13634] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 330.603063][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 330.626812][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 330.873610][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.883583][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.892710][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.913178][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.921306][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.528310][ T5835] Bluetooth: hci0: command tx timeout [ 332.943108][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 332.985487][T13678] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 333.004970][ T5835] Bluetooth: hci1: command tx timeout [ 333.241688][ T3458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.333455][T13692] bridge8: entered promiscuous mode [ 333.345248][T13692] bridge8: entered allmulticast mode [ 333.541022][ T3458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.556367][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 333.583275][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 333.611204][T13712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1638'. [ 333.637804][T13712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1638'. [ 333.661129][T13571] chnl_net:caif_netlink_parms(): no params data found [ 333.679707][T13712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1638'. [ 333.782005][T13718] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 333.813810][ T3458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.824943][T13718] netlink: 'syz.3.1638': attribute type 2 has an invalid length. [ 334.059443][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 334.091878][ T3458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.163026][T13733] team0 (unregistering): Port device team_slave_0 removed [ 334.175680][T13733] team0 (unregistering): Port device team_slave_1 removed [ 334.326974][T13571] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.341568][T13571] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.356192][T13571] bridge_slave_0: entered allmulticast mode [ 334.369868][T13571] bridge_slave_0: entered promiscuous mode [ 334.494294][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.516574][T13571] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.572113][T13571] bridge_slave_1: entered allmulticast mode [ 334.589164][T13571] bridge_slave_1: entered promiscuous mode [ 334.609865][ T5835] Bluetooth: hci0: command tx timeout [ 335.085212][ T5835] Bluetooth: hci1: command tx timeout [ 335.243335][T13773] xt_CONNSECMARK: invalid mode: 0 [ 335.306384][T13571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.367998][T13571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.447265][T13774] __nla_validate_parse: 2 callbacks suppressed [ 335.447285][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 335.689237][T13571] team0: Port device team_slave_0 added [ 335.703662][T13643] chnl_net:caif_netlink_parms(): no params data found [ 335.769340][T13571] team0: Port device team_slave_1 added [ 335.791640][ T3458] bridge_slave_1: left allmulticast mode [ 335.800823][ T3458] bridge_slave_1: left promiscuous mode [ 335.814338][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.863910][ T3458] bridge_slave_0: left allmulticast mode [ 335.889616][ T3458] bridge_slave_0: left promiscuous mode [ 335.918118][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.012106][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 336.361382][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.373226][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.383961][ T3458] bond0 (unregistering): Released all slaves [ 336.684715][ T5835] Bluetooth: hci0: command tx timeout [ 336.754050][T13821] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 336.821290][T13571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.836488][T13828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1663'. [ 336.848288][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.875178][T13571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.888497][T13571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.895645][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.929135][T13571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.031473][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1665'. [ 337.104522][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1665'. [ 337.122563][T13837] netlink: 'syz.0.1665': attribute type 7 has an invalid length. [ 337.137419][T13837] netlink: 'syz.0.1665': attribute type 8 has an invalid length. [ 337.150195][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 337.170745][ T5835] Bluetooth: hci1: command tx timeout [ 337.320745][T13837] erspan0: entered promiscuous mode [ 337.336918][T13837] 0ªî{X¹¦: entered promiscuous mode [ 337.346591][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.354051][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.365435][T13643] bridge_slave_0: entered allmulticast mode [ 337.389826][T13643] bridge_slave_0: entered promiscuous mode [ 337.442402][T13571] hsr_slave_0: entered promiscuous mode [ 337.476239][T13571] hsr_slave_1: entered promiscuous mode [ 337.502493][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.518048][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.530645][T13643] bridge_slave_1: entered allmulticast mode [ 337.553362][T13643] bridge_slave_1: entered promiscuous mode [ 337.627207][T13855] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1674'. [ 337.669245][ T3458] hsr_slave_0: left promiscuous mode [ 337.681578][ T3458] hsr_slave_1: left promiscuous mode [ 337.692350][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.694137][T13858] Bluetooth: MGMT ver 1.23 [ 337.700686][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.734496][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.743072][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.789580][T13865] netlink: 'syz.3.1674': attribute type 75 has an invalid length. [ 337.791309][ T3458] veth1_macvtap: left promiscuous mode [ 337.805042][ T3458] veth0_macvtap: left promiscuous mode [ 337.810798][ T3458] veth1_vlan: left promiscuous mode [ 337.820987][ T3458] veth0_vlan: left promiscuous mode [ 337.829267][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 337.841329][T13867] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 337.848871][T13867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.470377][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 338.522314][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 339.003711][T13855] syz_tun: entered promiscuous mode [ 339.012214][T13855] syz_tun: left promiscuous mode [ 339.113684][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.132725][T13879] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 339.173176][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.245107][ T5835] Bluetooth: hci1: command tx timeout [ 339.342737][T13643] team0: Port device team_slave_0 added [ 339.416755][T13643] team0: Port device team_slave_1 added [ 339.451704][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 339.583613][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.593051][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.652470][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.720684][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.738138][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.812876][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.868220][T13898] netlink: 'syz.2.1682': attribute type 21 has an invalid length. [ 339.888644][T13898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1682'. [ 340.318195][T13910] geneve2: entered promiscuous mode [ 340.323459][T13910] geneve2: entered allmulticast mode [ 340.474005][T13643] hsr_slave_0: entered promiscuous mode [ 340.484226][T13643] hsr_slave_1: entered promiscuous mode [ 340.496295][T13643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.504003][T13643] Cannot create hsr debugfs directory [ 340.512712][T13924] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 340.773235][T13571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.811751][T13571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.858596][T13571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.871714][T13571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.301210][T13571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.392619][T13947] nbd: must specify at least one socket [ 341.422803][T13571] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.450324][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.457601][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.520127][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.527477][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.698064][T13962] netlink: 'syz.2.1697': attribute type 1 has an invalid length. [ 341.785290][T13962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.834049][T13968] ip6erspan0: entered promiscuous mode [ 341.862762][T13968] bond4: (slave ip6erspan0): making interface the new active one [ 341.889418][T13968] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 341.983404][T13643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.038879][T13643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.081121][T13643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.151502][T13643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.597629][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.680726][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.716300][T13571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.760813][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.768136][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.777282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.792685][T14007] netlink: 'syz.2.1707': attribute type 7 has an invalid length. [ 342.864214][T14007] : entered promiscuous mode [ 342.911262][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.918556][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.017530][T14017] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1710'. [ 343.096267][T13643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.133320][T13643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.310365][T13571] veth0_vlan: entered promiscuous mode [ 343.377324][T13571] veth1_vlan: entered promiscuous mode [ 343.636398][T13571] veth0_macvtap: entered promiscuous mode [ 343.663388][T14046] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 343.724711][T14046] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1715'. [ 343.734096][T13571] veth1_macvtap: entered promiscuous mode [ 343.783395][T14047] ªªªªªª: renamed from vlan0 (while UP) [ 343.943637][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.983551][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.017895][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.056910][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.082312][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.115338][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.142999][T13571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.164202][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.205307][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.230891][T13571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.274206][T13571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.287109][T13571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.373149][T13571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.406174][T13571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.447524][T13571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.480892][T13571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.560002][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.858915][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.897197][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.992254][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.020949][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.155793][T14108] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 345.163603][T14108] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1724'. [ 345.573494][T13643] veth0_vlan: entered promiscuous mode [ 345.594071][T13643] veth1_vlan: entered promiscuous mode [ 345.797879][T14137] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 345.900983][T14128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1729'. [ 345.942479][ T3548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.002916][T14137] hsr0: entered promiscuous mode [ 346.027014][T14137] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 346.058522][T14137] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 346.077454][T14137] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 346.153408][ T3548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.231399][T13643] veth0_macvtap: entered promiscuous mode [ 346.278958][ T3548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.319651][T13643] veth1_macvtap: entered promiscuous mode [ 346.361519][ T3548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.389010][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.400926][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.420828][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.432179][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.443083][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.459565][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.469618][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.480227][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.516725][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.531359][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.558899][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.568946][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.583744][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.593839][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.612716][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.632765][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.667695][T13643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.680271][T13643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.696612][T13643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.705711][T13643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.876853][ T3548] bridge_slave_1: left allmulticast mode [ 346.894287][ T3548] bridge_slave_1: left promiscuous mode [ 346.915400][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.929493][ T3548] bridge_slave_0: left allmulticast mode [ 346.938570][ T3548] bridge_slave_0: left promiscuous mode [ 346.944414][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.443098][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.454840][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.465837][ T3548] bond0 (unregistering): Released all slaves [ 347.530870][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.554855][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.613641][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.624233][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.814319][ T3548] hsr_slave_0: left promiscuous mode [ 347.881194][ T3548] hsr_slave_1: left promiscuous mode [ 347.919237][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.939808][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.949859][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.961631][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.004422][ T3548] veth1_macvtap: left promiscuous mode [ 348.025772][ T3548] veth0_macvtap: left promiscuous mode [ 348.034418][ T3548] veth1_vlan: left promiscuous mode [ 348.042178][ T3548] veth0_vlan: left promiscuous mode [ 348.421641][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.431255][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.441580][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.451416][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.474474][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.817533][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 348.861028][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 349.321541][T14186] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 349.361451][T14186] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1735'. [ 349.574736][T14204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1736'. [ 349.868202][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1738'. [ 350.119299][ T3548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.170804][T14196] chnl_net:caif_netlink_parms(): no params data found [ 350.222982][ T3548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.338681][ T3548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.428233][ T3548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.460701][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.468075][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.476062][T14196] bridge_slave_0: entered allmulticast mode [ 350.484063][T14196] bridge_slave_0: entered promiscuous mode [ 350.514850][T14196] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.524251][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.533154][ T56] Bluetooth: hci0: command tx timeout [ 350.539971][T14196] bridge_slave_1: entered allmulticast mode [ 350.551608][T14196] bridge_slave_1: entered promiscuous mode [ 350.638534][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.660405][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.753149][T14196] team0: Port device team_slave_0 added [ 350.769637][ T3548] bridge_slave_1: left allmulticast mode [ 350.778098][ T3548] bridge_slave_1: left promiscuous mode [ 350.785268][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.799482][ T3548] bridge_slave_0: left allmulticast mode [ 350.806258][ T3548] bridge_slave_0: left promiscuous mode [ 350.812082][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.270495][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.282241][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.293031][ T3548] bond0 (unregistering): Released all slaves [ 351.310539][T14196] team0: Port device team_slave_1 added [ 351.424359][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.432006][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.458825][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.473942][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.481120][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.508663][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.839678][T14256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1742'. [ 351.853142][T14196] hsr_slave_0: entered promiscuous mode [ 351.870910][T14196] hsr_slave_1: entered promiscuous mode [ 351.890697][ T3548] hsr_slave_0: left promiscuous mode [ 351.897680][ T3548] hsr_slave_1: left promiscuous mode [ 351.903880][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.916231][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.931596][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.940783][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.970770][ T3548] veth1_macvtap: left promiscuous mode [ 351.981525][ T3548] veth0_macvtap: left promiscuous mode [ 351.982878][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 351.987966][ T3548] veth1_vlan: left promiscuous mode [ 352.006202][ T3548] veth0_vlan: left promiscuous mode [ 352.040245][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 352.110886][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.120478][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.130320][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.142077][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.154047][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.546112][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 352.589109][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 352.606189][ T56] Bluetooth: hci0: command tx timeout [ 354.207906][ T56] Bluetooth: hci1: command tx timeout [ 354.324962][T14268] chnl_net:caif_netlink_parms(): no params data found [ 354.684902][ T56] Bluetooth: hci0: command tx timeout [ 354.841119][T14268] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.864844][T14268] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.872113][T14268] bridge_slave_0: entered allmulticast mode [ 354.898873][T14268] bridge_slave_0: entered promiscuous mode [ 354.921072][T14268] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.936558][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.947808][T14268] bridge_slave_1: entered allmulticast mode [ 354.959880][T14268] bridge_slave_1: entered promiscuous mode [ 355.048697][T14268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.061418][T14268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.063738][T14350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.104122][T14350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 355.179788][T14268] team0: Port device team_slave_0 added [ 355.212259][T14268] team0: Port device team_slave_1 added [ 355.303075][T14268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.313931][T14268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.343405][T14268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.511133][T14268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.518360][T14268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.547984][T14268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.663040][T14196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.701731][T14367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1768'. [ 355.780804][T14268] hsr_slave_0: entered promiscuous mode [ 355.806731][T14268] hsr_slave_1: entered promiscuous mode [ 355.813164][T14268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.856133][T14268] Cannot create hsr debugfs directory [ 355.868569][T14196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.911008][T14196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.000146][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 356.010901][T14369] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1769'. [ 356.020356][T14369] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1769'. [ 356.032016][T14196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.287342][ T56] Bluetooth: hci1: command tx timeout [ 356.509214][T14404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1775'. [ 356.575236][T14391] mac80211_hwsim hwsim9 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.765790][ T56] Bluetooth: hci0: command tx timeout [ 356.970114][T14419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 357.092419][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.355146][T14196] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.381042][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.388425][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.526825][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.534037][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.598034][T14439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1783'. [ 357.631388][T14196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.669624][T14196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.022262][T14268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.086670][T14268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.149849][T14268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 358.293699][T14268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 358.365580][ T56] Bluetooth: hci1: command tx timeout [ 358.433303][T14196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.660428][T14488] xt_connbytes: Forcing CT accounting to be enabled [ 358.767640][T14196] veth0_vlan: entered promiscuous mode [ 358.846353][ T1323] wlan0: Trigger new scan to find an IBSS to join [ 358.853842][ T1323] ------------[ cut here ]------------ [ 358.859557][ T1323] WARNING: CPU: 0 PID: 1323 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 358.870189][ T1323] Modules linked in: [ 358.874423][ T1323] CPU: 0 UID: 0 PID: 1323 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 358.887059][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.887712][T14196] veth1_vlan: entered promiscuous mode [ 358.897174][ T1323] Workqueue: events_unbound cfg80211_wiphy_work [ 358.909128][ T1323] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 358.912908][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 358.915786][ T1323] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.915811][ T1323] RSP: 0018:ffffc900046df8a0 EFLAGS: 00010293 [ 358.915833][ T1323] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88802727bc00 [ 358.915849][ T1323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.915861][ T1323] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff920008dbec4 [ 358.915875][ T1323] R10: dffffc0000000000 R11: fffff520008dbec5 R12: ffff8880289e3268 [ 358.985293][ T1323] R13: ffff8880289e0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 358.993398][ T1323] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 359.002462][ T1323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.009437][ T1323] CR2: 00007f8475ee56c0 CR3: 00000000336a4000 CR4: 00000000003526f0 [ 359.018130][ T1323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.026223][ T1323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.035733][ T1323] Call Trace: [ 359.039116][ T1323] [ 359.042093][ T1323] ieee80211_ibss_work+0xde7/0x1060 [ 359.047749][ T1323] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 359.053448][ T1323] ? ieee80211_iface_work+0xf39/0xfe0 [ 359.058947][ T1323] ? rcu_is_watching+0x15/0xb0 [ 359.063767][ T1323] cfg80211_wiphy_work+0x2dc/0x460 [ 359.069105][ T1323] ? process_scheduled_works+0x9ec/0x17a0 [ 359.075379][ T1323] process_scheduled_works+0xadb/0x17a0 [ 359.081292][ T1323] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.088328][ T1323] worker_thread+0x8a0/0xda0 [ 359.093017][ T1323] kthread+0x70e/0x8a0 [ 359.097198][ T1323] ? __pfx_worker_thread+0x10/0x10 [ 359.102345][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.107355][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.112001][ T1323] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.117311][ T1323] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.122562][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.127238][ T1323] ret_from_fork+0x4b/0x80 [ 359.131690][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.136810][ T1323] ret_from_fork_asm+0x1a/0x30 [ 359.141640][ T1323] [ 359.144750][ T1323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 359.152061][ T1323] CPU: 0 UID: 0 PID: 1323 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 359.164242][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 359.174331][ T1323] Workqueue: events_unbound cfg80211_wiphy_work [ 359.180595][ T1323] Call Trace: [ 359.183889][ T1323] [ 359.186825][ T1323] dump_stack_lvl+0x99/0x250 [ 359.191430][ T1323] ? __asan_memcpy+0x40/0x70 [ 359.196041][ T1323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.201256][ T1323] ? __pfx__printk+0x10/0x10 [ 359.205860][ T1323] panic+0x2db/0x790 [ 359.209772][ T1323] ? __pfx_panic+0x10/0x10 [ 359.214214][ T1323] ? show_trace_log_lvl+0x4fb/0x550 [ 359.219447][ T1323] ? ret_from_fork_asm+0x1a/0x30 [ 359.224399][ T1323] __warn+0x31b/0x4b0 [ 359.228400][ T1323] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 359.234411][ T1323] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 359.240529][ T1323] report_bug+0x2be/0x4f0 [ 359.244904][ T1323] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 359.250926][ T1323] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 359.256930][ T1323] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 359.262927][ T1323] handle_bug+0x84/0x160 [ 359.267199][ T1323] exc_invalid_op+0x1a/0x50 [ 359.271731][ T1323] asm_exc_invalid_op+0x1a/0x20 [ 359.276604][ T1323] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 359.283246][ T1323] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 359.302890][ T1323] RSP: 0018:ffffc900046df8a0 EFLAGS: 00010293 [ 359.308976][ T1323] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88802727bc00 [ 359.317489][ T1323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.325485][ T1323] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff920008dbec4 [ 359.333474][ T1323] R10: dffffc0000000000 R11: fffff520008dbec5 R12: ffff8880289e3268 [ 359.341451][ T1323] R13: ffff8880289e0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 359.349439][ T1323] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 359.355455][ T1323] ieee80211_ibss_work+0xde7/0x1060 [ 359.360677][ T1323] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 359.366332][ T1323] ? ieee80211_iface_work+0xf39/0xfe0 [ 359.371705][ T1323] ? rcu_is_watching+0x15/0xb0 [ 359.376484][ T1323] cfg80211_wiphy_work+0x2dc/0x460 [ 359.381603][ T1323] ? process_scheduled_works+0x9ec/0x17a0 [ 359.387336][ T1323] process_scheduled_works+0xadb/0x17a0 [ 359.392923][ T1323] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.398932][ T1323] worker_thread+0x8a0/0xda0 [ 359.403545][ T1323] kthread+0x70e/0x8a0 [ 359.407623][ T1323] ? __pfx_worker_thread+0x10/0x10 [ 359.412737][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.417336][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.421935][ T1323] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.427143][ T1323] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.432380][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.436995][ T1323] ret_from_fork+0x4b/0x80 [ 359.441427][ T1323] ? __pfx_kthread+0x10/0x10 [ 359.446028][ T1323] ret_from_fork_asm+0x1a/0x30 [ 359.450812][ T1323] [ 359.454162][ T1323] Kernel Offset: disabled [ 359.458495][ T1323] Rebooting in 86400 seconds..