last executing test programs: 1m8.806067851s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 1m7.127916281s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 54.591502292s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 54.587744732s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 44.198180782s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 43.417639158s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 32.083865439s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 31.074572413s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 17.926060191s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 17.903605885s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 4.330629606s ago: executing program 1 (id=1063): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000080)=""/147, &(0x7f0000000140)=0x93) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) (async) listen(r2, 0x80) (async) sendto$packet(r0, &(0x7f0000000040)="070800ffffffba000040000086ddf5a01b531078c05ae01a77f2e5e88acd9df77ff77cdf1dfaa711e323677969aa3b9252f809c3d53c", 0x36, 0x0, &(0x7f0000000000)={0x11, 0xf2, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 4.330107765s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa72e}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}}, 0x0) 3.952611244s ago: executing program 1 (id=1064): r0 = socket$packet(0x11, 0x4, 0x300) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x2}}, 0x80, 0x0, 0x60, &(0x7f0000000a80)=[@txtime={{0x0, 0x1, 0x3d, 0x7}}], 0x18}}], 0x400000000000354, 0x0) (async) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x2}}, 0x80, 0x0, 0x60, &(0x7f0000000a80)=[@txtime={{0x0, 0x1, 0x3d, 0x7}}], 0x18}}], 0x400000000000354, 0x0) 3.951506036s ago: executing program 4 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_val={0x18, 0xd, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 3.230953855s ago: executing program 1 (id=1067): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700010000000000000a000000060001002a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0xff, 'ip6gre0\x00', 'pimreg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'ip6erspan0\x00', 'wlan1\x00', {}, {0xff}, 0x16}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1]}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xfb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1a, @local, 0xb}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = socket(0x15, 0x80000, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) 2.336225467s ago: executing program 1 (id=1074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x20, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x4d8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0xfffe, 0xfff6, 0x7, 0x3, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x5, 0x0, 0x99, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x0, 0x5, 0x3, 0x7, 0xba, 0x8c9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x1b, 0x24, 0xb, 0x1, 0x6c, 0x1, 0x24, 0x24, 0x4, 0xc, 0x2, 0xc, 0x24, 0x12, 0x24, 0x30, 0x4, 0x3, 0x6, 0x2, 0x2, 0x18, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6cb, 0x9, 0x0, 0xffff, 0x9, 0x2, 0x8000, 0xc]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x13, 0x3, 0x10, 0x4, 0x4, 0x40, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0x0, 0x7, 0x8, 0x6e0, 0x3, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x7a6, 0x2, 0x0, 0x83d2, 0x99, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x6, 0xd, 0x8, 0x0, 0x1ff, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xa, 0x3ff, 0x6, 0x9, 0x0, 0x8e68]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x400, 0x7, 0x2, 0x2, 0x4, 0x7, 0x1]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x7}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x7, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x1}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x3}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x1}, {0x6, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x5, 0x48, 0x5, 0x1b, 0x6c, 0xb, 0x3, 0x3, 0x0, 0x0, 0x36]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x9, 0x24, 0x3, 0x5, 0x9, 0x12, 0x5, 0x5, 0x6, 0x5, 0x1, 0x3, 0xa4520938882349fa, 0x4, 0x5, 0x12, 0x4, 0x6c, 0x48, 0x6, 0x5, 0x9, 0x30]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x48, 0x12, 0x6, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x9}, {0x7, 0x3}, {0x6}, {0x7, 0x6}, {0x2, 0x2}, {0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x7}, {0x1, 0x5}, {0x3}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x6}, {}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x7}, {0x6, 0x2}, {0x7}, {}, {0x2, 0x2}, {0x5, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x2, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x4}, {0x7, 0x1}, {0x3, 0xa}, {0x2, 0x8}, {0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x4, 0x1}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x3, 0xa}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x1}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x7}, {0x1, 0x2}, {0x2}, {0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x2, 0xa}, {0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x2, 0x5, 0x48, 0x1, 0x18, 0x1, 0x48, 0x36, 0x22, 0x48, 0x5, 0x6c, 0x5, 0xb, 0x0, 0x9, 0x9, 0x4, 0x1]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x18, 0x60, 0xb, 0x1, 0xc, 0x6c, 0x18, 0xc, 0x60, 0x16, 0x60, 0x1, 0x18, 0x18, 0xc, 0xc, 0x3, 0x60, 0x0, 0x5, 0x30, 0xc, 0x1, 0x1, 0x60, 0x5, 0x2f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x5, 0x1, 0x5, 0x1000, 0x6, 0x8, 0xf2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x7fa, 0x2, 0x2, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1ed, 0x3ff, 0x6, 0x800, 0x1ff, 0x101]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x3, 0x8}, {0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x3, 0x5, 0x1, 0x8, 0x81, 0x1, 0x2]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x68b, 0xd3, 0xffff, 0xec6, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x500, 0x1, 0x10, 0x9, 0x4, 0x3, 0x1c00, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x2}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x9}, {0x1}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x7}, {0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0xb}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x10, 0x2, 0x0, 0x5, 0x0, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x95, 0x0, 0x7, 0xe, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x1}, {0x6, 0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x5}, {0x5, 0x4}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x7, 0x4}, {0x1}, {0x2, 0x2}, {0x0, 0x8}, {0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x40, 0xeb, 0x1, 0x9, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x4, 0x0, 0x16, 0x83e7ecd77801b30d, 0x2, 0x1b, 0x2f71562f9c178d51, 0x36, 0x2, 0x16, 0x60, 0x24, 0xb, 0x2, 0xb, 0x12, 0x36, 0xc, 0x16, 0x1b, 0x6c, 0xb, 0x16, 0xb, 0x6, 0x4, 0x1, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x4d8}}, 0x0) close(r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f"], 0x1c}, 0x1, 0x3000000}, 0x0) 2.10858067s ago: executing program 1 (id=1077): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8ec2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400fb000800007fffffffffffffff00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x22, &(0x7f0000000040), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r4, &(0x7f0000000240)="218c0ac7bcce4908d8c52355a17501d907c65ba6cb94269ddb299b79e1fcec0a87ad7afa09fff7fd4762e2254c037e61b2182414a279cced721898af93346a727d7ea08d167f7957b4a8ae968f17b19382d844b5d207747ef851f1a842c851618223395d18770c676a14add3da5e4392f73aee4e3e54738c079f71e858ae5c47ba314013ec", 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 1.471561945s ago: executing program 0 (id=1079): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.450032689s ago: executing program 3 (id=1080): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073112200000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) epoll_create1(0x0) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = accept4$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000180)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x22, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 1.338443869s ago: executing program 0 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.287541276s ago: executing program 3 (id=1082): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x1000000}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) 1.258906552s ago: executing program 0 (id=1083): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvfrom$phonet(r0, &(0x7f0000000040)=""/107, 0x6b, 0x100, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bind$bt_hci(r1, &(0x7f0000001040)={0x1f, 0x8, 0x4}, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffffda) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000001300000005000300000000003a7580440d32af5e7fadc23f0d4a760b1332b79071c0dc52035f0ad65a0c13371a05d12f9e224b162f72f2148dc26f0b2e35cd67fdf5cfa1627dd30bba2fa1feaffca7e08ac80dccffe892efb0c139907300a13dab0d1459303ee37aa1f77b87cc009d8566f074f23a6ea1ef35d86e674f1405f055d2ecec81fa"], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.145221022s ago: executing program 3 (id=1084): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) close(r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1c}}, 0x0) 1.091385514s ago: executing program 1 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20048001) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0\x00', 0x400}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r3 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_netfilter(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1ec, 0x6, 0x1, 0x101, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x8}, [@generic="5b98f88b43e46b26d1c81622552e1142d2dd3b402359928614efa32bc823977a8ef0d99c0f4244b4e450508651451134fb7dc07d68b78d9c40ca097232e28f64f5ea3e9118d4a63adecb19b45c62b503be8e4315ae5052d90d9e07a30c6f851f004c57b389a9051e8e33edf3e11a4ec8dce9c41219e1e794c7ec17f10b6dfc7441d20a189509e8ac1f09fc2658e0ee717e9edb71dd0026f181851baf7b201d7e0e02a2fff68c16062770c982", @typed={0x8, 0x68, 0x0, 0x0, @fd=r1}, @generic="e35d47bd880e96826bf0654b517ee7ddd54c3e4d11b090561d2841271c3fc40879d61ad8c6ae494c649a728d35e854e6ba0037f0c617933952204dc4e76fa320377c65a518dc5b019e73286ae09ed909cd9a753df8b72ff420ed1184d678155cc50909f8fa2f9a3f8fa90426cfeee0a1fee4f337594337c20950dfd8afb601231fd8b2b31a919247dce1a3e0ad12e5d4b6615460d502697f4bb3a30d2e79519c900a23a6a5e16a6a923fc862ca26972a5c909cc0a624380c74593f61d12bc677cc0d9370a0f9ea3b742ba4cfc6776a888cada93c0f10ee04f65384fa3bff", @generic="5f5ee4d84f339928b5d66c0d32e6a894a483e1afe2f3f1298dc564b1ea731bcbc4ca8e551bede3bba141d219fc1f92db63dcbb75b5d3541affc7ce614bd2373d9cc3fd2e1a"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0xd, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r4 = socket(0x1d, 0x6, 0x9) setsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000640)="aa8fe72270d8acc88b54ed09b177d7b5f6ae42f859f9ec8198e8ce27e4943ed51f9eae9762285403eda1f9879f85723653de0f1aa16bc894f0db95388cf810b7c1b2579305c1e4a7ae8fa16ffdd578838d59c324691b061c36", 0x59) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000700)={0x0, 0xffff, 0x1, 0x9, 0xb, 0x2, 0xa1, 0xfffffffa, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x46, 0x4, 0x6, 0xffff0000}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000800)={r5, 0x7, 0x20}, 0xc) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x59}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x17}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="cf77184f898b"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x9, 0x6, 0x16c0, 0x6}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x10000, 0x0) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f00000009c0)) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x80000) r8 = socket$inet_dccp(0x2, 0x6, 0x0) vmsplice(r8, &(0x7f0000000c80)=[{&(0x7f0000000b00)="4531e24e21538ece85d20d4e4ec29b12d1bf6212551bd7915cbe61e1d8f3a727b04fd6e9e97cdab14d664b065afcdeffb44ef6b69a5acc06583a038127f7cb944c2a2699776199276edc564d8a2f24e2db268f5f740fa89b9b8d28177ad36cc53a106d1205d64bce2576f9c77c1ec3458e32fafa8b0ee1bd173ac548de28a16a4387c1f8d2a7a2b49ab7", 0x8a}, {&(0x7f0000000bc0)="bbabb2c57f523c4bdcc5e89320597799736226a90e1c304abe916ef10e92c120f57fda03906bdfb7258f4387a95acf9ac3b4151ff395a77030e70f5ec921a95d3bbe9bdddab44c63a21b1cb4aa91fa06a18ee5899e43b96b4d684a7301cd6f3bc3f9704d1672f8f3b09d885a0081374cb71dee1c1b803f214474cfd269aa09663da7", 0x82}], 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000cc0)) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r9, &(0x7f0000001100)={&(0x7f0000000d00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/241, 0xf1}, {&(0x7f0000000e80)=""/228, 0xe4}, {&(0x7f0000000f80)=""/129, 0x81}], 0x3, &(0x7f0000001080)=""/69, 0x45}, 0x40012040) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001140)={r6, 0x1}, &(0x7f0000001180)=0x8) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001200), r0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) 1.035207408s ago: executing program 0 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x850) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000500)=0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10001}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0xfffffe6e}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r11}]}, 0x54}}, 0x0) 1.034738605s ago: executing program 3 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(cbc(aes-aesni),tea-generic,poly1305-simd)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, 0x0, 0x4000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/205, 0xcd}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000c00)=""/231, 0xe7}, {&(0x7f0000000d00)=""/196, 0xc4}, {&(0x7f0000000e00)=""/241, 0xf1}, {&(0x7f0000000f00)=""/126, 0x7e}], 0x7}, 0x5}], 0x1, 0x40010000, &(0x7f00000004c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x1, @empty, 0x7}]}, &(0x7f0000000080)=0x10) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000fa4c0000840000e20200000006005e0b0400080000000b000002", @ANYRESOCT=r0], 0x20}, 0x409cee095bdcdc6b) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e23, 0x7, @private1, 0x4}], 0x3c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1f4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 828.216561ms ago: executing program 0 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) 587.458573ms ago: executing program 0 (id=1089): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0x7}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0xde}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x44005) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 131.046237ms ago: executing program 3 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x800}}}}}}}, 0x0) 0s ago: executing program 3 (id=1091): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="c636709de388", 'wlan1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0010990400000004000500fe808178a8001500030001400200000901ac040098027f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) close(r0) kernel console output (not intermixed with test programs): ing backup interface [ 114.356418][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.368353][ T11] bond0 (unregistering): Released all slaves [ 114.381078][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.388622][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.415059][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.452699][ T7744] dummy0: entered promiscuous mode [ 114.466644][ T7744] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 114.558516][ T7760] netlink: 'syz.1.507': attribute type 39 has an invalid length. [ 114.579190][ T7762] dccp_invalid_packet: P.Data Offset(100) too large [ 114.602501][ T5835] : (slave syz_tun): Releasing backup interface [ 114.615073][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.624338][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.658764][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.998975][ T5836] Bluetooth: hci1: command tx timeout [ 115.033650][ T7699] hsr_slave_0: entered promiscuous mode [ 115.072518][ T7699] hsr_slave_1: entered promiscuous mode [ 115.094380][ T7699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.112552][ T7699] Cannot create hsr debugfs directory [ 115.227951][ T11] hsr_slave_0: left promiscuous mode [ 115.238090][ T11] hsr_slave_1: left promiscuous mode [ 115.247977][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.258117][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.276804][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.296474][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.332283][ T7801] __nla_validate_parse: 14 callbacks suppressed [ 115.332304][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 115.340117][ T11] veth1_macvtap: left promiscuous mode [ 115.379145][ T11] veth0_macvtap: left promiscuous mode [ 115.384798][ T11] veth1_vlan: left promiscuous mode [ 115.396538][ T11] veth0_vlan: left promiscuous mode [ 115.406237][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.419093][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.428047][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.439593][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.448573][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.456237][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.837974][ T11] team0 (unregistering): Port device team_slave_1 removed [ 115.878427][ T11] team0 (unregistering): Port device team_slave_0 removed [ 116.275558][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.282805][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.487181][ T7813] netlink: 'syz.1.520': attribute type 4 has an invalid length. [ 116.783702][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 116.923523][ T7835] bond0: option updelay: invalid value (18446744073709551615) [ 116.938140][ T7835] bond0: option updelay: allowed values 0 - 2147483647 [ 116.953821][ T7803] chnl_net:caif_netlink_parms(): no params data found [ 117.078955][ T5836] Bluetooth: hci1: command tx timeout [ 117.087821][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.095705][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.105693][ T7803] bridge_slave_0: entered allmulticast mode [ 117.109581][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 117.116275][ T7803] bridge_slave_0: entered promiscuous mode [ 117.128518][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.136092][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.143435][ T7803] bridge_slave_1: entered allmulticast mode [ 117.150613][ T7803] bridge_slave_1: entered promiscuous mode [ 117.166357][ T52] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 117.179562][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 117.224511][ T7803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.236617][ T7803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.305958][ T7803] team0: Port device team_slave_0 added [ 117.328779][ T7803] team0: Port device team_slave_1 added [ 117.339187][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 117.408662][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.437024][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.471855][ T7803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.483267][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 117.488519][ T5836] Bluetooth: hci3: command tx timeout [ 117.506895][ T7699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.525173][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.532834][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.560264][ T7803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.571931][ T7699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.581781][ T7699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.597430][ T7699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.709586][ T7803] hsr_slave_0: entered promiscuous mode [ 117.720158][ T7803] hsr_slave_1: entered promiscuous mode [ 117.727082][ T7803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.735364][ T7803] Cannot create hsr debugfs directory [ 117.756379][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 117.872985][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 118.038096][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.063319][ T7872] pim6reg527: entered allmulticast mode [ 118.073640][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 118.080732][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 118.156993][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.208200][ T7883] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 118.250125][ T7885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.275995][ T7887] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 118.295009][ T7885] netlink: 'syz.3.541': attribute type 21 has an invalid length. [ 118.314050][ T7885] netlink: 'syz.3.541': attribute type 6 has an invalid length. [ 118.347809][ T7889] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.370592][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.377800][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.395058][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.402267][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.543420][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.671667][ T7803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.720745][ T7803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.761784][ T7803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.791484][ T7803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.974045][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.016019][ T7915] x_tables: duplicate underflow at hook 1 [ 119.121801][ T7803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.145249][ T7699] veth0_vlan: entered promiscuous mode [ 119.159113][ T5836] Bluetooth: hci1: command tx timeout [ 119.183824][ T7699] veth1_vlan: entered promiscuous mode [ 119.255539][ T7803] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.292168][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.299446][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.355304][ T7699] veth0_macvtap: entered promiscuous mode [ 119.382954][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.390196][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.425083][ T7699] veth1_macvtap: entered promiscuous mode [ 119.456649][ T7934] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 119.501950][ T7942] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 119.554838][ T7942] team0: Device veth0_macvtap failed to register rx_handler [ 119.563116][ T5836] Bluetooth: hci3: command tx timeout [ 119.644837][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.678458][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.695169][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.705886][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.716429][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.728076][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.740916][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.764697][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.785541][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.816987][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.828112][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.841041][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.857917][ T7957] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 119.876212][ T7699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.894852][ T7699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.905412][ T7699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.919629][ T7699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.956487][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.980312][ T7959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.987376][ T7959] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 120.001662][ T7959] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 120.075908][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.096470][ T7952] bond1: (slave batadv1): making interface the new active one [ 120.105203][ T7952] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 120.226045][ T7803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.315480][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.339602][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.405114][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.429006][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.660604][ T7983] __nla_validate_parse: 8 callbacks suppressed [ 120.660622][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 120.674644][ T7803] veth0_vlan: entered promiscuous mode [ 120.734328][ T7803] veth1_vlan: entered promiscuous mode [ 120.819944][ T7803] veth0_macvtap: entered promiscuous mode [ 120.830640][ T7803] veth1_macvtap: entered promiscuous mode [ 120.856416][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.868275][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.881983][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.893186][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.903906][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.916819][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.934602][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.948045][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.960603][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.972777][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.013048][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.027495][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.041561][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.053773][ T7803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.064889][ T7803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.076423][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.152861][ T1081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.238030][ T7803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.254555][ T7803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.263457][ T7803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.272225][ T7803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.303435][ T1081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.373038][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.384072][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.409770][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.424882][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.714829][ T1081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.745321][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.745321][ T8000] Use struct sctp_assoc_value instead [ 121.810207][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.810207][ T8000] Use struct sctp_assoc_value instead [ 121.842399][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.842399][ T8000] Use struct sctp_assoc_value instead [ 121.874486][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.874486][ T8000] Use struct sctp_assoc_value instead [ 121.907709][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.907709][ T8000] Use struct sctp_assoc_value instead [ 121.933330][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.933330][ T8000] Use struct sctp_assoc_value instead [ 121.934314][ T1081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.971474][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.971474][ T8000] Use struct sctp_assoc_value instead [ 121.996728][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 121.996728][ T8000] Use struct sctp_assoc_value instead [ 122.016642][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 122.016642][ T8000] Use struct sctp_assoc_value instead [ 122.039893][ T8000] sctp: [Deprecated]: syz.1.569 (pid 8000) Use of int in max_burst socket option deprecated. [ 122.039893][ T8000] Use struct sctp_assoc_value instead [ 122.070254][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.106936][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.573'. [ 122.206024][ T8010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.236941][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.249040][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.257531][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.267114][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.275946][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.284665][ T5833] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 122.295413][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.309804][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.340842][ T1081] bridge_slave_1: left allmulticast mode [ 122.349042][ T1081] bridge_slave_1: left promiscuous mode [ 122.354833][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.368359][ T1081] bridge_slave_0: left allmulticast mode [ 122.385477][ T1081] bridge_slave_0: left promiscuous mode [ 122.394531][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.849099][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.875822][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.904327][ T1081] bond0 (unregistering): Released all slaves [ 122.930441][ T1168] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 123.112515][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 123.308503][ T8041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.381488][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.391007][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.417792][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.435673][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.444090][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.456687][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.634298][ T1081] hsr_slave_0: left promiscuous mode [ 123.658240][ T1081] hsr_slave_1: left promiscuous mode [ 123.670860][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.692721][ T8039] infiniband syz1: set down [ 123.698607][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.706437][ T8039] infiniband syz1: added ipvlan1 [ 123.729622][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.737092][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.830474][ T1081] veth1_macvtap: left promiscuous mode [ 123.839396][ T1081] veth0_macvtap: left promiscuous mode [ 123.845025][ T1081] veth1_vlan: left promiscuous mode [ 123.851015][ T1081] veth0_vlan: left promiscuous mode [ 123.858603][ T8039] RDS/IB: syz1: added [ 123.863961][ T8039] smc: adding ib device syz1 with port count 1 [ 123.870775][ T8039] smc: ib device syz1 port 1 has pnetid [ 124.032987][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 124.304553][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 124.345833][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 124.362317][ T5838] Bluetooth: hci1: command tx timeout [ 124.819893][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 124.934651][ T8076] IPVS: length: 225 != 24 [ 125.016042][ T8076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.590'. [ 125.026519][ T8076] netlink: 43 bytes leftover after parsing attributes in process `syz.1.590'. [ 125.035570][ T8076] netlink: 'syz.1.590': attribute type 6 has an invalid length. [ 125.044691][ T8076] netlink: 'syz.1.590': attribute type 5 has an invalid length. [ 125.054711][ T8076] netlink: 43 bytes leftover after parsing attributes in process `syz.1.590'. [ 125.169632][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.176813][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.195110][ T8014] bridge_slave_0: entered allmulticast mode [ 125.206227][ T8014] bridge_slave_0: entered promiscuous mode [ 125.223624][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.249352][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.275218][ T8014] bridge_slave_1: entered allmulticast mode [ 125.310279][ T8014] bridge_slave_1: entered promiscuous mode [ 125.420166][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.465679][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.525473][ T8014] team0: Port device team_slave_0 added [ 125.551114][ T8014] team0: Port device team_slave_1 added [ 125.559842][ T5838] Bluetooth: hci3: command tx timeout [ 125.642273][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.659013][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.708880][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.739845][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.756227][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.809024][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.863906][ T1081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.991647][ T1081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.085530][ T1081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.190091][ T1081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.217691][ T8014] hsr_slave_0: entered promiscuous mode [ 126.224753][ T8014] hsr_slave_1: entered promiscuous mode [ 126.232195][ T8014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.240163][ T8014] Cannot create hsr debugfs directory [ 126.496705][ T5838] Bluetooth: hci1: command tx timeout [ 126.563930][ T1081] bridge_slave_1: left allmulticast mode [ 126.573580][ T1081] bridge_slave_1: left promiscuous mode [ 126.581004][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.595559][ T1081] bridge_slave_0: left allmulticast mode [ 126.609415][ T1081] bridge_slave_0: left promiscuous mode [ 126.622635][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.801536][ T8113] netlink: 'syz.1.598': attribute type 30 has an invalid length. [ 127.039335][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.054641][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.065055][ T1081] bond0 (unregistering): Released all slaves [ 127.088618][ T8043] chnl_net:caif_netlink_parms(): no params data found [ 127.374209][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.601'. [ 127.543513][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 127.555955][ T8135] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 127.639646][ T5838] Bluetooth: hci3: command tx timeout [ 127.687423][ T8141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.721959][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.736470][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.741247][ T8144] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 127.756239][ T8043] bridge_slave_0: entered allmulticast mode [ 127.768450][ T8043] bridge_slave_0: entered promiscuous mode [ 127.780829][ T8146] netlink: 'syz.3.608': attribute type 11 has an invalid length. [ 127.803998][ T8148] netlink: 'syz.3.608': attribute type 11 has an invalid length. [ 127.831836][ T8144] team0: Device ipvlan1 failed to register rx_handler [ 127.879172][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.886318][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.921538][ T8043] bridge_slave_1: entered allmulticast mode [ 127.930347][ T8043] bridge_slave_1: entered promiscuous mode [ 128.026556][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.086844][ T1081] hsr_slave_0: left promiscuous mode [ 128.093572][ T1081] hsr_slave_1: left promiscuous mode [ 128.116303][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.124029][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.132067][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.139613][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.161479][ T1081] veth1_macvtap: left promiscuous mode [ 128.167042][ T1081] veth0_macvtap: left promiscuous mode [ 128.172872][ T1081] veth1_vlan: left promiscuous mode [ 128.178146][ T1081] veth0_vlan: left promiscuous mode [ 128.529161][ T5838] Bluetooth: hci1: command tx timeout [ 128.608124][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 128.651216][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 128.679815][ T2985] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 129.057986][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.224918][ T8043] team0: Port device team_slave_0 added [ 129.247072][ T8043] team0: Port device team_slave_1 added [ 129.287172][ T8014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.318366][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 129.319983][ T8014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.396963][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.397696][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 129.420931][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.458929][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.487884][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.495584][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.521807][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.544965][ T8014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.566203][ T8014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.721841][ T5838] Bluetooth: hci3: command tx timeout [ 129.728333][ T8043] hsr_slave_0: entered promiscuous mode [ 129.744569][ T8043] hsr_slave_1: entered promiscuous mode [ 129.759893][ T8043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.778389][ T8043] Cannot create hsr debugfs directory [ 129.911429][ T8191] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 129.928528][ T8191] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.948425][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 130.084275][ T8197] lo: entered promiscuous mode [ 130.098729][ T8197] netlink: 'syz.3.624': attribute type 2 has an invalid length. [ 130.134324][ T8197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.380574][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.417868][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 130.444133][ T8213] syzkaller1: entered promiscuous mode [ 130.449815][ T8213] syzkaller1: entered allmulticast mode [ 130.586663][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.600816][ T5838] Bluetooth: hci1: command tx timeout [ 130.650166][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.657312][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.714837][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.722059][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.792428][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 130.867882][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 130.916039][ T8043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.958347][ T8043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.986566][ T8043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.014824][ T8043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.103954][ T8243] netlink: 'syz.1.635': attribute type 2 has an invalid length. [ 131.144910][ T8243] netlink: 'syz.1.635': attribute type 11 has an invalid length. [ 131.153013][ T8243] netlink: 224 bytes leftover after parsing attributes in process `syz.1.635'. [ 131.245101][ T8251] xt_hashlimit: max too large, truncated to 1048576 [ 131.268749][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.289445][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.358587][ T8043] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.393031][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.400227][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.415939][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.423147][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.460208][ T8258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 131.473032][ T8014] veth0_vlan: entered promiscuous mode [ 131.531624][ T8014] veth1_vlan: entered promiscuous mode [ 131.657086][ T8014] veth0_macvtap: entered promiscuous mode [ 131.673307][ T8014] veth1_macvtap: entered promiscuous mode [ 131.721882][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.741205][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.751524][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.762289][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.781140][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.798084][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.808444][ T5838] Bluetooth: hci3: command tx timeout [ 131.816274][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.826295][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.852820][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.873785][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.900699][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.911922][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.924041][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.935219][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.986523][ T8014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.004919][ T8014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.018641][ T8014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.029964][ T8014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.057765][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.222264][ T8285] netem: change failed [ 132.225779][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.241215][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.318360][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.349526][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.508513][ T8043] veth0_vlan: entered promiscuous mode [ 132.525557][ T8043] veth1_vlan: entered promiscuous mode [ 132.640392][ T8043] veth0_macvtap: entered promiscuous mode [ 132.650522][ T8043] veth1_macvtap: entered promiscuous mode [ 132.692007][ T8296] tipc: Started in network mode [ 132.705395][ T8296] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 132.734073][ T8296] tipc: Enabling of bearer rejected, failed to enable media [ 132.750471][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.807451][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.838434][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.858302][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.879294][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.908491][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.919628][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.941450][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.960500][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.018560][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.041292][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.060947][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.071944][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.082736][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.106863][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.118295][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.157296][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.166581][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.179137][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.199555][ T8043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.208301][ T8043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.217427][ T8043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.226983][ T8043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.256454][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.355550][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.415584][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.438149][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.472425][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.480821][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.822999][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.926952][ T8312] __nla_validate_parse: 2 callbacks suppressed [ 133.926971][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 133.955952][ T8312] xt_CONNSECMARK: invalid mode: 0 [ 134.035638][ T66] bridge_slave_1: left allmulticast mode [ 134.043065][ T66] bridge_slave_1: left promiscuous mode [ 134.051371][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.061180][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.070634][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.071204][ T66] bridge_slave_0: left allmulticast mode [ 134.079142][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.094513][ T66] bridge_slave_0: left promiscuous mode [ 134.095198][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.104529][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.108550][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.123360][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.443344][ T1168] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 134.499333][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.527451][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.550532][ T66] bond0 (unregistering): Released all slaves [ 135.056793][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.071031][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.088528][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.101093][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.103902][ T8314] chnl_net:caif_netlink_parms(): no params data found [ 135.126293][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.136166][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.144905][ T66] hsr_slave_0: left promiscuous mode [ 135.173887][ T66] hsr_slave_1: left promiscuous mode [ 135.181064][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.188494][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.203816][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.234294][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.282689][ T66] veth1_macvtap: left promiscuous mode [ 135.288279][ T66] veth0_macvtap: left promiscuous mode [ 135.295255][ T66] veth1_vlan: left promiscuous mode [ 135.300897][ T66] veth0_vlan: left promiscuous mode [ 135.807540][ T66] team0 (unregistering): Port device team_slave_1 removed [ 135.854782][ T66] team0 (unregistering): Port device team_slave_0 removed [ 136.200384][ T5836] Bluetooth: hci1: command tx timeout [ 136.527755][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.663'. [ 136.719916][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.727129][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.756660][ T8314] bridge_slave_0: entered allmulticast mode [ 136.764644][ T8314] bridge_slave_0: entered promiscuous mode [ 136.813278][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.828621][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.838496][ T8314] bridge_slave_1: entered allmulticast mode [ 136.861676][ T8314] bridge_slave_1: entered promiscuous mode [ 136.993599][ T8314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.007194][ T8314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.125959][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 137.224662][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.239762][ T5836] Bluetooth: hci3: command tx timeout [ 137.252298][ T8314] team0: Port device team_slave_0 added [ 137.261832][ T8314] team0: Port device team_slave_1 added [ 137.303882][ T8380] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 137.347248][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.359226][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.385591][ T8314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.416128][ T8388] netlink: 100 bytes leftover after parsing attributes in process `syz.1.671'. [ 137.440120][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.460797][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.470331][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.501142][ T8314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.539934][ T8390] netlink: 'syz.1.672': attribute type 8 has an invalid length. [ 137.582763][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.673057][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.722597][ T8314] hsr_slave_0: entered promiscuous mode [ 137.753178][ T8314] hsr_slave_1: entered promiscuous mode [ 137.766065][ T8314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.774574][ T8314] Cannot create hsr debugfs directory [ 137.805624][ T8322] chnl_net:caif_netlink_parms(): no params data found [ 137.856134][ T8398] 8021q: VLANs not supported on ipvlan0 [ 138.042735][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.060267][ T8408] raw_sendmsg: syz.0.676 forgot to set AF_INET. Fix it! [ 138.060354][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.088154][ T8322] bridge_slave_0: entered allmulticast mode [ 138.098357][ T8322] bridge_slave_0: entered promiscuous mode [ 138.121637][ T8410] bridge0: port 1(hsr_slave_1) entered blocking state [ 138.134219][ T8410] bridge0: port 1(hsr_slave_1) entered disabled state [ 138.141873][ T8410] hsr_slave_1: entered allmulticast mode [ 138.149150][ T8410] hsr_slave_1: left allmulticast mode [ 138.156589][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.165867][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.174430][ T8322] bridge_slave_1: entered allmulticast mode [ 138.181991][ T8322] bridge_slave_1: entered promiscuous mode [ 138.280068][ T5836] Bluetooth: hci1: command tx timeout [ 138.326567][ T8322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.380729][ T66] bridge_slave_1: left allmulticast mode [ 138.401226][ T66] bridge_slave_1: left promiscuous mode [ 138.428710][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.458046][ T66] bridge_slave_0: left allmulticast mode [ 138.483439][ T66] bridge_slave_0: left promiscuous mode [ 138.504125][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.093331][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.105852][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.116371][ T66] bond0 (unregistering): Released all slaves [ 139.129324][ T8322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.293884][ T8322] team0: Port device team_slave_0 added [ 139.329205][ T5836] Bluetooth: hci3: command tx timeout [ 139.373230][ T8322] team0: Port device team_slave_1 added [ 139.919178][ T8448] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 140.010216][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.017222][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.056033][ T8322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.090659][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'. [ 140.097681][ T8452] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 140.110735][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.688'. [ 140.161076][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.189549][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.218044][ T11] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 140.239613][ T8322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.266663][ T8457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 140.359799][ T5836] Bluetooth: hci1: command tx timeout [ 140.448043][ T8322] hsr_slave_0: entered promiscuous mode [ 140.463463][ T8322] hsr_slave_1: entered promiscuous mode [ 140.483855][ T8322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.510800][ T8322] Cannot create hsr debugfs directory [ 140.549779][ T66] hsr_slave_0: left promiscuous mode [ 140.559041][ T66] hsr_slave_1: left promiscuous mode [ 140.580907][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.599501][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.609996][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.617445][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.647737][ T66] veth1_macvtap: left promiscuous mode [ 140.653477][ T66] veth0_macvtap: left promiscuous mode [ 140.659389][ T66] veth1_vlan: left promiscuous mode [ 140.667825][ T66] veth0_vlan: left promiscuous mode [ 141.086989][ T66] team0 (unregistering): Port device team_slave_1 removed [ 141.137499][ T66] team0 (unregistering): Port device team_slave_0 removed [ 141.409089][ T5836] Bluetooth: hci3: command tx timeout [ 141.489250][ T5833] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 141.555303][ T8478] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.694'. [ 141.730251][ T8484] bond0: (slave bond1): Error -95 calling ndo_bpf [ 141.784592][ T8487] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.696'. [ 141.918601][ T8314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.969223][ T8314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.013552][ T8314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.094940][ T8314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.114384][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.704'. [ 142.408461][ T8524] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 142.427710][ T8314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.440323][ T5836] Bluetooth: hci1: command tx timeout [ 142.511230][ T8314] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.553169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.560337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.622877][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.630048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.746823][ T8322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.782045][ T8322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.807504][ T8322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.835179][ T8322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.062499][ T8542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.077637][ T8542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.093008][ T8542] bond0 (unregistering): (slave bond1): Releasing backup interface [ 143.108056][ T8542] bond0 (unregistering): Released all slaves [ 143.141110][ T8314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.220743][ T8322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.279364][ T8314] veth0_vlan: entered promiscuous mode [ 143.295058][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'. [ 143.315502][ T8322] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.341868][ T8314] veth1_vlan: entered promiscuous mode [ 143.351296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.358514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.398375][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.405626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.425571][ T8314] veth0_macvtap: entered promiscuous mode [ 143.462154][ T8314] veth1_macvtap: entered promiscuous mode [ 143.491816][ T5836] Bluetooth: hci3: command tx timeout [ 143.524101][ T8314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.547160][ T8314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.558089][ T8314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.574918][ T8314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.585216][ T8314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.603778][ T8314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.617123][ T8314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.631860][ T8555] pim6reg: entered allmulticast mode [ 143.661953][ T8314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.682536][ T8314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.701094][ T8314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.701354][ T8557] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 143.723193][ T8314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.741885][ T8314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.781384][ T8314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.793767][ T8314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.814903][ T8314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.832562][ T8314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.022120][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.043531][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.161100][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.171403][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.287977][ T8581] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.338031][ T8581] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.347425][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 144.387992][ T8322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.562158][ T8594] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 144.792084][ T8322] veth0_vlan: entered promiscuous mode [ 144.807478][ T8322] veth1_vlan: entered promiscuous mode [ 144.845369][ T8322] veth0_macvtap: entered promiscuous mode [ 144.871148][ T8322] veth1_macvtap: entered promiscuous mode [ 144.888542][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.906445][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.917989][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.941355][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.954361][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.965241][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.975742][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.987466][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.001334][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.026797][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.037618][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.047809][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.060132][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.070322][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.081369][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.094508][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.108457][ T8322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.117514][ T8322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.126573][ T8322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.135969][ T8322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.204640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.218096][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.248022][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.257406][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.553475][ T8624] : renamed from bond0 (while UP) [ 145.560937][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 145.574279][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.734'. [ 145.706668][ T1081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.729771][ T5836] Bluetooth: hci0: command tx timeout [ 145.959585][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 146.269262][ T8633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'. [ 146.466868][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.475886][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.485937][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.494442][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.502803][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.510875][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.609581][ T1081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.684469][ T8639] netlink: 22 bytes leftover after parsing attributes in process `syz.0.740'. [ 146.750324][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.825975][ T1081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.894876][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.905648][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.925900][ T8647] netlink: 80 bytes leftover after parsing attributes in process `syz.1.744'. [ 146.935405][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.949804][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.964765][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.003496][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.107927][ T1081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.166628][ T8665] ksmbd: Unknown IPC event: 4, ignore. [ 147.417127][ T1081] bridge_slave_1: left allmulticast mode [ 147.422918][ T1081] bridge_slave_1: left promiscuous mode [ 147.431319][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.494681][ T1081] bridge_slave_0: left allmulticast mode [ 147.516936][ T1081] bridge_slave_0: left promiscuous mode [ 147.522966][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.899342][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.911786][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.922105][ T1081] bond0 (unregistering): Released all slaves [ 147.938053][ T8635] chnl_net:caif_netlink_parms(): no params data found [ 148.143886][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 148.196916][ T8693] netlink: 'syz.0.756': attribute type 2 has an invalid length. [ 148.208682][ T8693] netlink: 'syz.0.756': attribute type 4 has an invalid length. [ 148.313270][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.320804][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.328249][ T8635] bridge_slave_0: entered allmulticast mode [ 148.339364][ T8635] bridge_slave_0: entered promiscuous mode [ 148.368421][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.375852][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.383422][ T8635] bridge_slave_1: entered allmulticast mode [ 148.390663][ T8635] bridge_slave_1: entered promiscuous mode [ 148.521674][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.599238][ T5836] Bluetooth: hci1: command tx timeout [ 148.615766][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.638294][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 148.665348][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 148.702428][ T8712] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 148.753948][ T8713] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 148.783064][ T1081] hsr_slave_0: left promiscuous mode [ 148.790834][ T1081] hsr_slave_1: left promiscuous mode [ 148.803634][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.811208][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.819534][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.826970][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.858365][ T1081] veth1_macvtap: left promiscuous mode [ 148.864178][ T1081] veth0_macvtap: left promiscuous mode [ 148.869932][ T1081] veth1_vlan: left promiscuous mode [ 148.875199][ T1081] veth0_vlan: left promiscuous mode [ 149.080942][ T5836] Bluetooth: hci3: command tx timeout [ 149.295986][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 149.344993][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 149.895416][ T8635] team0: Port device team_slave_0 added [ 149.935631][ T8635] team0: Port device team_slave_1 added [ 149.983885][ T8726] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 150.101762][ T8644] chnl_net:caif_netlink_parms(): no params data found [ 150.120813][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.133212][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.159572][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.249518][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.261329][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.298745][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.398010][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 150.433975][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.461027][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.468745][ T8644] bridge_slave_0: entered allmulticast mode [ 150.476823][ T8644] bridge_slave_0: entered promiscuous mode [ 150.521602][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 150.537818][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.545467][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.553084][ T8644] bridge_slave_1: entered allmulticast mode [ 150.560717][ T8644] bridge_slave_1: entered promiscuous mode [ 150.571166][ T8743] openvswitch: netlink: EtherType 50a is less than min 600 [ 150.588013][ T8635] hsr_slave_0: entered promiscuous mode [ 150.622131][ T8635] hsr_slave_1: entered promiscuous mode [ 150.681201][ T5836] Bluetooth: hci1: command tx timeout [ 150.689989][ T8635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.699372][ T8635] Cannot create hsr debugfs directory [ 150.782694][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.843844][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.944584][ T8773] __nla_validate_parse: 1 callbacks suppressed [ 150.944607][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 150.985074][ T8644] team0: Port device team_slave_0 added [ 151.117268][ T8644] team0: Port device team_slave_1 added [ 151.166436][ T5836] Bluetooth: hci3: command tx timeout [ 151.184341][ T1081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.291431][ T1081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.307946][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.315540][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.346583][ T8644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.379535][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.388423][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.431842][ T8644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.496989][ T1081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.633384][ T1081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.662742][ T8801] netlink: 'syz.0.786': attribute type 3 has an invalid length. [ 151.679270][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.786'. [ 151.712413][ T8644] hsr_slave_0: entered promiscuous mode [ 151.719229][ T66] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 151.728593][ T8644] hsr_slave_1: entered promiscuous mode [ 151.736362][ T8644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.751177][ T8644] Cannot create hsr debugfs directory [ 151.987639][ T1081] bridge_slave_1: left allmulticast mode [ 152.001540][ T1081] bridge_slave_1: left promiscuous mode [ 152.012844][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.020505][ T8812] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 152.028370][ T8812] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 152.037192][ T1081] bridge_slave_0: left allmulticast mode [ 152.038834][ T8812] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.791'. [ 152.053748][ T1081] bridge_slave_0: left promiscuous mode [ 152.067470][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.165393][ T8817] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 152.542384][ T8830] sctp: [Deprecated]: syz.0.797 (pid 8830) Use of int in maxseg socket option. [ 152.542384][ T8830] Use struct sctp_assoc_value instead [ 152.663126][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.675131][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.686061][ T1081] bond0 (unregistering): Released all slaves [ 152.773479][ T5836] Bluetooth: hci1: command tx timeout [ 152.867140][ T8635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.897629][ T8842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.799'. [ 152.967962][ T8635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.985664][ T8635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.011094][ T8635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.024164][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 153.101608][ T8851] netlink: 'syz.0.803': attribute type 32 has an invalid length. [ 153.239156][ T5836] Bluetooth: hci3: command tx timeout [ 153.310848][ T8858] bond0: entered promiscuous mode [ 153.315953][ T8858] bond0: entered allmulticast mode [ 153.332003][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.804'. [ 153.342022][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.615292][ T1081] hsr_slave_0: left promiscuous mode [ 153.631237][ T1081] hsr_slave_1: left promiscuous mode [ 153.678134][ T8882] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.741968][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.749920][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.759726][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.767180][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.800289][ T1081] veth1_macvtap: left promiscuous mode [ 153.806310][ T1081] veth0_macvtap: left promiscuous mode [ 153.812312][ T1081] veth1_vlan: left promiscuous mode [ 153.817705][ T1081] veth0_vlan: left promiscuous mode [ 153.941977][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.813'. [ 154.349876][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 154.393723][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 154.839686][ T5836] Bluetooth: hci1: command tx timeout [ 154.845197][ T8897] netlink: 72 bytes leftover after parsing attributes in process `syz.3.816'. [ 154.864016][ T8897] netlink: 72 bytes leftover after parsing attributes in process `syz.3.816'. [ 154.918591][ T8644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.961423][ T8644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.985307][ T8644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.024764][ T8644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.127789][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 155.156622][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.253109][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.287193][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.294375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.319664][ T5836] Bluetooth: hci3: command tx timeout [ 155.350483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.357655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.482779][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.541164][ T8644] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.573257][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.580458][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.633404][ T8931] netlink: 'syz.0.824': attribute type 2 has an invalid length. [ 155.678626][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.685831][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.760806][ T8644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.785378][ T8644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.848284][ T8937] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 155.895055][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.933249][ T8635] veth0_vlan: entered promiscuous mode [ 155.944594][ T8635] veth1_vlan: entered promiscuous mode [ 155.985592][ T8635] veth0_macvtap: entered promiscuous mode [ 156.021046][ T8635] veth1_macvtap: entered promiscuous mode [ 156.075641][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.103489][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.119700][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.131043][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.141168][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.152966][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.164350][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.205920][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.242671][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.269028][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.302700][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.331998][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.364099][ T8958] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 156.381358][ T8635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.417340][ T8635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.439288][ T8635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.448049][ T8635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.594298][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.729183][ T8980] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 156.738556][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.746591][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.816552][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.826355][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.081279][ T9000] x_tables: duplicate underflow at hook 1 [ 157.092741][ T8644] veth0_vlan: entered promiscuous mode [ 157.118128][ T8644] veth1_vlan: entered promiscuous mode [ 157.186019][ T8644] veth0_macvtap: entered promiscuous mode [ 157.200527][ T8644] veth1_macvtap: entered promiscuous mode [ 157.247227][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.260366][ T9013] xt_TCPMSS: Only works on TCP SYN packets [ 157.266193][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.266214][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.295269][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.307342][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.346499][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.369225][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.384223][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.395869][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.447964][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.467743][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.480088][ T1168] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 157.500995][ T9025] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 157.516242][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.528243][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.538393][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.542040][ T9028] __nla_validate_parse: 3 callbacks suppressed [ 157.542059][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 157.549270][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.565230][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 157.575379][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.593423][ T8644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.602343][ T8644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.611539][ T8644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.620632][ T8644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.684476][ T9025] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.730791][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 157.895014][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.020401][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.028288][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.074639][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.086484][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.497427][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.973254][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.992398][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.993098][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.012831][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.023507][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.031689][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.043564][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.073132][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.162726][ T66] bridge_slave_1: left allmulticast mode [ 159.168426][ T66] bridge_slave_1: left promiscuous mode [ 159.179044][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.190733][ T66] bridge_slave_0: left allmulticast mode [ 159.196419][ T66] bridge_slave_0: left promiscuous mode [ 159.210346][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.489922][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 159.540393][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 159.560888][ T9071] netlink: 'syz.1.857': attribute type 7 has an invalid length. [ 159.578986][ T9071] netlink: 'syz.1.857': attribute type 8 has an invalid length. [ 159.586688][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 159.648322][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.664797][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.677733][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.689921][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.697678][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.707583][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.845468][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.856319][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.866691][ T66] bond0 (unregistering): Released all slaves [ 159.886142][ T9067] wireguard: wg1: Could not create IPv4 socket [ 160.200346][ T9083] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 160.220130][ T9083] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 160.333331][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 160.586363][ T66] hsr_slave_0: left promiscuous mode [ 160.592851][ T66] hsr_slave_1: left promiscuous mode [ 160.604974][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.612682][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.625642][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.634172][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.658355][ T66] veth1_macvtap: left promiscuous mode [ 160.664012][ T66] veth0_macvtap: left promiscuous mode [ 160.669756][ T66] veth1_vlan: left promiscuous mode [ 160.676167][ T66] veth0_vlan: left promiscuous mode [ 160.682069][ T5833] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 161.083259][ T9110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'. [ 161.089268][ T5836] Bluetooth: hci1: command tx timeout [ 161.206370][ T66] team0 (unregistering): Port device team_slave_1 removed [ 161.248628][ T66] team0 (unregistering): Port device team_slave_0 removed [ 161.688675][ T9092] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 161.732990][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.776123][ T9110] bridge_slave_0 (unregistering): left allmulticast mode [ 161.783407][ T9110] bridge_slave_0 (unregistering): left promiscuous mode [ 161.790655][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.811056][ T5836] Bluetooth: hci3: command tx timeout [ 161.897470][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 161.931569][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 162.344705][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.352019][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.359566][ T9052] bridge_slave_0: entered allmulticast mode [ 162.366633][ T9052] bridge_slave_0: entered promiscuous mode [ 162.377265][ T9139] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 162.404281][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.411773][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.449297][ T9072] bridge_slave_0: entered allmulticast mode [ 162.466666][ T9072] bridge_slave_0: entered promiscuous mode [ 162.492387][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.502299][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.511003][ T9072] bridge_slave_1: entered allmulticast mode [ 162.518556][ T9072] bridge_slave_1: entered promiscuous mode [ 162.536880][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.548357][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.572043][ T9052] bridge_slave_1: entered allmulticast mode [ 162.586454][ T9052] bridge_slave_1: entered promiscuous mode [ 162.747321][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.800467][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.831589][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.847310][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.047357][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.082267][ T9072] team0: Port device team_slave_0 added [ 163.092990][ T9052] team0: Port device team_slave_0 added [ 163.113954][ T9072] team0: Port device team_slave_1 added [ 163.133284][ T9052] team0: Port device team_slave_1 added [ 163.161729][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.883'. [ 163.169702][ T5836] Bluetooth: hci1: command tx timeout [ 163.190969][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.240207][ T2985] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 163.240312][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.254434][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.282363][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.353532][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.378583][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.399315][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.435060][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.476163][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.490938][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.538995][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.557504][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.568104][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.595079][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.637077][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.651427][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 163.678604][ T9190] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 163.710374][ T9072] hsr_slave_0: entered promiscuous mode [ 163.721205][ T9072] hsr_slave_1: entered promiscuous mode [ 163.728013][ T9072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.736720][ T9072] Cannot create hsr debugfs directory [ 163.748560][ T9189] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 163.879456][ T5836] Bluetooth: hci3: command tx timeout [ 163.950281][ T9052] hsr_slave_0: entered promiscuous mode [ 163.968513][ T9052] hsr_slave_1: entered promiscuous mode [ 163.979546][ T9052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.987209][ T9052] Cannot create hsr debugfs directory [ 164.237640][ T9217] sit1: entered promiscuous mode [ 164.308020][ T9221] netlink: 'syz.3.898': attribute type 4 has an invalid length. [ 164.334295][ T9213] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 164.345026][ T9213] netlink: 'syz.0.897': attribute type 2 has an invalid length. [ 164.389761][ T66] bridge_slave_1: left allmulticast mode [ 164.395610][ T66] bridge_slave_1: left promiscuous mode [ 164.403134][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.438375][ T9225] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.454001][ T66] bridge_slave_0: left allmulticast mode [ 164.463360][ T66] bridge_slave_0: left promiscuous mode [ 164.470688][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.821978][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.833677][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.844653][ T66] bond0 (unregistering): Released all slaves [ 164.976338][ T9231] netlink: 'syz.0.901': attribute type 21 has an invalid length. [ 165.180279][ T9239] syzkaller1: entered promiscuous mode [ 165.187845][ T9239] syzkaller1: entered allmulticast mode [ 165.236210][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 165.245602][ T5836] Bluetooth: hci1: command tx timeout [ 165.287017][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 165.319594][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 165.468200][ T66] hsr_slave_0: left promiscuous mode [ 165.496102][ T66] hsr_slave_1: left promiscuous mode [ 165.518365][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.539032][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.570562][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.578034][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.583971][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 165.606675][ T9262] Bluetooth: MGMT ver 1.23 [ 165.620156][ T66] veth1_macvtap: left promiscuous mode [ 165.625676][ T66] veth0_macvtap: left promiscuous mode [ 165.631560][ T66] veth1_vlan: left promiscuous mode [ 165.637025][ T66] veth0_vlan: left promiscuous mode [ 165.969465][ T5836] Bluetooth: hci3: command tx timeout [ 166.067681][ T66] team0 (unregistering): Port device team_slave_1 removed [ 166.111123][ T66] team0 (unregistering): Port device team_slave_0 removed [ 166.539081][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 166.670153][ T9269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.891397][ T9278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.983448][ T9286] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 167.088248][ T9286] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.138521][ T9283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.148701][ T9283] bond6: (slave bond7): Enslaving as an active interface with a down link [ 167.267246][ T9296] netlink: 'syz.3.918': attribute type 39 has an invalid length. [ 167.330451][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.336258][ T5836] Bluetooth: hci1: command tx timeout [ 167.339287][ T9286] bond6: (slave batadv1): making interface the new active one [ 167.365384][ T9286] batadv1: entered promiscuous mode [ 167.387268][ T9286] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 167.426185][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 167.934779][ T9311] netlink: 64 bytes leftover after parsing attributes in process `syz.0.921'. [ 167.946915][ T9072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.985205][ T9072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.012131][ T9072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.041084][ T5836] Bluetooth: hci3: command tx timeout [ 168.073925][ T9072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.172526][ T9052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.210075][ T9052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.265928][ T9052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.293432][ T9052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.320000][ T9328] netlink: 'syz.1.925': attribute type 28 has an invalid length. [ 168.326572][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.334775][ T9328] netlink: 'syz.1.925': attribute type 3 has an invalid length. [ 168.350204][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.925'. [ 168.393703][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.440165][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.447312][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.487302][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.494820][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.572441][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.589126][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.601108][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 168.624314][ T9052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.634973][ T9052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.669877][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.677039][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.690630][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.697878][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.000186][ T1081] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 169.135632][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.204604][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.232176][ T9052] veth0_vlan: entered promiscuous mode [ 169.274593][ T9052] veth1_vlan: entered promiscuous mode [ 169.368211][ T9052] veth0_macvtap: entered promiscuous mode [ 169.433071][ T9052] veth1_macvtap: entered promiscuous mode [ 169.449569][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.460393][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.460514][ T9363] Bluetooth: MGMT ver 1.23 [ 169.470534][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.487554][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.497524][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.508855][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.519950][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.556357][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.586301][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.606730][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.622696][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.645235][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.656558][ T9052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.665455][ T9052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.668137][ T9366] netlink: 'syz.0.935': attribute type 4 has an invalid length. [ 169.674237][ T9052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.690908][ T9052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.701726][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 169.720109][ T9371] netlink: 'syz.0.935': attribute type 4 has an invalid length. [ 169.802659][ T9377] netlink: ct family unspecified [ 169.807882][ T9377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.935832][ T9375] team0 (unregistering): Port device team_slave_0 removed [ 169.949726][ T9375] team0 (unregistering): Port device team_slave_1 removed [ 170.162935][ T9072] veth0_vlan: entered promiscuous mode [ 170.189989][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.210352][ T9386] netlink: 68 bytes leftover after parsing attributes in process `syz.0.939'. [ 170.215201][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.259945][ T9072] veth1_vlan: entered promiscuous mode [ 170.300078][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.325362][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.353895][ T9072] veth0_macvtap: entered promiscuous mode [ 170.385639][ T9072] veth1_macvtap: entered promiscuous mode [ 170.432884][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.458262][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.473902][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.485188][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.495568][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.506881][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.520842][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.533496][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.545341][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.636616][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.653781][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.663741][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.674690][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.684936][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.687621][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 170.695595][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.696598][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.727565][ T9072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.736354][ T9072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.747970][ T9072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.756779][ T9072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.857178][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.875416][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.898403][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.912166][ T9408] ax25_connect(): syz.1.948 uses autobind, please contact jreuter@yaina.de [ 170.916175][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.936779][ T9408] dvmrp1: entered allmulticast mode [ 170.954421][ T9408] dvmrp1: left allmulticast mode [ 171.462665][ T9432] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 171.485795][ T9435] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 171.605708][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 171.965913][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.083242][ T9458] net veth1_virt_wifi : renamed from virt_wifi0 [ 172.921392][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.994633][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.129193][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.267263][ T52] bridge_slave_1: left allmulticast mode [ 173.273298][ T52] bridge_slave_1: left promiscuous mode [ 173.288087][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.297518][ T52] bridge_slave_0: left allmulticast mode [ 173.303915][ T52] bridge_slave_0: left promiscuous mode [ 173.310242][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.378425][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.397786][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.408457][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.421102][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.428727][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.437143][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.804257][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.819904][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.831838][ T52] bond0 (unregistering): Released all slaves [ 173.853198][ T9476] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 173.870617][ T9480] veth0_vlan: entered allmulticast mode [ 173.980571][ T9487] netlink: 'syz.3.970': attribute type 10 has an invalid length. [ 174.012302][ T9484] ªªªªªª: renamed from vlan0 [ 174.042018][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.061845][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.069045][ T9487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.087307][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.096607][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.105539][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.111361][ T9487] : (slave bridge0): Enslaving as an active interface with an up link [ 174.129828][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.139442][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.147283][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.254885][ T9500] netlink: 'syz.1.972': attribute type 4 has an invalid length. [ 174.293024][ T9497] netlink: 'syz.1.972': attribute type 4 has an invalid length. [ 174.540208][ T9506] ip6t_srh: unknown srh match flags 4001 [ 174.546583][ T9508] Cannot find set identified by id 752 to match [ 174.566248][ T9508] netlink: 56 bytes leftover after parsing attributes in process `syz.1.976'. [ 174.730302][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 174.769258][ T1168] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 174.807157][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 174.868458][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 174.907503][ T52] hsr_slave_0: left promiscuous mode [ 174.916633][ T52] hsr_slave_1: left promiscuous mode [ 174.945489][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.963607][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.977200][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.985232][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.048190][ T52] veth1_macvtap: left promiscuous mode [ 175.058707][ T52] veth0_macvtap: left promiscuous mode [ 175.071376][ T52] veth1_vlan: left promiscuous mode [ 175.082572][ T52] veth0_vlan: left promiscuous mode [ 175.479003][ T5836] Bluetooth: hci1: command tx timeout [ 175.769174][ T52] team0 (unregistering): Port device team_slave_1 removed [ 175.822519][ T52] team0 (unregistering): Port device team_slave_0 removed [ 176.212445][ T5836] Bluetooth: hci3: command tx timeout [ 176.408194][ T9539] netlink: 'syz.1.984': attribute type 21 has an invalid length. [ 176.416195][ T9539] netlink: 'syz.1.984': attribute type 11 has an invalid length. [ 176.596494][ T9472] chnl_net:caif_netlink_parms(): no params data found [ 176.617699][ T9550] x_tables: duplicate underflow at hook 3 [ 176.620893][ T9491] chnl_net:caif_netlink_parms(): no params data found [ 177.069388][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.076523][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.106648][ T9472] bridge_slave_0: entered allmulticast mode [ 177.127105][ T9472] bridge_slave_0: entered promiscuous mode [ 177.137027][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.144431][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.160569][ T9472] bridge_slave_1: entered allmulticast mode [ 177.179787][ T9472] bridge_slave_1: entered promiscuous mode [ 177.201936][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.216052][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.235215][ T9491] bridge_slave_0: entered allmulticast mode [ 177.275130][ T9491] bridge_slave_0: entered promiscuous mode [ 177.295946][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.319176][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.332147][ T9491] bridge_slave_1: entered allmulticast mode [ 177.347441][ T9491] bridge_slave_1: entered promiscuous mode [ 177.493598][ T9592] sctp: [Deprecated]: syz.3.992 (pid 9592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.493598][ T9592] Use struct sctp_sack_info instead [ 177.496902][ T9472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.574358][ T5836] Bluetooth: hci1: command tx timeout [ 177.579934][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.608359][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.620278][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.656182][ T9472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.731111][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.795612][ T9472] team0: Port device team_slave_0 added [ 177.806990][ T9604] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 177.815072][ T9491] team0: Port device team_slave_0 added [ 177.841651][ T9491] team0: Port device team_slave_1 added [ 177.850204][ T9472] team0: Port device team_slave_1 added [ 177.867623][ T9608] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 177.868606][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.897630][ T9604] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 178.011137][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.034721][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.048851][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.076250][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.091355][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.098446][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.140354][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.162818][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.171676][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.199007][ T9472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.274648][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.281760][ T5836] Bluetooth: hci3: command tx timeout [ 178.298883][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.351673][ T9472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.407998][ T9491] hsr_slave_0: entered promiscuous mode [ 178.423882][ T9491] hsr_slave_1: entered promiscuous mode [ 178.429929][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 178.448932][ T9491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.456688][ T9491] Cannot create hsr debugfs directory [ 178.538751][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 178.623063][ T9472] hsr_slave_0: entered promiscuous mode [ 178.649533][ T9472] hsr_slave_1: entered promiscuous mode [ 178.656236][ T9472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.685111][ T9472] Cannot create hsr debugfs directory [ 178.750517][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1007'. [ 178.808698][ T52] bridge_slave_1: left allmulticast mode [ 178.816559][ T52] bridge_slave_1: left promiscuous mode [ 178.822749][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.833318][ T52] bridge_slave_0: left allmulticast mode [ 178.839670][ T52] bridge_slave_0: left promiscuous mode [ 178.845633][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.857501][ T9643] sctp: [Deprecated]: syz.1.1009 (pid 9643) Use of int in maxseg socket option. [ 178.857501][ T9643] Use struct sctp_assoc_value instead [ 178.875737][ T9644] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 178.930026][ T9645] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 179.362643][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.394446][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.416945][ T52] bond0 (unregistering): Released all slaves [ 179.633449][ T9664] pim6reg: entered allmulticast mode [ 179.639080][ T5836] Bluetooth: hci1: command tx timeout [ 179.676488][ T9664] pim6reg: left allmulticast mode [ 179.875108][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 179.988082][ T9673] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 180.010331][ T9673] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 180.029836][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 180.096716][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 180.106202][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 180.140098][ T2985] batadv1: left promiscuous mode [ 180.267720][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 180.301804][ T9688] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 180.314894][ T9686] gre1: entered promiscuous mode [ 180.331834][ T9686] gre1: entered allmulticast mode [ 180.362678][ T5836] Bluetooth: hci3: command tx timeout [ 180.376846][ T52] hsr_slave_0: left promiscuous mode [ 180.382961][ T52] hsr_slave_1: left promiscuous mode [ 180.389357][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.396835][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.406513][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.414144][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.461648][ T52] veth1_macvtap: left promiscuous mode [ 180.467200][ T52] veth0_macvtap: left promiscuous mode [ 180.480210][ T52] veth1_vlan: left promiscuous mode [ 180.491554][ T52] veth0_vlan: left promiscuous mode [ 180.532094][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 180.962613][ T52] team0 (unregistering): Port device team_slave_1 removed [ 181.013286][ T52] team0 (unregistering): Port device team_slave_0 removed [ 181.726434][ T5836] Bluetooth: hci1: command tx timeout [ 181.795524][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 181.893859][ T9491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.928110][ T9491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.970686][ T9491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.077615][ T9491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.147655][ T9472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.202309][ T9472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.219303][ T9472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.242664][ T9472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.411733][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.438980][ T5836] Bluetooth: hci3: command tx timeout [ 182.502072][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.544274][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.545480][ T9752] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.574041][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.581202][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.634184][ T9472] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.670135][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.677268][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.719916][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.748129][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.755335][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.788185][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.795372][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.041168][ T9769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.272064][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.307082][ T9472] veth0_vlan: entered promiscuous mode [ 183.319941][ T9472] veth1_vlan: entered promiscuous mode [ 183.413621][ T9472] veth0_macvtap: entered promiscuous mode [ 183.455279][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 183.456022][ T9472] veth1_macvtap: entered promiscuous mode [ 183.547369][ T9790] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 183.572904][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.582777][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.599034][ T9790] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 183.608239][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.618330][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.629184][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.639211][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.648029][ T9790] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1044'. [ 183.649802][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.650969][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.679468][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.690243][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.700356][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.710985][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.722133][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.734441][ T9472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.743335][ T9472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.752432][ T9472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.761618][ T9472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.949246][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.974087][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.012967][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.029804][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.198144][ T9491] veth0_vlan: entered promiscuous mode [ 184.233763][ T9821] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1050'. [ 184.392181][ T9491] veth1_vlan: entered promiscuous mode [ 184.478576][ T9491] veth0_macvtap: entered promiscuous mode [ 184.512095][ T9491] veth1_macvtap: entered promiscuous mode [ 184.544870][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.556263][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.575627][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.602763][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.624884][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.636610][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.650830][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.661795][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.678240][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.697657][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.708458][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.718540][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.729208][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.739364][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.750137][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.761259][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.772792][ T9491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.781717][ T9491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.790511][ T9491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.799394][ T9491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.971086][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.982475][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.041526][ T9845] netlink: 'syz.3.1057': attribute type 3 has an invalid length. [ 185.053485][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.063197][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.154623][ T9848] __nla_validate_parse: 2 callbacks suppressed [ 185.154646][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 185.209517][ T9848] netlink: 'syz.1.1058': attribute type 21 has an invalid length. [ 185.473847][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.103174][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.112964][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.124306][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.140186][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.152430][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.160064][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.344636][ T9874] chnl_net:caif_netlink_parms(): no params data found [ 186.396906][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.404370][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.411892][ T9874] bridge_slave_0: entered allmulticast mode [ 186.419098][ T9874] bridge_slave_0: entered promiscuous mode [ 186.426761][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.434103][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.444670][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 186.447443][ T9874] bridge_slave_1: entered allmulticast mode [ 186.450731][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 186.464912][ T9874] bridge_slave_1: entered promiscuous mode [ 186.493218][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.505142][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.535554][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.620658][ T9884] SET target dimension over the limit! [ 186.726253][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.775818][ T9874] team0: Port device team_slave_0 added [ 186.789852][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 186.802639][ T9874] team0: Port device team_slave_1 added [ 186.816920][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 186.835947][ T9893] C: renamed from lo (while UP) [ 186.857513][ T9893] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.940822][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.958721][ T9899] sctp: [Deprecated]: syz.3.1070 (pid 9899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.958721][ T9899] Use struct sctp_sack_info instead [ 186.978666][ T9899] sctp: [Deprecated]: syz.3.1070 (pid 9899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.978666][ T9899] Use struct sctp_sack_info instead [ 187.010290][ T9899] netlink: 'syz.3.1070': attribute type 21 has an invalid length. [ 187.018471][ T9899] netlink: 'syz.3.1070': attribute type 11 has an invalid length. [ 187.027133][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.037841][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.046395][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.055339][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.070808][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.078260][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.112570][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.123482][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.149844][ T9874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.162561][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.169943][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.196343][ T9874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.215764][ T9903] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.371954][ T9874] hsr_slave_0: entered promiscuous mode [ 187.389471][ T9874] hsr_slave_1: entered promiscuous mode [ 187.403429][ T9874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.417794][ T9874] Cannot create hsr debugfs directory [ 187.700891][ T52] bridge_slave_1: left allmulticast mode [ 187.707076][ T52] bridge_slave_1: left promiscuous mode [ 187.728859][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.741983][ T52] bridge_slave_0: left allmulticast mode [ 187.748081][ T52] bridge_slave_0: left promiscuous mode [ 187.754033][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.184527][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.199099][ T5836] Bluetooth: hci1: command tx timeout [ 188.207163][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.218944][ T52] bond0 (unregistering): Released all slaves [ 188.944286][ T52] hsr_slave_0: left promiscuous mode [ 188.978979][ T52] hsr_slave_1: left promiscuous mode [ 188.985139][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.999380][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.026530][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.034823][ T9964] Unknown options in mask 1f4 [ 189.045060][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.125583][ T9952] Unsupported Adiantum instantiation: (cbc(aes),tea,poly1305) [ 189.129985][ T52] veth1_macvtap: left promiscuous mode [ 189.151398][ T52] veth0_macvtap: left promiscuous mode [ 189.171922][ T5836] Bluetooth: hci3: command tx timeout [ 189.179502][ T52] veth1_vlan: left promiscuous mode [ 189.185080][ T52] veth0_vlan: left promiscuous mode [ 189.223611][ T9972] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.714781][ T52] team0 (unregistering): Port device team_slave_1 removed [ 189.734265][ T9975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1090'. [ 189.780107][ T52] team0 (unregistering): Port device team_slave_0 removed [ 190.246975][ T9953] ------------[ cut here ]------------ [ 190.252988][ T9953] refcount_t: decrement hit 0; leaking memory. [ 190.269576][ T9953] WARNING: CPU: 0 PID: 9953 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 190.279308][ T9953] Modules linked in: [ 190.279610][ T5836] Bluetooth: hci1: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 190.283241][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.1.1085 Not tainted 6.13.0-rc2-syzkaller-00183-gce1219c3f76b #0 [ 190.299408][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 190.309961][ T9953] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 190.316085][ T9953] Code: b2 00 00 00 e8 87 43 dd fc 5b 5d c3 cc cc cc cc e8 7b 43 dd fc c6 05 1d 84 41 0b 01 90 48 c7 c7 40 53 5f 8c e8 d7 ec 9d fc 90 <0f> 0b 90 90 eb d9 e8 5b 43 dd fc c6 05 fa 83 41 0b 01 90 48 c7 c7 [ 190.335864][ T9953] RSP: 0018:ffffc900034f78e8 EFLAGS: 00010246 [ 190.342136][ T9953] RAX: 4f28b0a21f714200 RBX: ffff888056f3c64c RCX: 0000000000080000 [ 190.350276][ T9953] RDX: ffffc9000de03000 RSI: 000000000000426b RDI: 000000000000426c [ 190.358302][ T9953] RBP: 0000000000000004 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 190.366563][ T9953] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888056f3c608 [ 190.374950][ T9953] R13: 0000000000000000 R14: ffff888056f3c64c R15: dffffc0000000000 [ 190.383179][ T9953] FS: 00007f08ca10c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 190.392308][ T9953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.398979][ T9953] CR2: 000000110c3772a7 CR3: 0000000070a5e000 CR4: 00000000003526f0 [ 190.406998][ T9953] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.415122][ T9953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.423194][ T9953] Call Trace: [ 190.426501][ T9953] [ 190.429510][ T9953] ? __warn+0x165/0x4d0 [ 190.433708][ T9953] ? refcount_warn_saturate+0xfa/0x1d0 [ 190.439333][ T9953] ? report_bug+0x2b3/0x500 [ 190.443876][ T9953] ? refcount_warn_saturate+0xfa/0x1d0 [ 190.449441][ T9953] ? handle_bug+0x60/0x90 [ 190.453819][ T9953] ? exc_invalid_op+0x1a/0x50 [ 190.458536][ T9953] ? asm_exc_invalid_op+0x1a/0x20 [ 190.463676][ T9953] ? __warn_printk+0x292/0x360 [ 190.468479][ T9953] ? refcount_warn_saturate+0xfa/0x1d0 [ 190.474264][ T9953] ? refcount_warn_saturate+0xf9/0x1d0 [ 190.479964][ T9953] ref_tracker_free+0x6af/0x7e0 [ 190.484853][ T9953] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 190.490848][ T9953] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.496269][ T9953] ? ax25_destroy_socket+0x551/0x5c0 [ 190.501724][ T9953] ax25_release+0x368/0x950 [ 190.506270][ T9953] sock_close+0xbc/0x240 [ 190.510622][ T9953] ? __pfx_sock_close+0x10/0x10 [ 190.515530][ T9953] __fput+0x23c/0xa50 [ 190.519748][ T9953] task_work_run+0x24f/0x310 [ 190.524398][ T9953] ? __pfx_task_work_run+0x10/0x10 [ 190.529679][ T9953] get_signal+0x15f7/0x1750 [ 190.534247][ T9953] ? __pfx_get_signal+0x10/0x10 [ 190.539171][ T9953] ? kick_process+0xef/0x160 [ 190.543805][ T9953] arch_do_signal_or_restart+0x96/0x860 [ 190.549486][ T9953] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 190.555679][ T9953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.561783][ T9953] ? syscall_exit_to_user_mode+0xa3/0x340 [ 190.567553][ T9953] syscall_exit_to_user_mode+0xce/0x340 [ 190.573405][ T9953] do_syscall_64+0x100/0x230 [ 190.578044][ T9953] ? clear_bhb_loop+0x35/0x90 [ 190.582983][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.588959][ T9953] RIP: 0033:0x7f08c9385d29 [ 190.593426][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.613342][ T9953] RSP: 002b:00007f08ca10c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.621980][ T9953] RAX: 0000000000000000 RBX: 00007f08c9576080 RCX: 00007f08c9385d29 [ 190.630041][ T9953] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 190.638060][ T9953] RBP: 00007f08c9401aa8 R08: 0000000000000010 R09: 0000000000000000 [ 190.646110][ T9953] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 190.654128][ T9953] R13: 0000000000000000 R14: 00007f08c9576080 R15: 00007ffea9db5b38 [ 190.662186][ T9953] [ 190.665246][ T9953] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.672526][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.1.1085 Not tainted 6.13.0-rc2-syzkaller-00183-gce1219c3f76b #0 [ 190.683206][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 190.693284][ T9953] Call Trace: [ 190.696566][ T9953] [ 190.699500][ T9953] dump_stack_lvl+0x241/0x360 [ 190.704211][ T9953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.709414][ T9953] ? __pfx__printk+0x10/0x10 [ 190.714003][ T9953] ? _printk+0xd5/0x120 [ 190.718167][ T9953] ? __init_begin+0x41000/0x41000 [ 190.723195][ T9953] ? vscnprintf+0x5d/0x90 [ 190.727530][ T9953] panic+0x349/0x880 [ 190.731429][ T9953] ? __warn+0x174/0x4d0 [ 190.735601][ T9953] ? __pfx_panic+0x10/0x10 [ 190.740036][ T9953] __warn+0x344/0x4d0 [ 190.744016][ T9953] ? refcount_warn_saturate+0xfa/0x1d0 [ 190.749482][ T9953] report_bug+0x2b3/0x500 [ 190.753814][ T9953] ? refcount_warn_saturate+0xfa/0x1d0 [ 190.759288][ T9953] handle_bug+0x60/0x90 [ 190.763459][ T9953] exc_invalid_op+0x1a/0x50 [ 190.767969][ T9953] asm_exc_invalid_op+0x1a/0x20 [ 190.772826][ T9953] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 190.778902][ T9953] Code: b2 00 00 00 e8 87 43 dd fc 5b 5d c3 cc cc cc cc e8 7b 43 dd fc c6 05 1d 84 41 0b 01 90 48 c7 c7 40 53 5f 8c e8 d7 ec 9d fc 90 <0f> 0b 90 90 eb d9 e8 5b 43 dd fc c6 05 fa 83 41 0b 01 90 48 c7 c7 [ 190.798521][ T9953] RSP: 0018:ffffc900034f78e8 EFLAGS: 00010246 [ 190.804599][ T9953] RAX: 4f28b0a21f714200 RBX: ffff888056f3c64c RCX: 0000000000080000 [ 190.812583][ T9953] RDX: ffffc9000de03000 RSI: 000000000000426b RDI: 000000000000426c [ 190.820556][ T9953] RBP: 0000000000000004 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 190.828535][ T9953] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888056f3c608 [ 190.836507][ T9953] R13: 0000000000000000 R14: ffff888056f3c64c R15: dffffc0000000000 [ 190.844492][ T9953] ? __warn_printk+0x292/0x360 [ 190.849273][ T9953] ? refcount_warn_saturate+0xf9/0x1d0 [ 190.854735][ T9953] ref_tracker_free+0x6af/0x7e0 [ 190.859606][ T9953] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 190.865511][ T9953] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.870898][ T9953] ? ax25_destroy_socket+0x551/0x5c0 [ 190.876196][ T9953] ax25_release+0x368/0x950 [ 190.880734][ T9953] sock_close+0xbc/0x240 [ 190.884980][ T9953] ? __pfx_sock_close+0x10/0x10 [ 190.889838][ T9953] __fput+0x23c/0xa50 [ 190.893837][ T9953] task_work_run+0x24f/0x310 [ 190.898526][ T9953] ? __pfx_task_work_run+0x10/0x10 [ 190.903652][ T9953] get_signal+0x15f7/0x1750 [ 190.908181][ T9953] ? __pfx_get_signal+0x10/0x10 [ 190.913041][ T9953] ? kick_process+0xef/0x160 [ 190.917634][ T9953] arch_do_signal_or_restart+0x96/0x860 [ 190.923203][ T9953] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 190.929371][ T9953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.935364][ T9953] ? syscall_exit_to_user_mode+0xa3/0x340 [ 190.941091][ T9953] syscall_exit_to_user_mode+0xce/0x340 [ 190.946649][ T9953] do_syscall_64+0x100/0x230 [ 190.951273][ T9953] ? clear_bhb_loop+0x35/0x90 [ 190.956002][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.961950][ T9953] RIP: 0033:0x7f08c9385d29 [ 190.966376][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.985990][ T9953] RSP: 002b:00007f08ca10c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.994411][ T9953] RAX: 0000000000000000 RBX: 00007f08c9576080 RCX: 00007f08c9385d29 [ 191.002480][ T9953] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 191.010453][ T9953] RBP: 00007f08c9401aa8 R08: 0000000000000010 R09: 0000000000000000 [ 191.018421][ T9953] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 191.026395][ T9953] R13: 0000000000000000 R14: 00007f08c9576080 R15: 00007ffea9db5b38 [ 191.034380][ T9953] [ 191.037656][ T9953] Kernel Offset: disabled [ 191.042027][ T9953] Rebooting in 86400 seconds..