last executing test programs: 1m29.626086267s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1m28.67637815s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 1m17.321245688s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1m16.782008788s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 1m5.482768317s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1m4.483469856s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 53.697764239s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 52.897925592s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 40.967656666s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 39.207062459s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 35.540755031s ago: executing program 1 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100)=0x218618, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6080}, 0x4000010) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1402, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) sendto(r0, &(0x7f0000000380)="ea74e9799a98b9b5247d6628e7f5aa3358cace794bcbc741337531ac10917186aae6e1be7523a74735528a8676795393683b1536e92681c598d4be9e0ceb4921613be6b68444bd03d1edb9e96947e76ef951c8579c4d9875c08aa080988ae354edd8c9210d13c12d2c3a341c34b99c12ae7fb5ac322480f1505c678edc8e6adc122b549f4559ea9cc971c7fb3a853d25a455431e0e88a1869be82e532c75181c28e9128247ee591cecda43dc700d69c25a", 0xb1, 0x40000, &(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @rose}, [@null, @null, @netrom, @netrom, @remote, @bcast, @netrom, @rose]}, &(0x7f0000000540)=0x48) r2 = accept$ax25(r1, &(0x7f0000000580)={{0x3, @bcast}, [@remote, @null, @remote, @default, @default, @default, @remote, @null]}, &(0x7f0000000600)=0x48) sendto(r2, &(0x7f0000000640)="5a8057a68a3951c640333f07ac410713ba3c4f77a353a8ca4fef6be2c7dbcf1929ed2aff10829c8c4981009885a43aa0fcf04f0ada00a559648de12dc33a38d705833e2a691e76c6f236e97ceb00fe211aff579e8593f47751bf1238ebfa177413b80f9931d0ac52d5554604bf4f9329992104f24f8d1592b9f9212e44536960c89605696f6c3afb916c1f8c036c6501a1f1323e691effb2dff9425454e1ae76cadfc352dec606f50700c545377d375d48345173aeac4fd6e2f08039512c3f73706791da35dfbf385b454ed04b6b48f855faff28741d", 0xd6, 0x20000000, &(0x7f0000000740)=@vsock={0x28, 0x0, 0x4e20, @host}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", ""]}, 0x14}}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000900)={r1, 0x4, 0x0, 0x36a0000000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000008c0)='afs_make_fs_calli\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5f, 0xa8, @random="9e3e2d0a47e6db8d80c8e922ea455ef5042b220868f9c7683ba61c394bc3635483dd7e469f80ea54b31e019f457009627eaee3c9838f7f032eb907d87298f159e2379c6e9cc6c52160fba00b8d513f97c8993b189c2a9d54d36cbe"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4885}, 0x11) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000b00)={0x8f}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000b40)=0xc0000, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x7fff, 0x1, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, {[@generic={0x82, 0x6, "e7befea8"}, @end]}}}}}) sendmmsg$inet(r4, &(0x7f0000001300)=[{{&(0x7f0000000b80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="9237b38e6debc181923c4cd832b5b00b8da09c7300619632cb9515f8e734d5084a59cfc5b60bcbd7deb946d2d49d506ada0ac5abefc63ee5df6195254109fa9c4b433bea327819ec3951c4a3318fd6c474c4bdb5f4fd7dcf587981c60a3dea9dfd7a9720995a270bff5335bd914c03d2fd855489d11cf4c6ef1402b22b396774fcb20cc475827db0ad47822367a1099e5ac84f71980008e65225cc61a1ac", 0x9e}, {&(0x7f0000000c80)="00e798eef7966cf1a9b41b34001fa512b32408852995cc42d5c836678562efc7fa80284e50c334d0eb3a095f4524b24d8ca75f834ce73d7afb1c2043acecca884c86768dce639659ca740f6b21e50d2392391bcefbc194702add15cf5631908e8629b6342ed8913657e08b9577d891f629ca143e2bb760f7b4698da5f045", 0x7e}, {&(0x7f0000000d00)="305cb0274453184655cd9a5c1cea54b077638d1f184f980a6865c51a0b4e9181452f6c9015cc67a5b6131dbd1f", 0x2d}], 0x3, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @multicast1}}}], 0x20}}, {{&(0x7f0000000e40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000e80)="6389f2137cf7367d94842916fb4a12099d769b28ae95ec849321879e13b86bb76ac689aa4f4de1ba6c25225cb0d5f85edf6e351a426daa7d6467ff9688e8c4719f0042b547b5ea30599775bbb62dd56611cfffc07f70511d1fa6169f90186b94b0f6595965e4674f5407ed8ea2ff7a4a74c72bc3686faa5ce7e40f462f4bc35f5bf6f69f6ba65bb1f224c94c0ebebe898e8d40e0d483f0038dc409fe3faf188cfbb841352e34cd5bf9eadf1d5ec8de34d3bcd5e247703b0208dab8d898859a42334d00f719b5", 0xc6}, {&(0x7f0000000f80)="e92abe99696dc85cfebbd19c4db36029fa4eea", 0x13}, {&(0x7f0000000fc0)="330fe8e1192c358508ef21cabc4a28f3be52de55573a6aca61f87d7803879ccc04fe821302a1e24c8b777a3a53cc2a8e7d0de5ac5ab585969145e3f6c1160431642e6ad73dd52d1a6a847bba7696", 0x4e}, {&(0x7f0000001040)="601ee1bdab6ef3f36d912da78645a23b34a7a49d9fa45d7278e4904ee74c1c945dd909a1fb6b6738bc01f6f9089e6a4f622ef0436c6c3bd969a51da36ef3aec45f2505c57a4af28ae18e23bb896493ea7551ddfb1a9aff39e2109b4374", 0x5d}, {&(0x7f00000010c0)="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", 0xfa}], 0x5, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x0, [{0x5, 0x3, "9a"}, {0x0, 0x12, "c08c3e6bff8a0aa8afa6b2939539702b"}]}, @timestamp={0x44, 0x1c, 0xd2, 0x0, 0x2, [0x401, 0x4, 0x2, 0x8, 0x3ff, 0x4]}, @noop, @rr={0x7, 0x17, 0x9, [@multicast2, @remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0x9, [{@local, 0x40}]}, @generic={0x82, 0xb, "2595e68f25a9806057"}]}}}], 0xa0}}], 0x2, 0x1090) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001380)={0x0, 0x7, 0x0, 0x9}, &(0x7f00000013c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001440)={r7, 0x3c, &(0x7f0000001400)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000001480)=0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x72}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, &(0x7f0000001600)=""/224, &(0x7f0000001700)=0xe0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001740)={"9d84cace58edf244f602ed691e63e81f", 0x0, 0x0, {0x7c8, 0x145f}, {0x52b, 0xf2}, 0x800, [0xfffffffffffffffc, 0x4, 0x6, 0xb11, 0x1, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x2, 0x2, 0x6, 0x5, 0xb, 0x6, 0x400, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000001840)={"a035c42d490ae938a7275626bad45a33", r11, 0x0, {0x4, 0x7}, {0x641f, 0x7}, 0xe, [0x6, 0x4, 0x6, 0x2, 0xffff, 0x2, 0x1, 0x0, 0xffffffffffff16b3, 0x93, 0x9, 0x5be, 0x4a2, 0x8, 0x7, 0x24e88000000000]}) accept$ax25(0xffffffffffffffff, &(0x7f0000001980)={{0x3, @null}, [@bcast, @remote, @netrom, @rose, @bcast, @default, @netrom, @null]}, &(0x7f0000001a00)=0x48) 34.806305085s ago: executing program 3 (id=1745): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb704000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb704000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket(0x11, 0x3, 0xfa65) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301010100000000000000000a0000001400198008"], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="4a003300800000000802110000010802110000005050d050505000000000000000000000ffff52e50008"], 0x68}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="4a003300800000000802110000010802110000005050d050505000000000000000000000ffff52e50008"], 0x68}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000fedbdf256d00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900010001070600070006bf00700000a0000000cbec80273128f8331829cbce06a523dd882452795001367a99a8339ca1f5d58d14d984b1d36ca5470736ae"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000fedbdf256d00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900010001070600070006bf00700000a0000000cbec80273128f8331829cbce06a523dd882452795001367a99a8339ca1f5d58d14d984b1d36ca5470736ae"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x6}}}]}, 0x38}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000400)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)="80e58fb3e4426a0bd89b7e7e38c3019340ad9d25765517e7dcbaf9070a8e89367aee9d855f83cb7cf3aa26d575202871b33c0e09e6813d5c23c07e3b3b869b19c57775124c8999c4e47bedeea95570f1b65fce6f793fc456d3e57d83295c247ac48bda3fdbf84db213c7b0f3f0d387f0381550aa0d804a82f3", 0x79}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1150}, 0x801) 34.770713273s ago: executing program 1 (id=1746): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={r8}, &(0x7f0000000300)=0x10) (async) socket$inet(0x2, 0x2, 0x2) (async) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip_vti0\x00'}}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="8c5b3ee10a1ffaf6daa6f42e13f18a67", 0x10) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="14010000230001000000000000000000010100800c0001000000000000000000140000002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04afde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1676323579371263da000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337813f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) 34.635924845s ago: executing program 2 (id=1747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfec6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r1, r2, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x0, 0xc}, {0x2, 0x2, 0x4, 0xa}, {0x2, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x8, 0x3}, {0x2, 0x2, 0x1, 0x1}, {0x1, 0x1, 0x10, 0x1}, {0x3, 0x2, 0xf, 0x7}, {0x2, 0x5, 0x10, 0x2}, {0x2, 0x2, 0xf, 0x2}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8001005) socket(0x11, 0x800000003, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2}}, @prinfo={0x18}], 0x48}], 0x1, 0x40) clock_gettime(0x2, &(0x7f0000000940)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 34.528359718s ago: executing program 3 (id=1748): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000040)=0x4, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) recvmsg$kcm(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000540)=""/161, 0xa1}], 0x2}, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delchain={0x19c, 0x65, 0x0, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0x16c, 0x2, [@TCA_RSVP_ACT={0x168, 0x6, [@m_simple={0x5c, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "5ac89f893aee85dc64014ba769f3890558cc33682542a04930183cbe6eace04b1422550ceec8fcac5f"}, {0xc}, {0xc}}}, @m_mpls={0x98, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PARMS={0x1c}]}, {0x31, 0x6, "4bdf6d8f73c44b11c79a0e9ddb548338b97b9773388517cdcb313fa731ce118e857ae16105bbd884d5d6bb3e34"}, {0xc}, {0xc}}}, @m_mirred={0x70, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x19c}}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'rose0\x00', 0x100}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000540), 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r10, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000240)="251f3e7b8c3cc0acd45e8a4f6a24e95b67f547b67e8be04f9b50a0ce5ad694ff55c69d037f0c6fe44a2cc40efbecd788716553cb2674bfc939526b276d22e95f478e8983af818e3999d4f37306417047e3796f898f49e7d58bffdbe388800f928d30016647f416dac2c0972e394f3edcb4048688927e9599e24ddde986deb9b122b5384c89353595b5157c1937793059e1867bb5f904b7a2419c", 0x9a}, {&(0x7f0000000300)="9ef116352e67de015a3138c79401c542eeb0d5eaa33b5b9a22556efe31d6d71d23542ba295e31f1d9c7aee2c54bd49ca9845b2a241b8afe939f3", 0x3a}, {&(0x7f0000000380)="1d14c88619da46280132b8b5e39a10c6380e091ffe13d8dd30381c35bb70ec6abd7b8c9630e73d9eae5a80adeeabe27b9980428ab927f47de975f34d14207b0024fddf3778558892fb215444d6a789845d12c751f066e0bca05aee84c7cf93eabf6e312bf2ea6313f8af22fe356ebb64b05714a5b74dec2f4544d894c828dde79fef736a4bb9", 0x86}, {&(0x7f0000000440)="978035a64386584b9e9036f1ddf3031e4887bff6af09e223cf6ef1fb91b0feee8ca4c287bd881a8c0876a15a3b2d55dd61975bdcc346de3d3660b4c253162b3256a633a657c91dfbdf8824cec7307c7c0a6ed077e028", 0x56}], 0x5}}, {{&(0x7f0000000540)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="c811adaed591ebb1a0a28f13e4d57e088ccb30b466f9fca0ff4a3a94159f335db5401198d5f0874f0a633d75e31ab0283a6a0aeacbdd23d7916fc0f606d2ddcec578f1d14a7dd436d2a6faaa3a40d4996ef3e66b35092d95a9dad0ff0ba065f42afcaff52a59f808b8d046bf8abdf76823f28a8122d65f3c779f76", 0x7b}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @private=0xa010102}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="618b1840dc6c2baad18199419c8767360a145cc6b2ae6ff7d522618541932727a575243647a491069d55f6a440dbcd", 0x2f}], 0x1, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @rand_addr=0x64010102}}}], 0x98}}, {{&(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000880)="9df47eb3b361c9a5fa348d8f420d67d9ee1948196a341d09e5682d9752de277aff3399cd4274f98d214c37c707bc7d71413fcf145378bc3c2f4cd87bb30d7acdcb5b195b40dcff9b500e", 0x4a}, {&(0x7f0000000900)="77ccb5c51747b42e01ed2c3cb1047bbbd0d6618aba38ffb85e7a4711787c43343e30b902fe746d57082e5b0194a121ea3819a7d893964191935734d50f6e1133fbed4ee568d93e3b4ddd392572ec4540345a55a09d1f95babc9dab6415428db24e45a9904b1af9090ec6f039eef7658b160344ebf4221cc5372b9b3c224aae2fdd80efb3ec1336d24825c14b559fe2acedd10ffab220ab4f725d3829c5aec48a23e6221d35f746d190", 0xa9}, {&(0x7f00000009c0)="90ba5275ab5e17796a83f433b31cc38f80a44cc94daaedd641b605713c7b55ae70d6e8cb6f63443b867525ddb0125b40461cefea680a59d0a6673f240b91f46caa7005", 0x43}], 0x3, &(0x7f0000000a80)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x49, [@remote, @private=0xa010102, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @multicast2, @multicast2, @broadcast]}, @lsrr={0x83, 0x17, 0x47, [@loopback, @loopback, @broadcast, @private=0xa010102, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xc8}}, {{&(0x7f0000000b80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="19dae90f2b55ac3e8489e4b94ca18f6f3a956a1f8b691b0911622c0051725bc556a102b67aa57116c8093c91ae731d6f08fccf68681b037d7d9872ed5522d66edfbf18187be07c4b6148d6da93423e2274773892def740977c8864b7b246b8b5f099193c65b5ce6027350f810de24bc61fbac0517502d7a543c682", 0x7b}, {&(0x7f0000000c40)="d9d0d78b95263cd01eac0a9c75ea649fb8171895b6eebf1c703471717ab09178cd42286188681bbe7a34b981953c6ee98f61a97b75c0bfd04b9d29faa0aee8e1d8b6e2eeb823087511c357f9dbc4", 0x4e}, {&(0x7f0000000cc0)="39fcdf42351a448f6d9cdf55fbbf", 0xe}, {&(0x7f0000000d00)="6fc010b0e3adfefa6c9e52cfa1861e4724d272497235b73aa6500ff25c57fac035ba14bc67ff40d4d7afc5d77c74a9d637e9b14a9ae58dabf6e2042ccac51ed2a479c624228ade886119918802e5137daf8fbbaa8e0d3bb2a85b607167bde12fa203e91e4ed1f542b9ca75ac13c70e1bae14196eb8190011061ee5813fa985cbd4c3bce223291139a18b4e55f1a03d1e40069c5e2759d7eb255e61abbe302dfaf6fd3baf0561150e778bec437b", 0xad}], 0x4, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @rand_addr=0x64010101}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x62, 0x2, [{0x0, 0x2}, {0x5, 0x4, "8641"}, {0x5, 0x11, "8ddc2af62662970187510e6576f55c"}, {0x5, 0xa, "5f8fea37a1080c36"}, {0x1d6df1f8f34445c7, 0x9, "e99c05c0accf91"}, {0x2, 0x3, '='}, {0x6, 0x12, "efe8fa890dca92eebe9bf44f165bab50"}, {0x6, 0x11, "da117fd46f8512ec0591937de2b71f"}, {0x5, 0xc, "3b3ff9086481900cb12e"}]}]}}}], 0x98}}, {{&(0x7f0000000ec0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f00)="d7752b3696486d73afc2ff67a877874a2477a9a5d1176e79a31a640a39516e4328f6982344c46457849bebd73223ce18c0613fe2484c3e33239ccd8c9fc74d6694c043bd17039970a0f462f00f1edc9f35f7c566a4ca09", 0x57}, {&(0x7f0000000f80)="ea7942665181cd7b95dcd9869d3b5212d2578df0524cc1f4dace5ad14b8c913e6ab8ae62acd722b8d10f2555b1e669a577efab3c17b5ad96ea489b646ea6ca179096334336288f4c17788ecd7d3cf5d316f371d5bd0fbb93da53a8b875f51d400c5802c135ac717dc50f15c8a7c877c7852468729d2c3c69335bb31f61f9d54bb15e259e1439d9c8caa3dde597d544ff6c572f69c6581c8933271f06d0a8dcd85d5f4168235e", 0xa6}, {&(0x7f0000001040)="93fee2500210a271c32d50ec177baae775a9cc00a71affd1f1c4ff71477fdf8b650dd057425153df3b87aefb447a12a7e3be2a51104e679f17a2f841a0bc39286304d22ac7943c2d558e85daca16237ced4b253e4b18fc54d357cd000b4238e0e4b475bf4b985e1c968d09756d30e1940495f286af", 0x75}], 0x3, &(0x7f0000001100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @private=0xa010102}}}], 0x38}}, {{&(0x7f0000001140)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="dc6912abaad29a4dfd7a7d1e5604d4114731f1a554a9bc997dbe483872cdc4079b223bb1f60fb35e9dcc2cfa1e3d284c24f45563443d64f29b0a1630e564dff057007956339095f2b4a6b2073bc1a6bb7e57d5ba2b1ac7026ccfcf764c0ca35c280cc47c8173d02de0b39f3a8449a7c7abb2409c45db80c091a096f2f99cfad1f8e3dad5179e368b057850b9ca3d8e2e47f64c59ffb3fbeb1fbc5dd4e4d0c2f2a6cda5366c166923f96a4a18b2e8", 0xae}], 0x1, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x7, 0x40010) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r9, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r9, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.45160824s ago: executing program 1 (id=1749): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000011140100000000000000000008004bb9ff000000"], 0x18}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000005c0)={0x0, 0x2710}, 0x10) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) connect$inet(r7, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) close(r5) write$cgroup_int(r3, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000300)={0x6, 0xc6, "bf497732b6b7938eaa810e8d8f2d383176c0b70da2156ed815a9820d84bebcea23a909617d5584ef4bd9bcb43ea37875e35625ee9719ae51b59e3dde8246c0b3068aa8c79bd4b8ae34d5d04537f702a457090dbd44259834eea1b9f27bea0fd805e9d7d2f398a26c46fa225da047348cc99c8efafe4d3134605cd9fe69d2d4eb1ba74fef7537ddbc8d840b6b15ac3d5d0d6648b81e6218c25acb77768b67f832398852f15eb6bb910ca84dbb050fb4135cbfae7870ba3e638864e313dbc7788cb53d4cd819b4"}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 34.295762871s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="85c0d3e2c3e32194e8d0d5fe2bc30a826197101a1641f4f06e914f865c198c2d8fbf0075e06e49c07698d19c425a0236329a8ce30ef6b56f0abbba141a0a47a7d51cd317b0a0fc19a65248468c0ff08ae6ec34e6d296b9db604ff234c4e482d5872881d20d9baddb68036cc81ddf8ffb6e84f427767976c7d0631616c1c1b666dd593e9bc2d175f3a4e9fc00a13b9dee691f97b7d21185a9bc5c1e28537a28764a19b2fd173700bfaa5350d779d87b526da596abd3"}, {&(0x7f00000009c0)="40cb410555ef2dcac50d55fda08eb58136ce1e6d500f7ab59b34e3c731a1364d96831cffeea5a86ba531e4e1063572a310a900d5a2fe8c638815429047cd8658138d5fb23ebf4732d3074bd60dc16f4b79961b9b418666b8f7eb6b8e9fb9a13d0cb513dea8fa6b27da6502e281c2bcbfcca9e515ac64422a1fc8c2f567a018e0ab3c9bee646c5a27a88ca8eafb14cad85e734a30d6bb5a09149bb02387d8a577bfcaf9839f09b5428d21f151d87ea508a193fc1fe406eaaf58875be09a9ab834d29a7af6f07eac7d49d9e5651f0e43509372b06023c4f91e8dd6fb91e0c396776a9ecc1e7524367fabe239371951287b54162514d62f1ab7873cb36e67f7998a2da261669fa60279e404032f3e5a9ac39af915170a8c81bfe5358250af7e3e91645adc1fb69cd818f91171bc5b0a89028ce6042660c5409b933f32c98fc80be8a9f2493ea1f851953aeeb8842e147ec34a2351a258b53f8baa5721ab36980d4005fad77cb285b977f7238c92b711907a748a1d280dce120023db24ae1e5a4b213f6626a9959a08467bdc42fd3ab66ab27524da6029e3a39122caf0f75fdfba1e19d853bd697b70e0c9e87d7407a96c8e4894c82446a98c16d99d3b0893cd6e149af11958387134796f58fd3b4fe35b2ecca336bd50f2b5de17d5bdf45cd47d4d0c4e86cb6b6a6cce3a60edac31dddc3ccab2e4592e66ae1c6bdfc90cced32c88cb474ae9f95904a1e0080fc00914d2018e9a6a7e452fa271fdd82c79a8b5226a26b10fd6d8c1f35e1924d145212571e27b605a7e5b548b423890c943cde0b4465fab0f57a1893b8ab4463d4a018f88b63cfacac3171c4bbe3ad1998b6eba31be8f8b28a691858005990055c23aeb1a440e2468288b2c3b55acdaeabd34ed5e27fd908a0bcdb639b83107bc2be490fe5ccb403bc8a822fd915bbd6d8acac10f7d3fd5d7191f701677996da1fdb9cf2a33b534739443cf3368cc35761c2da8e779435b72701fb2d1667bdc80bdcb508c3bbd7f07c6bc7a9b5342314d65dc67c4066b68929a29ab1a5d6bc0c0b90826acdcc1577e5d86c5748069eb847584d7559b06c3358362e4a83b3e5d31a18a74dbce1cc7662fefe3095c283be8a95bc149a49c09905afdf1aceb4ae23e4b88ec06b6dcd712339bd1df803514b5b208b79ddb81477fd0a291d3362571c8e395f55c095c84bfe687bb40c2c767b4a4419a1ab6589e606a6a19952fc33e00d7e6087dccb7a4a333331245653b1c500441787d7e9eeb441ec5644535671d9645c8bdf0eb0e01b7ebd00e51cdf864d14bf3f079a74f147edcc1fab7387f13429c9e488559a191772fcf5ffcc1cebb18d896c610302e8db0251afd472b8b58c72d2ebe225b046183803e32b2f441a08b9e181672cba1e3299c60c5c01730852f881b471a3a2b45c8bb7ecd3c3c285bb72098c345c5b41415e7d8f7a63e69e6608b1ef1659d30cee87c2deefa82d97a65c56ef98876bf35209ea0235d78b42677378db6f01648d2c7e14cb2d0c4c008d79b1f053a120463a27d9e07a01ae122c0e78fe5f4678e65a0ae3651ae3f16ee7d97b6c17d2750a66eb83f8b5c20cad728beb9149ca850c21da5990c8a9208efb7a98d0873a47dc77a7cf527715e890d617229b25bf9dff9699f7250a77ec5316163267d044f961d5958740b99061435afd3db7ca6b6a119d895f90cb8f209199fb056cf0614e5ca3808b54f6595c1247e52c3b00a1f5496b53c525653f4057616fb1b8ce620eb8e6c513778ebe4fcfecb6f2f16733d0cdcacd2be5d571cd59d0ffa492ac4590f025fe82b9545d6aaca5970efc3f6fafa27a959b70c5f7273df038d34056aa9f8a33e082efe55765e59373015fb3445f5c7fcdd193c779faa018b539f52bc5c7eda6df08c66103b8580c1e0c2cce1fb6a82c1294312880906669745bee581fa2bc4e90292df8ded9d478f080b92909aefb6d55d9c48e8855bb381838003b938b2e11c1a9746f8d575473a3f9593be507b90fb154ed4a8a6733fbf6a2ac68edc405eca0c314687ccef8e14f658838660d45604e013b4ce616ec8d9f16df532fe54028342af8e3c7c300af185b9d49cbeb988fd6c1bfab5a1b11128bfcb412ea90a98b57aa0978bba129cbcdeb90b78f422a37a3d5f8945e348ce4abf60a8bec2518ab96dcc7695d630173aae42cf8466eb86312e4728561492c2a2ef37fff32587aa4dc357ff37ebcb3b0d324c57606e0b7c247d3be0f39717e9f8504787c7d5281f645da2da53a725da89a79bb98ce7a24696ecbec9a339973da159a3079296107f6a9920ea50f1f066f2b6362482b2c9134017f18d616767020cfe01930850cf0f557681f9c19cabd2eb0e3a7119010b79c269cc680ab8dd4de35a45cfa6c3b41e0e991deeef89c934264e4f1e2e1d42e10c005ddf869eba6d25cbb8d6abd607420f436c70d59838968793050a9d83c171a81c4e3a21456ce8b37e8d2d791a863404f3938d593fae13835272263a0ea3743827cb481651eb73ffe35bbd5b0f127cfbef49f8905918f8a1253b065f60dc2a20b27a84699ff0cfc8907e49e36930248fe67dadbd18381015669f421e48bb3de79f1aaaf33c62e13628be32784cfd78cd5cf526c4f095e3592766bbc5d3b2d4f123baf9f6294535d4d3d25f139bea012fc282039f4d03f0ad901c9a028cbeb9d822a6805cc4d0f4f327bba0ce7b55071c6f164603bfc19f3322fa36d9fe17ccec6fb3f9996b9e37268b61f7cd98dc796a4ed0dda490399f2da52627cb1046754751aca5f8f5f06179e533d11959e12be49fe0eacc23e54a75315e49709a8ddda0ab8b54f5304cb91a0796be424f64dd8c3f634610978ca72849124c7df4aa814a52c83c33cd7e6d7dae1900037b6c6d80696e531405df006a5867e21e2f65165d0fa41859fe22f2e90f1a6e05b4625f6cd041b6019aa9e25482651a089df12e90abe1324e6f2960d0e0a8ceeb29e070b88837a56505d81ec0f03437269bef78b52de53a0a0dbee0a2b9d0257d175e6c42bd9a50d027407fe316a256c5ff221b3076ead9173110a6dfe59010bf8a370b7d2f22dd6b27ffdd26407e1c0fd9f77a8557500add1ba8b9ef7baac10c021e7b298f4907a0be4528dec144eedf70df7266281773163bcddaf9d0adb8bddb90b00f673bfd97e95be217b00ab683e26d2242d52c41523426f24977c5669940aae35322a54cf1a00337c85478afc04ec9264659a86dffeee470016d19b80f3113b81b6741b7c6fd01a4bccdcc481e455c796edd48f4f1ce7304cb232f12b925727459c98079b19294a985ef19b8f1c6260a7cbb0a63fc6d825c60e2afde348ed1f62124383a71fc82adb34207e2dc8e9d189884d04ef65079d8011cad8f463817eb67ff25759423066005dec02f8559417e1fbc4203f0c1f60910616086c0f623b202ad24a8f14f42250c7f27af587bc81eab97da161acd093606e572f7690c51c5d67a7e14fa73fe01e156366f95bed70f9ee4884030e6f419fcb121588ac9710e34e82cb7c0192b7b6b166aaf447b9469d3b5e798c167dd4f09d350d931d8e98992591c300013d35a1543ad9e65b00d9652071b3eb88fd82ac32a4b45489dc8337416364cfe398d11152894e4c855a65a0ac70d39acb65e7b8af09ee5a1ff7140184ec81518d719e936296c9fad46021220e51d75aafd4cafb01cae5c0855a4b24adf021bfb8914aaa6732e2cd3df101b49e9606c07f06a005bcc430b5d49fb1d8107d8e453d550e43069feccbfab4f75fb0c177f74b715ef6f204dc6e4e8b9ad4f6173449d99a34b8b767c6823b124b45de3e072171bb01206b44d13d839eb80a6e33d3f1bf3ecc9263a1c9992588507f2bbb58822b954a1bbb17bb486f32b19cd383559677165d7309e07e757ace5a1851fc144e9d0bf0b60fb262a3a7c871299f69353c0c045048f88ef60b329526fe1e263fa4ba9cdc2d6bf05b9a0832c36269b0ebcfdfeb8b6ec07182ab527102e5c8c8a4c88cb1487e2c2e051bf5806b6c146c4a4220898762b94a621c70f22b416448f1a493eca6261fb9006e0572a5634c5320f16ae35150329cc6eabd17bea0bf34d0209dff91618bf2b3d5ee6972b838aa02669099426cd28146151bac36afbcafbcab3c7da1c07607bb7f13120a93e7b85c81108609bdf89d93e8c0af335695ac56fb120f6042d3b55b0f7f5a845d8951e526f9ac963540e972aa1765184057631339095cceee5d4ca63d2aa44ec07173149ab2819597f7be1010dc8724bd5103c251b5d7b76399125c8dd7b5ee74fa9c7b3942bf6cc8b88ab7ea5039a32aa730cad21c9f64ce9027f586d05ee29e95ff75d6d49aaae190c2f9a787793cb1baedc3fa2f118b4670e60a2f32735451689444a65b446809d4d7225cd54c1da6ba9df850c0057a2497c6dd8fab199b40d32758f2e1d99dfa60e99f6b7edee7c5e5003eb9eeed8f83f4f6f140c7304f00141404b3b97f10e3eaca3f3930541a2f391c44dddc7841e166c0eb661c2fadbb8c3e014a1ccb1104674ff29fef444408e5cf030c65eb811b88de5e19430bc3e156b75c0f8c6cb9c775c6729900811f22e39022642d99a25309719f5739d93d38bdd5a8509e079fd57e3a0890e211f3ff91f97a501c118897acd41c6e9c676c1ac4954dabebea906ecb5fa4979022fbbcb301cdfce453efc81d99b84b891834016e7b228a10d921d86069c12b1f20ce0e49ee81a17c1ea656094c1b68da4906104500843b008c948536ff6b74fd9c9bb64d8cd2d1b25bfa67bc377ada154675ad0fefd9f465204e72a39dc20014d207a97702cc038fbe06f9eabc8397ae42414186c0d01e957a5c500577a243c1ca1617d8b8ec816501ed4d01ffe634c99bb03e9b735e755753eb0b3bd8dd5c58377102047de2a536b2f120bd67be080284b7905c16b07defb73bc3a84fc90b3101bc831626d7fa0f2dde35ba29ac50f2733947ccf606b2fd7ff684d45f96aaf36078e9e87a70d4de3fd815dd39b92bb2eca5eba7ee7a9ae615df712530bced0dcfcdf1b71b806fab4c3d6414166f13e22470851ea828b7a97a9930a18033cfa0a1589b7481b43bd6dfc77f150696ebcf6df14f816e89342311b6ae14296ce7e00ef6671407523a12b7f02da7837d433adc019642c8b625911f24b2e27421cb03c8711cedcac1e683c9eedeaa9924925ef760ada8ece9a0ae3a9f97cce4540b10daf3fc3f4abaff2010c0dd460fa6e4c7262b8eac1d6f47c5dd0bb214344ccb80e7326acc83d42e7ad17872c219588875f38844295d70c47ec4bd520a5cc32ce6fa4a9c909ac0af5b6f4b20ba9980803b8001d0a71aea91692001b90ff962dca51ca2726411d3d33b4f616d45bfc5a2da912c0527e9b49dafef443f65cfc9986ff6f59bbabaeae0766731584f8349fff8d1b114b9131b1cdc5513a32a96af7f94f1476425310c56414bcda2b240d77da8ddda16712cd2424376a535b92da7790dc35d8338fbce9555abb963723087f95f4c19bafc61b34e24a326cb8d4c2b1d662698c49800c5aa8970e7324c9abfaad347d9ef981054d2cfa5925f386bb443b32cf5ba8c2a8e65cf449098e3d84d3e5416fb490cc385cb8bb4a5f7dca184947162dc691b7eef2193c034c7f98f0e6201f694424aa678394eb9542c1084297d6a8d9cff56f561007275be980e9de4716f384bd16d60a95629b7cf40a86ced425a5197ea89839c5f93466d13b8f62e2c78654b3de5b2872b37164a9d36231c2dda4ba330730a9eeb50910001a713d7cc2d2"}], 0x4e}, 0x402c810) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) (async) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0x4}, @ssrr={0x89, 0x7, 0x0, [@private]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote}, {@empty}, {@local}, {@loopback}, {@private, 0x2}]}]}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 33.530659237s ago: executing program 1 (id=1751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010800000000000000000000ffff", @ANYRES32=r0, @ANYBLOB="000000000000010000fdb4afff0000000000003e005e961e4deba12b522980a86a29ae85139c95c15a45aea5bf30"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x24040054) 32.664156344s ago: executing program 3 (id=1752): unshare(0x68060200) (async) unshare(0x68060200) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x183400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x2000000000000, 0x12) (async) write$cgroup_int(r0, &(0x7f0000000200)=0x2000000000000, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x0, [0x2, 0x7, 0x7, 0xffffffffffffffff, 0x64a, 0x5], 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x78) 32.496067486s ago: executing program 1 (id=1753): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) (async) socket$netlink(0x10, 0x3, 0x4) 32.491398033s ago: executing program 2 (id=1754): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[], 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x24040002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001b40), 0x10, 0x9, @void, @value}, 0x94) 32.247214599s ago: executing program 1 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) shutdown(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)) 9.073193215s ago: executing program 0 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000380), &(0x7f0000000040)=@udp=r7}, 0x20) (async) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x10163) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 4.116659331s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x81) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 2.067374006s ago: executing program 2 (id=1757): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r3}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x0, r6, 0x4, r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) close(0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x810, 0x420, 0x188, 0x350, 0x350, 0x420, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1_vlan\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty, [], [], [], 0x1404}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffff7f], @ipv4=@private=0xa010102, [0x0, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xffffff00, 0xff], 0x52, 0x7f, 0x1d, 0x4e21, 0x4e22, 0x4e21, 0x4e21, 0x88, 0x80}, 0x82, 0x2444}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x0, 0x32}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) 2.064716371s ago: executing program 3 (id=1758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0) 456.141146ms ago: executing program 3 (id=1759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x30}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x2000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r3, 0x111, 0x5, 0x0, 0x20001f00) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="70c2", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x6404c080) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008"], 0x174}}, 0x0) 358.313188ms ago: executing program 2 (id=1760): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8001005) socket(0x11, 0x800000003, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}], 0x50, 0x4000000}], 0x1, 0x40) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 244.913466ms ago: executing program 3 (id=1761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80003, 0x6b) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000008200)={'vxcan1\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000008280)={&(0x7f0000007cc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000008240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @local}}}], 0x20}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000840), &(0x7f0000000800)=r5}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x140d, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'wg2\x00', @broadcast}) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) getsockname$packet(r3, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=1762): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x63, 0x66, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e20, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}, {"1d8d53fd95af3d87b33530609cb699258189b246d1d07bf95817d6a9f4e75bd77f7d4cb37e660682c9f56aa4876a708894d8510353370af469dd31"}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)="7ca96e1548a7145621d040371d17f0e6cb718ef0d0dee1e919279bb32328e893cba362da0f60a8677cc348713966261c", 0x30}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x18}}], 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {0x100000000}, {0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@algo_auth_trunc={0x5c, 0x14, {{'xcbc(aes)\x00'}, 0x80, 0x0, "97a2c2df58bf2babea45840d4da5d432"}}]}, 0x14c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x4, 0x4) bind$alg(r2, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0xe) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r3, 0x2) shutdown(0xffffffffffffffff, 0x1) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000840)={0xdc, 0x21, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic, @generic="ea59fa2f989ac726e64997576ff561bfa6ee22cc31800378dc4c8be964d03be1cba89d73aac6359f64fd8ec139b54f7b222528f8ee74b450e072be31e9b98138f192dbd6c196c187b5dc2ad309c27d1e91337407ce13cefe31558d35407786e47d4aabfd8dc1c1d3f506", @generic="3e4fa63b6b09f7a415c8181af4f2443c44ccb4151f2ac79b5450552221feac648b7d8b2abbc91aef1929309d03bcc8b0ae7d80f14ec6bf23ec284442c36a3b27326de6f1a82c7f68f29a0a18e6580af1f0f677915dd9", @typed={0xc, 0x13b, 0x0, 0x0, @u64=0x1000}, @generic]}, 0xdc}, {0x0}, {&(0x7f0000000b80)={0x34, 0x23, 0x400, 0x70bd29, 0x25dfdbff, "", [@generic="57c2f10dc6841adfe63c67817d6f8a3f3ddc85", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x7a}]}, 0x34}], 0x4, 0x0, 0x0, 0x46044}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008240)={0xffffffffffffffff, 0x0, 0x3d, 0x69, &(0x7f00000013c0)="22930e87079c46ae0b66dbed1628414334cb90b7482ed12deaf5ffa4dca949012f99019316ba82320fc1545328ee0589f3581f29d432f4df7d5a85f914", &(0x7f0000008040)=""/105, 0x8a54, 0x0, 0x41, 0x0, &(0x7f00000080c0)="44370f3d217c0579ee4c81776a158d9ec8085634073e3364688f397111e7b972a133ecd88851dbc76fb7c843b57036608e17ef7acb3ec26f6c5e0fb21c073c938c", 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): bled state [ 413.111805][T11467] bridge_slave_0: entered allmulticast mode [ 413.119703][T11467] bridge_slave_0: entered promiscuous mode [ 413.128977][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.136122][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.146288][T11467] bridge_slave_1: entered allmulticast mode [ 413.153202][T11467] bridge_slave_1: entered promiscuous mode [ 413.214265][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.228256][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.294636][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 413.322202][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 413.350560][ T6254] hsr_slave_0: left promiscuous mode [ 413.370134][ T6254] hsr_slave_1: left promiscuous mode [ 413.382131][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.393715][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.408929][T11483] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 413.410555][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.443432][T11484] delete_channel: no stack [ 413.453631][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.508194][ T6254] veth1_macvtap: left promiscuous mode [ 413.525291][ T6254] veth0_macvtap: left promiscuous mode [ 413.554168][ T6254] veth1_vlan: left promiscuous mode [ 413.564562][ T6254] veth0_vlan: left promiscuous mode [ 413.614336][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.623924][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.632685][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.650934][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.661118][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.670649][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.739343][T11492] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 414.227533][ T6254] team0 (unregistering): Port device team_slave_1 removed [ 414.288424][ T6254] team0 (unregistering): Port device team_slave_0 removed [ 414.318031][ T55] Bluetooth: hci2: command tx timeout [ 414.784625][T11491] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 414.801238][T11492] vlan3: entered allmulticast mode [ 414.837089][T11492] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 414.859080][T11492] mac80211_hwsim hwsim57 wlan1: left allmulticast mode [ 414.919733][T11467] team0: Port device team_slave_0 added [ 415.001380][T11467] team0: Port device team_slave_1 added [ 415.081583][T11511] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1527'. [ 415.120732][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.137357][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.189176][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.220552][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.227866][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.261896][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.374239][T11467] hsr_slave_0: entered promiscuous mode [ 415.387680][T11467] hsr_slave_1: entered promiscuous mode [ 415.522316][T11527] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 415.532923][T11527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 415.593389][T11527] dccp_invalid_packet: P.Data Offset(100) too large [ 415.639113][T11527] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1533'. [ 415.725700][ T6254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.747319][T11488] chnl_net:caif_netlink_parms(): no params data found [ 415.756723][ T55] Bluetooth: hci3: command tx timeout [ 415.857707][ T6254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.990152][ T6254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.105867][ T6254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.189691][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.211025][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.223698][T11488] bridge_slave_0: entered allmulticast mode [ 416.245298][T11488] bridge_slave_0: entered promiscuous mode [ 416.290197][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.309486][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.323823][T11488] bridge_slave_1: entered allmulticast mode [ 416.334743][T11488] bridge_slave_1: entered promiscuous mode [ 416.397487][ T55] Bluetooth: hci2: command tx timeout [ 416.440414][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.472388][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.481863][T11558] netlink: 'syz.1.1540': attribute type 72 has an invalid length. [ 416.599170][T11488] team0: Port device team_slave_0 added [ 416.627557][T11564] batman_adv: batadv0: Adding interface: dummy0 [ 416.633866][T11564] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.661119][T11564] batman_adv: batadv0: Interface activated: dummy0 [ 416.721612][T11488] team0: Port device team_slave_1 added [ 416.860213][ T6254] bridge_slave_1: left allmulticast mode [ 416.865994][ T6254] bridge_slave_1: left promiscuous mode [ 416.882445][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.913550][ T6254] bridge_slave_0: left allmulticast mode [ 416.933110][ T6254] bridge_slave_0: left promiscuous mode [ 416.954184][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.432610][ T6254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.445983][ T6254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.459632][ T6254] bond0 (unregistering): Released all slaves [ 417.471436][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.479083][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.505454][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.529055][T11467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 417.552815][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 417.570243][T11586] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 417.677637][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.705889][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.763816][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.843547][ T55] Bluetooth: hci3: command tx timeout [ 417.850770][T11601] netlink: 'syz.2.1553': attribute type 72 has an invalid length. [ 417.880344][T11467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 417.891973][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 417.950545][T11605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1555'. [ 417.968444][T11605] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 418.015997][T11467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.027767][T11467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.085039][T11610] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 418.090298][T11488] hsr_slave_0: entered promiscuous mode [ 418.127575][T11488] hsr_slave_1: entered promiscuous mode [ 418.137978][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.157972][T11488] Cannot create hsr debugfs directory [ 418.235120][ T6254] hsr_slave_0: left promiscuous mode [ 418.242175][ T6254] hsr_slave_1: left promiscuous mode [ 418.255389][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.271283][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.284615][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.293049][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.327569][ T6254] veth1_macvtap: left promiscuous mode [ 418.333304][ T6254] veth0_macvtap: left promiscuous mode [ 418.339640][ T6254] veth1_vlan: left promiscuous mode [ 418.345072][ T6254] veth0_vlan: left promiscuous mode [ 418.478008][ T55] Bluetooth: hci2: command tx timeout [ 418.944079][ T6254] team0 (unregistering): Port device team_slave_1 removed [ 418.998541][ T6254] team0 (unregistering): Port device team_slave_0 removed [ 419.461993][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 419.844275][T11641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.902792][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.917124][ T4625] Bluetooth: hci3: command tx timeout [ 419.918670][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1565'. [ 420.018006][T11641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.026846][T11646] xt_l2tp: invalid flags combination: 4 [ 420.050015][T11467] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.062312][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.069507][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.131726][T11641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.166246][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.173481][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.246384][T11641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.254521][T11649] netlink: 'syz.1.1567': attribute type 72 has an invalid length. [ 420.406865][T11641] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.447183][T11488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.521770][T11641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.540528][T11488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.556834][ T4625] Bluetooth: hci2: command tx timeout [ 420.572508][T11641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.592436][T11488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.609734][T11488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.639134][T11641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.751285][T11467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.945738][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.010952][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.060524][T11673] macsec1: entered promiscuous mode [ 421.108846][T11673] macvlan1: entered promiscuous mode [ 421.142639][T11673] macvlan1: left promiscuous mode [ 421.268566][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.275760][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.344559][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.351754][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.529054][T11467] veth0_vlan: entered promiscuous mode [ 421.574535][T11467] veth1_vlan: entered promiscuous mode [ 421.596114][T11704] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1578'. [ 421.618729][T11695] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1577'. [ 421.648272][T11699] vlan2: entered promiscuous mode [ 421.676239][T11706] macvlan2: entered allmulticast mode [ 421.701412][T11706] hsr0: entered allmulticast mode [ 421.719095][T11706] hsr_slave_0: entered allmulticast mode [ 421.750087][T11706] hsr_slave_1: entered allmulticast mode [ 421.782688][T11706] hsr0: left allmulticast mode [ 421.797604][T11706] hsr_slave_0: left allmulticast mode [ 421.803047][T11706] hsr_slave_1: left allmulticast mode [ 421.898125][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.938372][T11467] veth0_macvtap: entered promiscuous mode [ 421.960247][T11467] veth1_macvtap: entered promiscuous mode [ 421.996831][ T4625] Bluetooth: hci3: command tx timeout [ 422.068015][T11488] veth0_vlan: entered promiscuous mode [ 422.093495][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 422.095306][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.130328][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.142925][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.156096][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.169804][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.180657][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.192088][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 422.198719][T11467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.229912][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.251723][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.262100][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.280532][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.290803][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.301593][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.331660][T11467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.359891][T11467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.370381][T11467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.395778][T11467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.416840][T11467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.434831][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 422.504818][T11488] veth1_vlan: entered promiscuous mode [ 422.544060][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1587'. [ 422.553287][T11735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1587'. [ 422.581905][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.593237][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.652196][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.665554][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.691986][T11488] veth0_macvtap: entered promiscuous mode [ 422.724072][T11488] veth1_macvtap: entered promiscuous mode [ 422.744538][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 422.770022][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.783124][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.793425][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.813259][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.823567][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.841141][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.853345][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.871290][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.918178][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.950019][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.963617][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.985237][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.007553][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.018192][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.029981][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.050759][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.069241][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.083686][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.223558][T11488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.233844][T11488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.245450][T11488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.254730][T11488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.422755][ T3038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.512730][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.527172][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.555802][ T3038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.591392][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.602768][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.805802][ T3038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.874445][ T3038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.978263][ T3038] bridge_slave_1: left allmulticast mode [ 423.983935][ T3038] bridge_slave_1: left promiscuous mode [ 423.990380][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.000317][ T3038] bridge_slave_0: left allmulticast mode [ 424.005975][ T3038] bridge_slave_0: left promiscuous mode [ 424.012380][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.526958][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.552623][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.571365][ T3038] bond0 (unregistering): Released all slaves [ 424.586889][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.599527][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.609632][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.619263][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.644770][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 424.659570][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.864744][ T3038] hsr_slave_0: left promiscuous mode [ 424.871657][ T3038] hsr_slave_1: left promiscuous mode [ 424.885132][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.896118][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.904341][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.912038][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.934232][ T3038] veth1_macvtap: left promiscuous mode [ 424.940369][ T3038] veth0_macvtap: left promiscuous mode [ 424.945947][ T3038] veth1_vlan: left promiscuous mode [ 424.951350][ T3038] veth0_vlan: left promiscuous mode [ 425.426084][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 425.469210][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 426.009904][T11772] __nla_validate_parse: 2 callbacks suppressed [ 426.009928][T11772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1595'. [ 426.029066][ T4625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.050870][ T4625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.061314][ T4625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.075492][ T4625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.101808][ T4625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.111799][ T4625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.310610][T11760] lo speed is unknown, defaulting to 1000 [ 426.331406][T11753] chnl_net:caif_netlink_parms(): no params data found [ 426.331761][T11760] lo speed is unknown, defaulting to 1000 [ 426.379478][T11760] lo speed is unknown, defaulting to 1000 [ 426.410278][T11760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 426.472811][T11760] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 426.546806][T11760] lo speed is unknown, defaulting to 1000 [ 426.574770][T11760] lo speed is unknown, defaulting to 1000 [ 426.666336][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.690402][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.700403][T11753] bridge_slave_0: entered allmulticast mode [ 426.713522][T11753] bridge_slave_0: entered promiscuous mode [ 426.719880][ T55] Bluetooth: hci2: command tx timeout [ 426.745966][T11760] lo speed is unknown, defaulting to 1000 [ 426.767535][T11760] lo speed is unknown, defaulting to 1000 [ 426.773939][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.782991][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.791133][T11753] bridge_slave_1: entered allmulticast mode [ 426.798947][T11753] bridge_slave_1: entered promiscuous mode [ 426.819123][T11760] lo speed is unknown, defaulting to 1000 [ 426.827042][T11760] lo speed is unknown, defaulting to 1000 [ 426.833763][T11760] lo speed is unknown, defaulting to 1000 [ 426.851979][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.877478][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.910227][T11773] chnl_net:caif_netlink_parms(): no params data found [ 426.998768][T11798] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 427.010515][T11800] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1601'. [ 427.019944][T11798] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 427.034010][T11753] team0: Port device team_slave_0 added [ 427.046873][T11753] team0: Port device team_slave_1 added [ 427.169082][ T3038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.201800][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.209346][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.242286][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.278517][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 427.289468][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.303331][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.330388][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.359081][ T3038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.388254][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.395588][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.403957][T11773] bridge_slave_0: entered allmulticast mode [ 427.414181][T11773] bridge_slave_0: entered promiscuous mode [ 427.434431][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.462889][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.477941][T11773] bridge_slave_1: entered allmulticast mode [ 427.484887][T11773] bridge_slave_1: entered promiscuous mode [ 427.547078][ T3038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.559000][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 427.687601][ T3038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.705509][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.732273][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.745386][T11821] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 427.767061][T11821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1605'. [ 427.793655][T11823] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 427.795129][T11821] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 427.915133][T11753] hsr_slave_0: entered promiscuous mode [ 427.936120][T11753] hsr_slave_1: entered promiscuous mode [ 427.958084][T11773] team0: Port device team_slave_0 added [ 428.004195][T11773] team0: Port device team_slave_1 added [ 428.112360][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.124353][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.155880][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.176842][ T55] Bluetooth: hci3: command tx timeout [ 428.227786][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.234815][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.271951][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.419369][ T3038] bridge_slave_1: left allmulticast mode [ 428.425139][ T3038] bridge_slave_1: left promiscuous mode [ 428.436701][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.447030][ T3038] bridge_slave_0: left allmulticast mode [ 428.452801][ T3038] bridge_slave_0: left promiscuous mode [ 428.466613][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.798993][ T55] Bluetooth: hci2: command tx timeout [ 428.831268][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.844387][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.859480][ T3038] bond0 (unregistering): Released all slaves [ 428.894933][T11773] hsr_slave_0: entered promiscuous mode [ 428.902114][T11773] hsr_slave_1: entered promiscuous mode [ 428.917839][T11773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.926361][T11773] Cannot create hsr debugfs directory [ 429.093019][T11851] netlink: 'syz.1.1615': attribute type 21 has an invalid length. [ 429.101726][T11851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1615'. [ 429.111488][T11851] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 429.119619][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 429.365522][ T3038] hsr_slave_0: left promiscuous mode [ 429.385463][ T3038] hsr_slave_1: left promiscuous mode [ 429.402924][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.412802][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.423383][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.431850][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.455393][ T3038] veth1_macvtap: left promiscuous mode [ 429.461455][ T3038] veth0_macvtap: left promiscuous mode [ 429.467799][ T3038] veth1_vlan: left promiscuous mode [ 429.473145][ T3038] veth0_vlan: left promiscuous mode [ 429.952611][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 430.008681][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 430.242349][ T55] Bluetooth: hci3: command tx timeout [ 430.720317][T11870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1620'. [ 430.876991][ T55] Bluetooth: hci2: command tx timeout [ 430.921233][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 430.936889][T11880] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 430.973473][T11753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 430.995968][T11753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.016214][T11753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.039125][T11753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.161771][T11773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.185596][T11773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.198918][T11773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.220206][T11891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 431.232473][T11773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.344046][T11896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'. [ 431.384869][T11753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.453983][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.470278][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.519460][T11753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.530518][T11753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.543457][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.550618][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.559836][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.567011][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.586919][T11898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1629'. [ 431.621199][T11902] lo speed is unknown, defaulting to 1000 [ 431.633374][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.658951][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.666146][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.736864][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.744134][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.945450][T11913] netlink: 'syz.1.1631': attribute type 7 has an invalid length. [ 432.043031][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.171357][T11924] xt_hashlimit: size too large, truncated to 1048576 [ 432.254182][T11924] syz.1.1632: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 432.254996][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.274755][T11924] CPU: 0 UID: 0 PID: 11924 Comm: syz.1.1632 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 432.289765][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.299847][T11924] Call Trace: [ 432.303135][T11924] [ 432.306076][T11924] dump_stack_lvl+0x241/0x360 [ 432.310801][T11924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.316028][T11924] ? __pfx__printk+0x10/0x10 [ 432.320645][T11924] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 432.327088][T11924] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 432.333609][T11924] warn_alloc+0x278/0x410 [ 432.337967][T11924] ? __pfx_warn_alloc+0x10/0x10 [ 432.342853][T11924] ? htable_create+0x102/0x880 [ 432.347631][T11924] ? __get_vm_area_node+0x23d/0x270 [ 432.352852][T11924] __vmalloc_node_range_noprof+0x691/0x13f0 [ 432.358822][T11924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 432.365168][T11924] ? htable_create+0x102/0x880 [ 432.369942][T11924] vmalloc_noprof+0x79/0x90 [ 432.374474][T11924] ? htable_create+0x102/0x880 [ 432.379250][T11924] htable_create+0x102/0x880 [ 432.383853][T11924] hashlimit_mt_check_common+0x710/0xa40 [ 432.389498][T11924] ? xt_check_proc_name+0xc7/0x110 [ 432.394630][T11924] xt_check_match+0x368/0xa40 [ 432.399335][T11924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.405355][T11924] ? __pfx_xt_check_match+0x10/0x10 [ 432.410588][T11924] ? xt_find_match+0x1d3/0x210 [ 432.415400][T11924] translate_table+0x1671/0x2330 [ 432.420377][T11924] ? __pfx_translate_table+0x10/0x10 [ 432.425697][T11924] ? __might_fault+0xaa/0x120 [ 432.430387][T11924] ? __pfx_lock_release+0x10/0x10 [ 432.435457][T11924] ? __might_fault+0xc6/0x120 [ 432.440163][T11924] ? _copy_from_user+0xa6/0xe0 [ 432.444959][T11924] ? copy_from_sockptr_offset+0x6b/0xb0 [ 432.450555][T11924] do_ip6t_set_ctl+0xe4c/0x1270 [ 432.455439][T11924] ? __pfx___might_resched+0x10/0x10 [ 432.460755][T11924] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 432.466064][T11924] ? __pfx_lock_release+0x10/0x10 [ 432.471125][T11924] ? __mutex_unlock_slowpath+0x21d/0x750 [ 432.476788][T11924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.482807][T11924] nf_setsockopt+0x295/0x2c0 [ 432.487427][T11924] rawv6_setsockopt+0x327/0x740 [ 432.492308][T11924] ? __pfx_aa_sk_perm+0x10/0x10 [ 432.497183][T11924] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 432.502578][T11924] ? __fget_files+0x29/0x470 [ 432.507182][T11924] ? aa_sock_opt_perm+0x79/0x120 [ 432.512134][T11924] ? sock_common_setsockopt+0x37/0xc0 [ 432.517579][T11924] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 432.523488][T11924] do_sock_setsockopt+0x3af/0x720 [ 432.528529][T11924] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 432.534084][T11924] ? __fget_files+0x29/0x470 [ 432.538689][T11924] ? __fget_files+0x3f3/0x470 [ 432.543377][T11924] ? __fget_files+0x29/0x470 [ 432.547989][T11924] __sys_setsockopt+0x1a2/0x250 [ 432.552855][T11924] __x64_sys_setsockopt+0xb5/0xd0 [ 432.557897][T11924] do_syscall_64+0xf3/0x230 [ 432.562414][T11924] ? clear_bhb_loop+0x35/0x90 [ 432.567109][T11924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.573028][T11924] RIP: 0033:0x7f7072d7dff9 [ 432.577455][T11924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.597079][T11924] RSP: 002b:00007f7073b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 432.605520][T11924] RAX: ffffffffffffffda RBX: 00007f7072f35f80 RCX: 00007f7072d7dff9 [ 432.613504][T11924] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 432.621485][T11924] RBP: 00007f7072df0296 R08: 0000000000000588 R09: 0000000000000000 [ 432.629468][T11924] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 432.637449][T11924] R13: 0000000000000000 R14: 00007f7072f35f80 R15: 00007ffd5983ed98 [ 432.645453][T11924] [ 432.668608][ T55] Bluetooth: hci3: command tx timeout [ 432.697917][T11924] Mem-Info: [ 432.701095][T11924] active_anon:10120 inactive_anon:0 isolated_anon:0 [ 432.701095][T11924] active_file:1689 inactive_file:38367 isolated_file:0 [ 432.701095][T11924] unevictable:768 dirty:142 writeback:0 [ 432.701095][T11924] slab_reclaimable:10025 slab_unreclaimable:98121 [ 432.701095][T11924] mapped:21986 shmem:4113 pagetables:647 [ 432.701095][T11924] sec_pagetables:0 bounce:0 [ 432.701095][T11924] kernel_misc_reclaimable:0 [ 432.701095][T11924] free:1347739 free_pcp:483 free_cma:0 [ 432.767584][T11924] Node 0 active_anon:33880kB inactive_anon:0kB active_file:6756kB inactive_file:153400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87844kB dirty:564kB writeback:0kB shmem:8316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10272kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no [ 432.795036][T11773] veth0_vlan: entered promiscuous mode [ 432.826747][T11924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 432.833560][T11773] veth1_vlan: entered promiscuous mode [ 432.896235][T11924] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.957549][ T55] Bluetooth: hci2: command tx timeout [ 432.966861][T11924] lowmem_reserve[]: 0 2465 2466 0 0 [ 432.972258][T11924] Node 0 DMA32 free:1451596kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:29444kB inactive_anon:0kB active_file:6756kB inactive_file:152568kB unevictable:1536kB writepending:560kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:6512kB local_pcp:1140kB free_cma:0kB [ 433.051069][T11924] lowmem_reserve[]: 0 0 0 0 0 [ 433.055880][T11924] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 433.102880][T11924] lowmem_reserve[]: 0 0 0 0 0 [ 433.119081][T11773] veth0_macvtap: entered promiscuous mode [ 433.150208][T11773] veth1_macvtap: entered promiscuous mode [ 433.189806][T11924] Node 1 Normal free:3930384kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.198477][ T4625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.229324][T11924] lowmem_reserve[]: 0 0 0 0 0 [ 433.234229][T11924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 433.247995][T11924] Node 0 DMA32: 2*4kB (UE) 9*8kB (UME) 68*16kB (UME) 76*32kB (UME) 63*64kB (UME) 162*128kB (UME) 99*256kB (UM) 42*512kB (UME) 14*1024kB (UME) 5*2048kB (UME) 322*4096kB (UM) = 1418704kB [ 433.266987][ T4625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.267336][T11924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.287660][T11924] Node 1 Normal: 146*4kB (UME) 47*8kB (UME) 29*16kB (UME) 170*32kB (UME) 81*64kB (UME) 20*128kB (UME) 14*256kB (UME) 7*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 952*4096kB (M) = 3930384kB [ 433.289167][ T4625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.314137][T11924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.323795][T11924] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 433.334050][T11924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.347394][ T4625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.357253][T11924] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.366876][ T4625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 433.368729][T11924] 41312 total pagecache pages [ 433.379851][T11924] 0 pages in swap cache [ 433.379870][ T4625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.384023][T11924] Free swap = 124996kB [ 433.384037][T11924] Total swap = 124996kB [ 433.401205][T11924] 2097051 pages RAM [ 433.405171][T11924] 0 pages HighMem/MovableOnly [ 433.408544][ T6256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.418678][ T6256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.432747][T11924] 427078 pages reserved [ 433.437963][T11924] 0 pages cma reserved [ 433.452950][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.464577][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.475069][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.485695][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.495706][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.508122][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.519899][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.551210][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.562160][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.572384][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.583152][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.593046][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.603712][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.614673][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.645295][T11773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.661675][T11773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.671752][T11773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.694615][T11773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.763900][T11753] veth0_vlan: entered promiscuous mode [ 433.803063][T11937] lo speed is unknown, defaulting to 1000 [ 433.809285][T11753] veth1_vlan: entered promiscuous mode [ 433.990240][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.012948][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.021456][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 434.037771][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 434.131973][T11953] team0: Port device macvlan1 added [ 434.153339][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1640'. [ 434.198333][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.218196][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.241035][T11753] veth0_macvtap: entered promiscuous mode [ 434.334983][T11753] veth1_macvtap: entered promiscuous mode [ 434.360690][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.371433][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.381412][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.393899][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.404418][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.415687][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.425811][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.436521][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.448214][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.472980][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.485070][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.495644][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.507852][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.518143][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.546536][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.566543][T11753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.584059][T11753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.608148][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.620229][T11937] chnl_net:caif_netlink_parms(): no params data found [ 434.675475][T11969] lo speed is unknown, defaulting to 1000 [ 434.734912][T11753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.745775][T11753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.761154][T11753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.770187][T11753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.810926][T11976] netlink: 'syz.1.1645': attribute type 13 has an invalid length. [ 434.824796][T11970] lo speed is unknown, defaulting to 1000 [ 434.887970][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.895825][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.044051][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.053847][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.068497][T11937] bridge_slave_0: entered allmulticast mode [ 435.082488][T11937] bridge_slave_0: entered promiscuous mode [ 435.123336][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.158399][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.191391][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.199940][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.207892][T11937] bridge_slave_1: entered allmulticast mode [ 435.215940][T11937] bridge_slave_1: entered promiscuous mode [ 435.239300][T11988] netem: change failed [ 435.369657][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.410630][T11988] vlan2: entered promiscuous mode [ 435.436956][ T4625] Bluetooth: hci5: command tx timeout [ 435.475964][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.500629][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.596278][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.628784][T11937] team0: Port device team_slave_0 added [ 435.649736][T11937] team0: Port device team_slave_1 added [ 435.700693][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.744546][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.767078][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.822542][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.835746][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.843597][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.871235][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.959631][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.097449][T11937] hsr_slave_0: entered promiscuous mode [ 436.124261][T11937] hsr_slave_1: entered promiscuous mode [ 436.139376][T11937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.154281][T11937] Cannot create hsr debugfs directory [ 436.274206][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.294445][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.306001][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.320054][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.327798][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 436.336021][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.375534][T11937] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.396081][T12001] lo speed is unknown, defaulting to 1000 [ 436.425868][T11937] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.494316][T11937] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.580809][T11937] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.594874][ T11] bridge_slave_1: left allmulticast mode [ 436.601417][ T11] bridge_slave_1: left promiscuous mode [ 436.607841][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.618003][ T11] bridge_slave_0: left allmulticast mode [ 436.623707][ T11] bridge_slave_0: left promiscuous mode [ 436.632570][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.990555][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.002537][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.016117][ T11] bond0 (unregistering): Released all slaves [ 437.030766][T12001] chnl_net:caif_netlink_parms(): no params data found [ 437.290385][T11937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.305789][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.329666][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.340821][T12001] bridge_slave_0: entered allmulticast mode [ 437.349388][T12001] bridge_slave_0: entered promiscuous mode [ 437.358584][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.365685][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.373205][T12001] bridge_slave_1: entered allmulticast mode [ 437.380491][T12001] bridge_slave_1: entered promiscuous mode [ 437.394442][T11937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.422264][ T11] hsr_slave_0: left promiscuous mode [ 437.429632][ T11] hsr_slave_1: left promiscuous mode [ 437.436368][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.443877][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.457881][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.465317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.492298][ T11] veth1_macvtap: left promiscuous mode [ 437.498148][ T11] veth0_macvtap: left promiscuous mode [ 437.503758][ T11] veth1_vlan: left promiscuous mode [ 437.509591][ T11] veth0_vlan: left promiscuous mode [ 437.516913][ T55] Bluetooth: hci5: command tx timeout [ 437.780888][ T4625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.790502][ T4625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.798705][ T4625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.807475][ T4625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.815171][ T4625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 437.822817][ T4625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.258454][ T11] team0 (unregistering): Port device team_slave_1 removed [ 438.307970][ T11] team0 (unregistering): Port device team_slave_0 removed [ 438.406875][ T4625] Bluetooth: hci2: command tx timeout [ 438.783078][T11937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.793961][T11937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.817316][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.885473][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.981855][T12021] lo speed is unknown, defaulting to 1000 [ 439.030334][T12001] team0: Port device team_slave_0 added [ 439.044173][T12001] team0: Port device team_slave_1 added [ 439.085156][T12029] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1655'. [ 439.219262][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.226344][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.279272][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.303781][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.320921][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.347391][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.384789][T12039] team_slave_0: entered promiscuous mode [ 439.390909][T12039] team_slave_1: entered promiscuous mode [ 439.398381][T12039] macvtap1: entered promiscuous mode [ 439.403759][T12039] team0: entered promiscuous mode [ 439.410319][T12039] macvlan1: entered promiscuous mode [ 439.416307][T12039] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 439.501990][T12001] hsr_slave_0: entered promiscuous mode [ 439.533493][T12001] hsr_slave_1: entered promiscuous mode [ 439.550138][T12001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.573769][T12001] Cannot create hsr debugfs directory [ 439.596783][ T4625] Bluetooth: hci5: command tx timeout [ 439.772880][T12056] xt_bpf: check failed: parse error [ 439.916789][ T4625] Bluetooth: hci3: command tx timeout [ 439.937277][ T6256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.005340][T12070] netlink: 'syz.1.1664': attribute type 2 has an invalid length. [ 440.133256][ T6256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.170765][T12021] chnl_net:caif_netlink_parms(): no params data found [ 440.238537][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249615][ T6256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.307992][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.359901][ T6256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.415998][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.464566][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.471765][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.488439][ T4625] Bluetooth: hci2: command tx timeout [ 440.569994][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.577224][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.646292][T12093] xt_l2tp: v2 sid > 0xffff: 16777216 [ 440.828616][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.841012][T12021] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.865280][T12021] bridge_slave_0: entered allmulticast mode [ 440.893747][T12021] bridge_slave_0: entered promiscuous mode [ 440.913832][T12021] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.922320][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.931194][T12021] bridge_slave_1: entered allmulticast mode [ 440.939290][T12021] bridge_slave_1: entered promiscuous mode [ 441.051666][T12021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.102953][T12021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.155611][ T6256] bridge_slave_1: left allmulticast mode [ 441.162155][ T6256] bridge_slave_1: left promiscuous mode [ 441.171071][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.187441][ T6256] bridge_slave_0: left allmulticast mode [ 441.196819][ T6256] bridge_slave_0: left promiscuous mode [ 441.203535][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.313372][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 441.347397][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 441.558653][T12123] netlink: 604 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.681379][ T4625] Bluetooth: hci5: command tx timeout [ 441.780439][ T6256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.795110][ T6256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.806244][ T6256] bond0 (unregistering): Released all slaves [ 441.843781][T12122] netlink: 'syz.3.1678': attribute type 21 has an invalid length. [ 441.868343][T12122] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.896992][T12122] netlink: 'syz.3.1678': attribute type 4 has an invalid length. [ 441.914583][T12122] netlink: 'syz.3.1678': attribute type 5 has an invalid length. [ 441.923228][T12122] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.991780][T12021] team0: Port device team_slave_0 added [ 441.997931][ T4625] Bluetooth: hci3: command tx timeout [ 442.048882][T12021] team0: Port device team_slave_1 added [ 442.107675][T12001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.132542][T12001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.213203][T12001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.240371][T12021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.252076][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.283740][T12021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.332592][T12001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.350136][T12021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.358275][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.385228][T12021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.435655][ T6256] hsr_slave_0: left promiscuous mode [ 442.442002][ T6256] hsr_slave_1: left promiscuous mode [ 442.458174][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.465673][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.474478][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.482401][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.503728][ T6256] veth1_macvtap: left promiscuous mode [ 442.510882][ T6256] veth0_macvtap: left promiscuous mode [ 442.518107][ T6256] veth1_vlan: left promiscuous mode [ 442.523969][ T6256] veth0_vlan: left promiscuous mode [ 442.567216][ T4625] Bluetooth: hci2: command tx timeout [ 443.075491][ T6256] team0 (unregistering): Port device team_slave_1 removed [ 443.143743][ T6256] team0 (unregistering): Port device team_slave_0 removed [ 443.640814][T12139] veth0_to_team: entered allmulticast mode [ 443.660736][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 443.707506][T12021] hsr_slave_0: entered promiscuous mode [ 443.715016][T12021] hsr_slave_1: entered promiscuous mode [ 443.811519][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.077766][ T4625] Bluetooth: hci3: command tx timeout [ 444.153408][T11937] veth0_vlan: entered promiscuous mode [ 444.198966][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 444.256204][T11937] veth1_vlan: entered promiscuous mode [ 444.300234][T12161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 444.400411][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.419614][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.436140][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.443313][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.456332][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.463547][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.553827][T11937] veth0_macvtap: entered promiscuous mode [ 444.568274][T12165] macvtap2: entered promiscuous mode [ 444.573952][T12165] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 444.594904][T11937] veth1_macvtap: entered promiscuous mode [ 444.638926][ T4625] Bluetooth: hci2: command tx timeout [ 444.699136][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.729961][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.746499][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.762824][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.772718][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.783445][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.794498][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.802722][T12021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.819059][T12021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 444.834956][T12021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 444.857447][T12021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.869073][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.891835][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.909198][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.929219][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.947176][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.965380][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.978435][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.999884][T11937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.009369][T11937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.019091][T11937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.028150][T11937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.067452][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 445.180647][T12184] netlink: 'syz.1.1692': attribute type 29 has an invalid length. [ 445.292945][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.301828][T12193] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1695'. [ 445.311275][T12193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1695'. [ 445.333141][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.342997][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.409643][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.432439][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.454573][T12196] bridge2: entered promiscuous mode [ 445.460454][T12196] bridge2: entered allmulticast mode [ 445.471111][T12196] team0: Port device bridge2 added [ 445.485818][T12021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.531321][T12196] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 445.558343][T12196] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 445.632062][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1633'. [ 445.642790][T12196] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 445.694382][T12199] bridge0: port 3(ip6gretap0) entered blocking state [ 445.697852][T12204] RDS: rds_bind could not find a transport for fe80::1b, load rds_tcp or rds_rdma? [ 445.703855][T12199] bridge0: port 3(ip6gretap0) entered disabled state [ 445.728905][T12199] ip6gretap0: entered allmulticast mode [ 445.736115][T12199] ip6gretap0: entered promiscuous mode [ 445.752912][T12199] bridge0: port 3(ip6gretap0) entered blocking state [ 445.759858][T12199] bridge0: port 3(ip6gretap0) entered forwarding state [ 445.805102][T12001] veth0_vlan: entered promiscuous mode [ 445.833175][T12001] veth1_vlan: entered promiscuous mode [ 445.865104][T12021] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.920793][T12001] veth0_macvtap: entered promiscuous mode [ 445.931857][T12001] veth1_macvtap: entered promiscuous mode [ 445.950316][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.961401][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.971884][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.983305][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.994319][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.006166][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.016115][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.027137][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.038695][T12001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.082049][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.089357][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.116187][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.128380][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.144603][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.162834][ T4625] Bluetooth: hci3: command tx timeout [ 446.170002][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.180614][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.191902][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.203926][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.216228][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.228326][T12001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.249475][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 446.249530][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 446.277381][T12219] bridge0: port 3(ip6gretap0) entered disabled state [ 446.284331][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.291666][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.300210][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 446.328636][T12219] ip6gretap0: left allmulticast mode [ 446.334125][T12219] ip6gretap0: left promiscuous mode [ 446.342813][T12219] bridge0: port 3(ip6gretap0) entered disabled state [ 446.374491][T12219] bridge_slave_1: left allmulticast mode [ 446.382771][T12219] bridge_slave_1: left promiscuous mode [ 446.390809][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.404859][T12219] bridge_slave_0: left allmulticast mode [ 446.411341][T12219] bridge_slave_0: left promiscuous mode [ 446.418934][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.447916][T12219] bond0: (slave bridge0): Releasing backup interface [ 446.521544][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.528745][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.549315][T12001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.569149][T12001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.580812][T12001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.590245][T12001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.665798][T12234] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.713148][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 446.938674][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.961929][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.059160][ T6254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.081907][ T6254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.150314][T12250] pim6reg1: entered promiscuous mode [ 447.166961][T12250] pim6reg1: entered allmulticast mode [ 447.346202][T12021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.501676][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 447.511899][T12264] bM: renamed from lo (while UP) [ 447.520190][T12267] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 447.539712][T12264] bM: entered allmulticast mode [ 447.699104][T12021] veth0_vlan: entered promiscuous mode [ 447.762748][T12021] veth1_vlan: entered promiscuous mode [ 447.777919][T12275] lo speed is unknown, defaulting to 1000 [ 448.061185][ T3038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.123208][T12021] veth0_macvtap: entered promiscuous mode [ 448.155486][ T3038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.183880][T12021] veth1_macvtap: entered promiscuous mode [ 448.220069][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.232551][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.243583][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.265157][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.275415][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.288022][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.298480][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.316973][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.328647][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.342965][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.354196][T12021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.384115][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.400173][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.412551][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.423968][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.439062][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.450550][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.461307][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.474530][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.491050][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.505823][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.521404][T12021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.544384][ T3038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.573575][T12021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.586573][T12021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.595304][T12021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.604643][T12021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.647679][ T3038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.732977][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.742607][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.767731][ T6256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.775625][ T6256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.838168][ T3038] bridge_slave_1: left allmulticast mode [ 448.843927][ T3038] bridge_slave_1: left promiscuous mode [ 448.857984][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.872302][ T3038] bridge_slave_0: left allmulticast mode [ 448.887073][ T3038] bridge_slave_0: left promiscuous mode [ 448.894010][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.302755][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.319782][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.332422][ T3038] bond0 (unregistering): Released all slaves [ 449.766497][ T3038] hsr_slave_0: left promiscuous mode [ 449.783373][ T3038] hsr_slave_1: left promiscuous mode [ 449.800792][T12296] No such timeout policy "syz0" [ 449.814569][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.836526][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.857226][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.864683][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.904715][ T3038] veth1_macvtap: left promiscuous mode [ 449.925886][ T3038] veth0_macvtap: left promiscuous mode [ 449.946674][ T3038] veth1_vlan: left promiscuous mode [ 449.952006][ T3038] veth0_vlan: left promiscuous mode [ 449.992055][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.003097][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.013589][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 450.023337][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 450.035631][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 450.043220][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.581367][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 450.661879][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 451.290347][T12298] lo speed is unknown, defaulting to 1000 [ 451.443922][T12298] chnl_net:caif_netlink_parms(): no params data found [ 451.559157][T12307] lo speed is unknown, defaulting to 1000 [ 451.612432][T12308] macvtap3: entered promiscuous mode [ 451.619275][T12308] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 451.747428][T12309] team_slave_0: entered promiscuous mode [ 451.753236][T12309] team_slave_1: entered promiscuous mode [ 451.778195][T12309] macvtap1: entered promiscuous mode [ 451.783764][T12309] team0: entered promiscuous mode [ 451.790343][T12309] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 451.801051][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.812078][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.827922][T12298] bridge_slave_0: entered allmulticast mode [ 451.855291][T12298] bridge_slave_0: entered promiscuous mode [ 451.895780][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.896581][T12324] netlink: 'syz.1.1727': attribute type 32 has an invalid length. [ 451.920094][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.920572][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.934780][T12298] bridge_slave_1: entered allmulticast mode [ 451.946818][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.949546][T12298] bridge_slave_1: entered promiscuous mode [ 451.969471][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.988825][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.997431][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 452.007860][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.033294][T12328] __nla_validate_parse: 1 callbacks suppressed [ 452.033316][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'. [ 452.055905][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 452.067835][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.079360][ T4625] Bluetooth: hci2: command tx timeout [ 452.117210][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.144062][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.174777][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 452.220571][T12336] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1730'. [ 452.247512][T12298] team0: Port device team_slave_0 added [ 452.303881][ T3038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.333508][T12298] team0: Port device team_slave_1 added [ 452.342220][T12325] lo speed is unknown, defaulting to 1000 [ 452.409541][ T3038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.427787][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.435417][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.436346][T12342] ieee802154 phy1 wpan1: encryption failed: -126 [ 452.467464][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.495196][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.504493][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.548917][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.593630][ T3038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.694936][ T3038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.775399][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 452.785840][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 452.816345][T12298] hsr_slave_0: entered promiscuous mode [ 452.830249][T12298] hsr_slave_1: entered promiscuous mode [ 452.846614][T12298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.854290][T12298] Cannot create hsr debugfs directory [ 452.862388][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 452.877583][T12353] tipc: Invalid UDP bearer configuration [ 452.877630][T12353] tipc: Enabling of bearer rejected, failed to enable media [ 453.063095][T12366] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1738'. [ 453.246193][T12325] chnl_net:caif_netlink_parms(): no params data found [ 453.332047][T12378] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 453.338099][ T3038] bridge_slave_1: left allmulticast mode [ 453.350144][T12378] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 453.355817][ T3038] bridge_slave_1: left promiscuous mode [ 453.364571][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.381138][ T3038] bridge_slave_0: left allmulticast mode [ 453.389042][ T3038] bridge_slave_0: left promiscuous mode [ 453.394792][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.872803][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.884967][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.898170][ T3038] bond0 (unregistering): Released all slaves [ 454.096364][ T4625] Bluetooth: hci3: command tx timeout [ 454.104088][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1745'. [ 454.157297][ T4625] Bluetooth: hci2: command tx timeout [ 454.180594][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 454.226229][T12395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1746'. [ 454.527202][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.534537][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.562754][T12325] bridge_slave_0: entered allmulticast mode [ 454.569991][T12325] bridge_slave_0: entered promiscuous mode [ 454.652007][ T3038] hsr_slave_0: left promiscuous mode [ 454.681477][ T3038] hsr_slave_1: left promiscuous mode [ 454.703401][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.717509][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.738792][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.755773][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.819421][ T3038] veth1_macvtap: left promiscuous mode [ 454.833686][ T3038] veth0_macvtap: left promiscuous mode [ 454.842993][ T3038] veth1_vlan: left promiscuous mode [ 454.854853][ T3038] veth0_vlan: left promiscuous mode [ 455.540460][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 455.589732][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 456.102670][T12325] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.113972][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.124153][T12325] bridge_slave_1: entered allmulticast mode [ 456.132308][T12325] bridge_slave_1: entered promiscuous mode [ 456.154981][T12414] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.164084][ T4625] Bluetooth: hci3: command tx timeout [ 456.176765][T12414] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.185612][T12414] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.197228][T12414] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.238207][ T4625] Bluetooth: hci2: command tx timeout [ 456.472986][T12426] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 456.500636][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.536244][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.582861][T12422] lo speed is unknown, defaulting to 1000 [ 456.807717][T12423] lo speed is unknown, defaulting to 1000 [ 458.937442][ T4625] Bluetooth: hci3: command tx timeout [ 458.942914][ T4625] Bluetooth: hci2: command tx timeout [ 460.956513][ T55] Bluetooth: hci3: command tx timeout [ 468.796599][ T4625] Bluetooth: hci1: command 0x0406 tx timeout [ 468.802707][ T4625] Bluetooth: hci4: command 0x0406 tx timeout [ 471.016956][T12325] team0: Port device team_slave_0 added [ 471.027855][T12325] team0: Port device team_slave_1 added [ 471.079732][T12298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.094684][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.102666][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.184403][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.238112][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.245122][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.333125][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.388123][T12298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.420412][T12298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.511333][T10157] bridge0: port 3(syz_tun) entered disabled state [ 471.699303][T10157] syz_tun (unregistering): left allmulticast mode [ 471.705916][T10157] syz_tun (unregistering): left promiscuous mode [ 471.744487][T10157] bridge0: port 3(syz_tun) entered disabled state [ 471.824133][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.833803][ T4625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.843483][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.867099][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.885630][ T4625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 471.894976][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.926049][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.935866][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.983217][ T5253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.004081][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.014917][T12298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.015733][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.031260][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.043181][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.052069][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 472.069478][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.083482][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 472.094870][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.102733][T12298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.110413][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.122886][T12298] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.189197][T12325] hsr_slave_0: entered promiscuous mode [ 472.195671][T12325] hsr_slave_1: entered promiscuous mode [ 472.206195][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.213358][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.223032][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.230207][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.275271][ T3038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.287108][ T3038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.373220][T12441] lo speed is unknown, defaulting to 1000 [ 472.400806][ T3038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.411749][ T3038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.442810][T12443] lo speed is unknown, defaulting to 1000 [ 472.500368][ T3038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.511674][ T3038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.532182][T12445] lo speed is unknown, defaulting to 1000 [ 472.588475][ T3038] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.598953][ T3038] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 472.992621][ T3038] bridge_slave_1: left allmulticast mode [ 472.999352][ T3038] bridge_slave_1: left promiscuous mode [ 473.006633][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.016044][ T3038] bridge_slave_0: left allmulticast mode [ 473.022911][ T3038] bridge_slave_0: left promiscuous mode [ 473.029488][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.422865][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.434889][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.448549][ T3038] bond0 (unregistering): Released all slaves [ 473.494722][T12443] chnl_net:caif_netlink_parms(): no params data found [ 473.541182][T12298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.664142][T12441] chnl_net:caif_netlink_parms(): no params data found [ 473.691410][T12445] chnl_net:caif_netlink_parms(): no params data found [ 473.915933][ T3038] hsr_slave_0: left promiscuous mode [ 473.922405][ T3038] hsr_slave_1: left promiscuous mode [ 473.935262][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.943581][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.952259][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.959861][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.983587][ T3038] team0: left promiscuous mode [ 473.989109][ T3038] team_slave_0: left promiscuous mode [ 473.994554][ T3038] team_slave_1: left promiscuous mode [ 474.000217][ T5253] Bluetooth: hci1: command tx timeout [ 474.000300][ T3038] veth1_macvtap: left promiscuous mode [ 474.012816][ T3038] veth0_macvtap: left promiscuous mode [ 474.018903][ T3038] veth1_vlan: left promiscuous mode [ 474.024205][ T3038] veth0_vlan: left promiscuous mode [ 474.157624][ T5253] Bluetooth: hci5: command tx timeout [ 474.159195][ T5243] Bluetooth: hci0: command tx timeout [ 474.618705][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 474.676507][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 475.186133][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.204592][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.213646][T12443] bridge_slave_0: entered allmulticast mode [ 475.221027][T12443] bridge_slave_0: entered promiscuous mode [ 475.237384][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.244535][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.252533][T12445] bridge_slave_0: entered allmulticast mode [ 475.259938][T12445] bridge_slave_0: entered promiscuous mode [ 475.290628][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.298090][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.305350][T12443] bridge_slave_1: entered allmulticast mode [ 475.315179][T12443] bridge_slave_1: entered promiscuous mode [ 475.344569][T12325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.355640][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.363385][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.370830][T12445] bridge_slave_1: entered allmulticast mode [ 475.378839][T12445] bridge_slave_1: entered promiscuous mode [ 475.416042][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.431393][T12325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.486069][T12441] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.493985][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.503110][T12441] bridge_slave_0: entered allmulticast mode [ 475.510534][T12441] bridge_slave_0: entered promiscuous mode [ 475.519995][T12441] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.527807][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.535090][T12441] bridge_slave_1: entered allmulticast mode [ 475.542518][T12441] bridge_slave_1: entered promiscuous mode [ 475.552606][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.575453][T12325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.590504][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.611356][T12298] veth0_vlan: entered promiscuous mode [ 475.665239][T12443] team0: Port device team_slave_0 added [ 475.689806][T12325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.707165][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.726184][T12441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.741611][T12443] team0: Port device team_slave_1 added [ 475.781075][T12441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.811065][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.824993][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.851620][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.869653][T12445] team0: Port device team_slave_0 added [ 475.897585][T12441] team0: Port device team_slave_0 added [ 475.906070][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.915860][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.943124][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.961700][T12445] team0: Port device team_slave_1 added [ 475.986367][T12441] team0: Port device team_slave_1 added [ 476.053223][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.061352][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.089196][ T5243] Bluetooth: hci1: command tx timeout [ 476.095654][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.109827][T12298] veth1_vlan: entered promiscuous mode [ 476.123759][T12441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.131820][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.158391][T12441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.171305][T12441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.178547][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.204662][T12441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.222933][T12443] hsr_slave_0: entered promiscuous mode [ 476.230266][T12443] hsr_slave_1: entered promiscuous mode [ 476.237051][ T5243] Bluetooth: hci0: command tx timeout [ 476.237227][ T5253] Bluetooth: hci5: command tx timeout [ 476.250211][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.262783][T12443] Cannot create hsr debugfs directory [ 476.272701][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.280501][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.306971][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.438766][T12445] hsr_slave_0: entered promiscuous mode [ 476.445147][T12445] hsr_slave_1: entered promiscuous mode [ 476.451974][T12445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.460259][T12445] Cannot create hsr debugfs directory [ 476.519702][ T3038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.561332][T12441] hsr_slave_0: entered promiscuous mode [ 476.573080][T12441] hsr_slave_1: entered promiscuous mode [ 476.580125][T12441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.587928][T12441] Cannot create hsr debugfs directory [ 476.644193][ T3038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.783347][ T3038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.814187][T12298] veth0_macvtap: entered promiscuous mode [ 476.862710][T12298] veth1_macvtap: entered promiscuous mode [ 476.910605][ T3038] bond0: (slave netdevsim0): Releasing backup interface [ 476.922334][ T3038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.014277][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.033678][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.045947][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.057343][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.067276][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.078031][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.089525][T12298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.104528][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.115204][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.125576][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.136331][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.146540][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.157312][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.168733][T12298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.202622][T12298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.212673][T12298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.221769][T12298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.230921][T12298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.584891][ T3038] team0: Port device vlan2 removed [ 477.664857][ T3038] team0: Port device bridge2 removed [ 477.828679][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.840562][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.855380][ T3038] bond0 (unregistering): Released all slaves [ 477.898506][T12325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.928782][ T3038] tipc: Left network mode [ 477.980154][T12325] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.008785][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.025666][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.088364][T12443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.125090][T12443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.155414][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.162629][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.170140][ T5253] Bluetooth: hci1: command tx timeout [ 478.182704][T12443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.221573][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.237698][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.255396][T12443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.299450][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.306653][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.317411][ T5253] Bluetooth: hci5: command tx timeout [ 478.318846][ T5243] Bluetooth: hci0: command tx timeout [ 478.362317][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.370188][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.379871][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.389567][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.433089][ T3038] veth1_macvtap: left promiscuous mode [ 478.438896][ T3038] veth0_macvtap: left promiscuous mode [ 478.444655][ T3038] veth0_vlan: left promiscuous mode [ 478.982234][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 479.033143][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 479.860353][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.939870][T12441] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.012199][T12445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.025702][T12445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.048618][T12445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.065722][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.082227][T12445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.114123][T12441] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.141387][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.148548][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.167826][T12325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.175632][ T3038] IPVS: stop unused estimator thread 0... [ 480.189608][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.196832][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.234860][T12441] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.245950][ T5243] Bluetooth: hci1: command tx timeout [ 480.313885][T12441] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.392188][ T3038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.402973][ T5243] Bluetooth: hci5: command tx timeout [ 480.406701][ T5243] Bluetooth: hci0: command tx timeout [ 480.453982][T12443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.465555][T12443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.611765][ T3038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.693970][ T3038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.775880][ T3038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.806477][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.866195][T12325] veth0_vlan: entered promiscuous mode [ 480.878421][T12441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.897152][T12445] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.918122][T12441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.934083][T12441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.954497][T12441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.980166][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.994382][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.001647][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.011116][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.018412][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.057251][T12325] veth1_vlan: entered promiscuous mode [ 481.077479][ T3038] bridge_slave_1: left allmulticast mode [ 481.083186][ T3038] bridge_slave_1: left promiscuous mode [ 481.090607][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.101260][ T3038] bridge_slave_0: left allmulticast mode [ 481.107408][ T3038] bridge_slave_0: left promiscuous mode [ 481.113130][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.515950][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.542284][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.554239][ T3038] bond0 (unregistering): Released all slaves [ 481.840762][T12443] veth0_vlan: entered promiscuous mode [ 481.859313][T12325] veth0_macvtap: entered promiscuous mode [ 481.993579][ T5253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.018180][T12325] veth1_macvtap: entered promiscuous mode [ 482.025932][ T5253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.037826][ T5253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.067451][ T5253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.075688][ T5253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 482.078204][T12443] veth1_vlan: entered promiscuous mode [ 482.098908][ T5253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.162754][ T3038] hsr_slave_0: left promiscuous mode [ 482.169748][ T3038] hsr_slave_1: left promiscuous mode [ 482.176041][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.184820][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.201705][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.209325][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.232541][ T3038] veth1_macvtap: left promiscuous mode [ 482.239017][ T3038] veth0_macvtap: left promiscuous mode [ 482.244600][ T3038] veth1_vlan: left promiscuous mode [ 482.250650][ T3038] veth0_vlan: left promiscuous mode [ 482.811751][ T3038] team0 (unregistering): Port device team_slave_1 removed [ 482.862614][ T3038] team0 (unregistering): Port device team_slave_0 removed [ 483.444715][T12325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.456495][T12325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.466351][T12325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.478321][T12325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.490583][T12325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.512399][T12486] lo speed is unknown, defaulting to 1000 [ 483.535064][T12325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.555650][T12325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.565560][T12325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.576167][T12325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.607808][T12325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.620680][T12325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.630159][T12325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.639870][T12325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.648694][T12325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.664465][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.743959][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.772120][T12441] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.853741][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.860904][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.874733][T12443] veth0_macvtap: entered promiscuous mode [ 483.901501][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.920800][T12443] veth1_macvtap: entered promiscuous mode [ 483.935285][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.965283][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.972467][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.009106][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.020380][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.031935][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.043069][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.053523][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.064272][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.078798][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.107650][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.115546][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.155207][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.165886][ T5253] Bluetooth: hci2: command tx timeout [ 484.173023][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.184266][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.195457][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.205745][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.217449][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.230659][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.273795][T12443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.283407][T12443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.292847][T12443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.301646][T12443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.362094][T12445] veth0_vlan: entered promiscuous mode [ 484.376084][T12445] veth1_vlan: entered promiscuous mode [ 484.439800][T12445] veth0_macvtap: entered promiscuous mode [ 484.474782][T12445] veth1_macvtap: entered promiscuous mode [ 484.489931][T12486] chnl_net:caif_netlink_parms(): no params data found [ 484.625143][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.651902][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.662856][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.675638][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.688977][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.700210][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.710817][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.722715][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.735264][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.890753][ T2993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.942122][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.954646][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.954675][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.965316][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.990355][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.994002][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.000955][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.019519][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.030069][T12445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.042182][T12445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.054920][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.123280][ T2993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.162602][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.172592][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.184203][T12486] bridge_slave_0: entered allmulticast mode [ 485.191281][T12486] bridge_slave_0: entered promiscuous mode [ 485.201170][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.209112][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.216367][T12486] bridge_slave_1: entered allmulticast mode [ 485.224538][T12486] bridge_slave_1: entered promiscuous mode [ 485.248747][T12445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.258113][T12445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.267502][T12445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.276216][T12445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.312945][ T2993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.340868][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.350476][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.399109][ T2993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.418393][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.460829][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.550241][T12486] team0: Port device team_slave_0 added [ 485.562034][T12486] team0: Port device team_slave_1 added [ 485.597912][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.605835][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.620458][T12441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.658870][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.665857][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.692555][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.715811][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.723224][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.749796][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.818592][T12486] hsr_slave_0: entered promiscuous mode [ 485.825746][T12486] hsr_slave_1: entered promiscuous mode [ 485.832308][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.842306][T12486] Cannot create hsr debugfs directory [ 485.867655][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.877216][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.935274][ T2993] bridge_slave_1: left allmulticast mode [ 485.942774][ T2993] bridge_slave_1: left promiscuous mode [ 485.949703][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.965647][ T2993] bridge_slave_0: left allmulticast mode [ 485.973665][ T2993] bridge_slave_0: left promiscuous mode [ 485.988379][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.237334][ T5253] Bluetooth: hci2: command tx timeout [ 486.383071][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.395092][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.407621][ T2993] bond0 (unregistering): Released all slaves [ 486.502696][T12441] veth0_vlan: entered promiscuous mode [ 486.563506][T12441] veth1_vlan: entered promiscuous mode [ 486.781247][ T2993] hsr_slave_0: left promiscuous mode [ 486.808486][ T2993] hsr_slave_1: left promiscuous mode [ 486.823108][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.832455][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.841403][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.851007][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.878851][ T2993] veth1_macvtap: left promiscuous mode [ 486.885275][ T2993] veth0_macvtap: left promiscuous mode [ 486.901686][ T2993] veth1_vlan: left promiscuous mode [ 486.911815][ T2993] veth0_vlan: left promiscuous mode [ 487.055741][T12507] Cannot find add_set index 32768 as target [ 487.091388][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.104168][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.115041][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.125966][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.135737][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 487.144266][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 487.690455][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 487.740564][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 488.232613][T12502] netlink: 'syz.3.1758': attribute type 5 has an invalid length. [ 488.245323][T12502] ip6erspan0: entered promiscuous mode [ 488.272027][T12441] veth0_macvtap: entered promiscuous mode [ 488.280201][T12506] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 488.298356][T12441] veth1_macvtap: entered promiscuous mode [ 488.317316][T12506] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 488.321136][T12508] lo speed is unknown, defaulting to 1000 [ 488.325789][T12506] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 488.357038][ T5253] Bluetooth: hci2: command tx timeout [ 488.581607][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.592267][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.602425][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.613174][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.623660][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.634605][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.644655][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.655409][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.667280][T12441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.703095][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.729329][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.755730][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.766617][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.776901][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.788549][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.799088][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.809829][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.821760][T12441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.876156][T12519] team_slave_0: entered promiscuous mode [ 488.881982][T12519] team_slave_1: entered promiscuous mode [ 488.905902][T12519] macvtap1: entered promiscuous mode [ 488.915695][T12519] team0: entered promiscuous mode [ 489.310958][ T5253] Bluetooth: hci3: command tx timeout [ 490.407583][ T5253] Bluetooth: hci2: command tx timeout [ 492.316487][ T5253] Bluetooth: hci3: command tx timeout [ 494.896172][ C1] sched: DL replenish lagged too much [ 495.887985][T12519] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 496.191440][ T5243] Bluetooth: hci3: command tx timeout [ 498.247838][ T5253] Bluetooth: hci3: command tx timeout [ 522.015176][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.599634][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.597100][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.877386][ T30] INFO: task kworker/u8:7:2993 blocked for more than 140 seconds. [ 638.885274][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 638.933255][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.942821][ T30] task:kworker/u8:7 state:D stack:21264 pid:2993 tgid:2993 ppid:2 flags:0x00004000 [ 638.957595][ T30] Workqueue: netns cleanup_net [ 638.962546][ T30] Call Trace: [ 638.965953][ T30] [ 638.970389][ T30] __schedule+0x1895/0x4b30 [ 638.974979][ T30] ? __pfx___schedule+0x10/0x10 [ 638.980600][ T30] ? __pfx_lock_release+0x10/0x10 [ 638.985693][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 638.992375][ T30] ? kthread_data+0x52/0xd0 [ 638.997648][ T30] ? schedule+0x90/0x320 [ 639.001940][ T30] ? wq_worker_sleeping+0x66/0x240 [ 639.007884][ T30] ? schedule+0x90/0x320 [ 639.012180][ T30] schedule+0x14b/0x320 [ 639.018112][ T30] schedule_preempt_disabled+0x13/0x30 [ 639.023631][ T30] __mutex_lock+0x6a7/0xd70 [ 639.028930][ T30] ? __mutex_lock+0x52a/0xd70 [ 639.033680][ T30] ? wg_destruct+0x25/0x2e0 [ 639.039218][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 639.044310][ T30] ? __pfx_free_percpu+0x10/0x10 [ 639.050424][ T30] ? kobject_put+0x272/0x480 [ 639.055076][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 639.060946][ T30] wg_destruct+0x25/0x2e0 [ 639.065327][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 639.071024][ T30] netdev_run_todo+0xe1a/0x1000 [ 639.075931][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 639.127976][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 639.134065][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 639.427065][ T30] default_device_exit_batch+0xa21/0xaa0 [ 639.432901][ T30] ? __pfx___might_resched+0x10/0x10 [ 639.500843][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 639.647041][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 639.652693][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 639.737915][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 639.744263][ T30] cleanup_net+0x89d/0xcc0 [ 639.878404][T12508] chnl_net:caif_netlink_parms(): no params data found [ 639.907188][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 639.912238][ T30] ? process_scheduled_works+0x976/0x1850 [ 640.087154][ T30] process_scheduled_works+0xa63/0x1850 [ 640.092928][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 640.207867][ T30] ? assign_work+0x364/0x3d0 [ 640.212554][ T30] worker_thread+0x870/0xd30 [ 640.318316][ T30] ? __kthread_parkme+0x169/0x1d0 [ 640.323445][ T30] ? __pfx_worker_thread+0x10/0x10 [ 640.437105][ T30] kthread+0x2f0/0x390 [ 640.441269][ T30] ? __pfx_worker_thread+0x10/0x10 [ 640.547045][ T30] ? __pfx_kthread+0x10/0x10 [ 640.551723][ T30] ret_from_fork+0x4b/0x80 [ 640.556194][ T30] ? __pfx_kthread+0x10/0x10 [ 640.677160][ T30] ret_from_fork_asm+0x1a/0x30 [ 640.682046][ T30] [ 640.793481][ T30] INFO: task syz-executor:12441 blocked for more than 142 seconds. [ 641.307018][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 641.314727][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.366379][ T30] task:syz-executor state:D stack:20928 pid:12441 tgid:12441 ppid:12438 flags:0x00000000 [ 641.406961][ T30] Call Trace: [ 641.410319][ T30] [ 641.413284][ T30] __schedule+0x1895/0x4b30 [ 641.477418][ T30] ? __pfx___schedule+0x10/0x10 [ 641.482461][ T30] ? __pfx_lock_release+0x10/0x10 [ 641.537111][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 641.542677][ T30] ? schedule+0x90/0x320 [ 641.579378][ T30] schedule+0x14b/0x320 [ 641.583721][ T30] schedule_preempt_disabled+0x13/0x30 [ 641.597226][T12524] Bluetooth: hci1: command 0x0406 tx timeout [ 641.603365][T12524] Bluetooth: hci0: command 0x0406 tx timeout [ 641.610524][T12523] Bluetooth: hci5: command 0x0406 tx timeout [ 641.679024][T12524] Bluetooth: hci3: command 0x0406 tx timeout [ 641.685127][T12524] Bluetooth: hci2: command 0x0406 tx timeout [ 641.796990][ T30] __mutex_lock+0x6a7/0xd70 [ 641.801693][ T30] ? __mutex_lock+0x52a/0xd70 [ 641.836991][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 641.842202][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 641.895624][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 641.956962][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 641.962189][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.027791][ T30] ? ref_tracker_free+0x643/0x7e0 [ 642.033000][ T30] netlink_rcv_skb+0x1e3/0x430 [ 642.077483][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.083047][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.136577][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.141902][ T30] netlink_unicast+0x7f6/0x990 [ 642.197073][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 642.202481][ T30] ? __virt_addr_valid+0x183/0x530 [ 642.263586][ T30] ? __check_object_size+0x48e/0x900 [ 642.307082][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 642.311956][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.367128][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 642.372171][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.417114][ T30] __sock_sendmsg+0x221/0x270 [ 642.421898][ T30] __sys_sendto+0x39b/0x4f0 [ 642.477052][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 642.482212][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 642.538920][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 642.545358][ T30] __x64_sys_sendto+0xde/0x100 [ 642.607059][ T30] do_syscall_64+0xf3/0x230 [ 642.611672][ T30] ? clear_bhb_loop+0x35/0x90 [ 642.687033][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.693031][ T30] RIP: 0033:0x7fbea6d7fe8c [ 642.747062][ T30] RSP: 002b:00007ffcfe9ecbb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 642.755581][ T30] RAX: ffffffffffffffda RBX: 00007fbea7a64620 RCX: 00007fbea6d7fe8c [ 642.866007][ T30] RDX: 0000000000000040 RSI: 00007fbea7a64670 RDI: 0000000000000003 [ 642.917002][ T30] RBP: 0000000000000000 R08: 00007ffcfe9ecc04 R09: 000000000000000c [ 642.925060][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 642.997092][ T30] R13: 0000000000000000 R14: 00007fbea7a64670 R15: 0000000000000000 [ 643.005185][ T30] [ 643.072476][ T30] [ 643.072476][ T30] Showing all locks held in the system: [ 643.376389][ T30] 1 lock held by ksoftirqd/0/16: [ 643.381397][ T30] 1 lock held by khungtaskd/30: [ 643.386281][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 643.419043][ T30] 3 locks held by kworker/1:1/47: [ 643.424138][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 643.497129][ T30] #1: ffffc90000b77d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 643.576944][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 643.616623][ T30] 5 locks held by kworker/u9:0/55: [ 643.621804][ T30] #0: ffff88802596f148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 643.717322][ T30] #1: ffffc9000120fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 643.787403][ T30] #2: ffff88805f7acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400