last executing test programs: 1m9.811379772s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 58.429442922s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 54.316977855s ago: executing program 4 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x1) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42d681a14bc7351c) (async) connect$packet(r8, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r8, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x2}, {}, {0x6}]}) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000ffff000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000340)={r10, 0x5}, &(0x7f0000000380)=0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0xf8, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x6], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x6, [0x2d, 0x3f, 0x8036, 0xb, 0x2f, 0x25, 0x24, 0x39, 0xf, 0x28, 0x3f, 0x3d, 0x22, 0x1c, 0x28, 0x2e], 0x2, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$qrtr(0x2a, 0x2, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000001c0)={0xf0000012}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) 54.017867404s ago: executing program 4 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x3}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fc050000000000000800030059c9142ad66e070fecf8d540f2b8f4b9cce357ab123183b4ba15a4d6805cb680c9b751ec05efd417dff4570cd6c055", @ANYRES32=r6, @ANYBLOB="0600fd00ad000000000055003d9582bb9dfb703ef49f30cef427a94014005500000000000000a3fc14bc763248fefb520500200133000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040000) 46.904789601s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 44.205338335s ago: executing program 4 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x3}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fc050000000000000800030059c9142ad66e070fecf8d540f2b8f4b9cce357ab123183b4ba15a4d6805cb680c9b751ec05efd417dff4570cd6c055", @ANYRES32=r6, @ANYBLOB="0600fd00ad000000000055003d9582bb9dfb703ef49f30cef427a94014005500000000000000a3fc14bc763248fefb520500200133000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040000) 34.064042674s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 32.305457488s ago: executing program 4 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x3}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fc050000000000000800030059c9142ad66e070fecf8d540f2b8f4b9cce357ab123183b4ba15a4d6805cb680c9b751ec05efd417dff4570cd6c055", @ANYRES32=r6, @ANYBLOB="0600fd00ad000000000055003d9582bb9dfb703ef49f30cef427a94014005500000000000000a3fc14bc763248fefb520500200133000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040000) 20.400063468s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 19.034795804s ago: executing program 4 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x3}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fc050000000000000800030059c9142ad66e070fecf8d540f2b8f4b9cce357ab123183b4ba15a4d6805cb680c9b751ec05efd417dff4570cd6c055", @ANYRES32=r6, @ANYBLOB="0600fd00ad000000000055003d9582bb9dfb703ef49f30cef427a94014005500000000000000a3fc14bc763248fefb520500200133000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040000) 6.071761748s ago: executing program 0 (id=937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x2000, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 6.009729682s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) 4.669510277s ago: executing program 0 (id=940): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef232", 0x28}, {&(0x7f00000023c0)="05000000080000655858f0702076b0965312d24db245", 0x16}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, "c27f9662ccd5782723b9c185eb25dece0405895ac82f14b0aa36fc99025c988fd6444d612eb8962d881516f6254394a080b952b4719ce1bd999610bf3e4773d1b85c811463dc9738a8703f56a02ecff6"}, 0xd8) r3 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0x20002007}) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r3, 0x0) 4.640719593s ago: executing program 4 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x3}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fc050000000000000800030059c9142ad66e070fecf8d540f2b8f4b9cce357ab123183b4ba15a4d6805cb680c9b751ec05efd417dff4570cd6c055", @ANYRES32=r6, @ANYBLOB="0600fd00ad000000000055003d9582bb9dfb703ef49f30cef427a94014005500000000000000a3fc14bc763248fefb520500200133000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20040000) 3.609310654s ago: executing program 0 (id=943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x4) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f00005a5000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r5, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 3.553240862s ago: executing program 3 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3.381639226s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4101, 0x1005}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000001700)=""/242, 0xf2}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000001c00)=""/4080, 0xff0}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000400)=""/181, 0xb5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8142, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x11, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0xffffff00, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r6}, &(0x7f0000001880), &(0x7f00000018c0)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r5, &(0x7f0000001340)={0xa, 0x4e21, 0x3fff8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'virt_wifi0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r5], 0xdd12}], 0x1}, 0x10) r10 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r10, 0x0, 0xcf, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="5f6bfaba1cb882d38dba842d82e607bd3b655902acce2b8f7d0c922dcb7f44d238652bd1f6b786ec3063210941c28cf5f803ebab852976b584208d624067c6a53c565e91ca8a9312557993bfbbea04b3ea4ff447ad3441cdb37df565da6039", 0x5f}, {&(0x7f00000000c0)="e9ae6d4fee683699d0667fda98644f2571c39a63a50941d68fe606", 0x1b}, {&(0x7f00000001c0)="ffe6ed6046e37536e14cf71e9944ffbdc3f3319cb7a886de8ae7028dd0917168b6b13a92ec921f657c6359ac04a3cec77c7ac7b26237328454616279394cdc5b0f2f4a94594d8189ed172351523dc416806d8067b4caac91e7f18c0a7126a2d0393a510fdf2c81ee8b2bff7addc06c30cef709199683cf417bfee588bc7139c1c22892c068860ac1575e", 0x8a}, {&(0x7f0000002c00)="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", 0x1000}], 0x4, 0x0, 0x0, 0x8010}], 0x1, 0x4000004) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r11, 0x29, 0x21, 0x0, 0x5b) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="440000001000010429049581c25682aa95b0fd7fbd70000000994993ed0000", @ANYRES32=0x0, @ANYBLOB="93200000000000001c0012800c0001006d6163766c616e000c000280080007000800000008000500", @ANYRES64=r12, @ANYBLOB], 0x44}}, 0x20000000) socket$kcm(0x29, 0x0, 0x0) 2.360523275s ago: executing program 3 (id=947): syz_emit_ethernet(0x60, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0x2a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty, [{0x19}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704b10348be00008500000002000000feffff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.132959368s ago: executing program 1 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) unshare(0x20400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x101}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004800}, 0x40) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, 0xffffffffffffffff, 0x3, 0x3) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000003"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r9, 0x401, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000010000304007ac30fdab9ec5e00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010000000000100003800c000100400000000600000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB], 0x5c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20040040) 1.91472521s ago: executing program 3 (id=949): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) listen(r0, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500", @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b702"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f4", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f000000a0c0)=[{0x0}, {&(0x7f0000005c00)=""/203, 0xcb}], 0x2}, 0x1}], 0x1, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001fc80000000000000050a00000000000000000000000600"], 0x2c}}, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) 1.229530798s ago: executing program 3 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x170, 0x32, 0x300, 0x70bd24, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x101}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x5411, &(0x7f00000007c0)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="100100000b060108000000000000000002000001840008800c00078008001c40000000080c000780050015000f0000000c000780080009400000001a18000780140017007465616d5f736c6176655f31000000000c00078008000a40000000040c0007800800084000000084100007800900130073797a32000000000c00078008000840000001ac100007800c00168008000140ac1e000120000880100007800a001100192702c5669d00000c00078008000a40000100000900020073797a30000000004c0007800c001480080001407f0000010c00018008000140ac1414420a001100aaaaaaaaaaaa000008000840000000100900130073797a300000000005000300070000171da2d17f80a973f01cf62fd70005001a0000000000"], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) 1.001194141s ago: executing program 0 (id=951): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x2b00, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 995.06532ms ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 827.109998ms ago: executing program 0 (id=953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000020008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 717.095536ms ago: executing program 1 (id=954): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x800) 669.105504ms ago: executing program 0 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711, @local}, 0x10) (async, rerun: 32) r3 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 32) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) (rerun: 32) 589.214625ms ago: executing program 1 (id=956): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtfilter={0x38, 0x2c, 0xd2f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000085}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 102.67497ms ago: executing program 3 (id=957): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x4040000) 1.245333ms ago: executing program 1 (id=958): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r0, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x1be3}, &(0x7f0000000140)=0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1c}}}}}, 0x36) 0s ago: executing program 3 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000880)="c1de6d7233a30dc5a0ac84df9225d4325a15a7295cf7e6df47390d5db02c64d88b844ff1427d351f48a4ee972e30ff7c400398d46af3453d1bc8b8a3c60b42f680764d9037948c9825e0ec859bbd10723a2ae76d57027ab42d4c2c7b0132782314c5c321bc6cae3b9cd100000000000000000000a5f335a176757b7d1fc29fea2f88f853c061ba6fb820370a506bdabe7997458145497a89e6f2d34304957c51e2b86f505edfc508c9a26a15c52c52d942b9b4d5b6e80924170681d87126b2fc3a910990844755c1cea5d31e7cd2f2c54ced242caf3452596cc994ca20dbb29ecb47b031519a3cd16ad0633daa1200"/253, 0xfd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='xprtrdma_err_vers\x00', r0, 0x0, 0x4000000080000000}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={{0x14, 0x3eb}, [@NFT_MSG_NEWSET={0x198, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x174, 0x12, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x20, 0x1, 0x0, 0x1, @range={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_TO_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "f87f5b5df9a021c9228d5fcd37cf626db6dd9056d170dbc01246a0dbf4612b9fad07a28f76acccccc150123694bb05fd2a245bc9a8ecf803e4bfc50e349a56b59230c3ed43d8bc5356fb02e226c2b25d045a8c68b910881498eed7f06f980a34da5f"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "e206f4a8d8dd502a536ac33650d90f11dda4dfad4f141ace6c4dd080de0bccd3c723f06c268070c14de3bfc90ff316fa8fe1eae8687aff5b0331d19959b407230b0938c53fb46958009a636328fef973"}, @NFTA_DATA_VALUE={0x0, 0x1, "437ff9e898b694e32676504e8c1a4df94759fe921ab9206f036539f4509c16f75ae50963ab8ec14f9979e8091f3485e00a4454132e8f0c2d3103875f6177097649fb5daefa40084524f9122d31558eeadbfb938ad1ddb87e0ce5d3106492e1943785ff4f5bc72728453fda57f52cfb3d22f0cfa12e633c75f9a7967ecde62279fd83944ea32d31570a2e456f28806a82709665cc523144334d"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_TO_DATA={0x0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "a8db209028bd4515e002231e07e3fb43bf791b24ec2657cd5a128b5d05059119473d9c450d35841da9d427aedb24e913c84123f19a7b1e647474ad9270308e9e1509e0a4ca8bf1023f249fc2fb125c9a9652a9be07a1c5091aba2ca6e17d22d906694ff23ee3ac60a7334d6feb3b5e11de3833f20ab7f2151c5148ca56eb"}, @NFTA_DATA_VALUE={0x0, 0x1, "284ccff6e4c54f2199a5465bc17a607c14a90026d178d451d2cff5b839e4dd4c435da802b50f0dc815d95060c861e44c2bdd838d17a5729591011126bbada39287caeadaec600025e9b96143bb7bed816ce959e1146f8a995bd3d3bdff342c8effa0cfa753a8e28f4ab4f22d5c8b5f45e1892b50c1f5543b41e2566b0adb94ac2ec34c321d75bf325cdddacacfd32f8a535f0d1f25f2dfc8fdb532105e8de669f46c0562992ed9af4e712c1189098a7f04d6457734a3630998c48c6413244554c334d5d36c987fb7cb367043076e097a072eb4effbb319e6892e5ff5dd154c9157be36a930910b7b32fcca1c216067e20df8041b630c"}, @NFTA_DATA_VALUE={0x0, 0x1, "6cc441979d987941ae963951e98a705ab1d4a12124b859fd27e74cae8210aebda4bcd80e7654b2454acb8a0282285edf933578681e2015270e9be21e2ca8bbe5984e6134a7f204abd2577fca8bbdfc4f49ac7c44c1eb"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_OP={0x0, 0x2, 0x1, 0x0, 0x1}]}}}, {0x88, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x74, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "24d4afadbf8598ce930d8a34dce8068d35caa4043fe1ab50bb9e7be8265d6ac9e93d9910fc6d6ac756881cd185679f4ad4b36e4ed6b7cb93a54724dd7d9046d5061805"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}]}], {0xfffffffffffffeb4, 0x3f5}}, 0x1c0}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000009c0)=0xe8) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000a00), &(0x7f0000000b80)=r4}, 0x20) kernel console output (not intermixed with test programs): 3][ T6507] ? __pfx_nl80211_connect+0x10/0x10 [ 110.568452][ T6507] ? __pfx_nl80211_post_doit+0x10/0x10 [ 110.568485][ T6507] netlink_rcv_skb+0x208/0x480 [ 110.568513][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.568535][ T6507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.568585][ T6507] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.568621][ T6507] genl_rcv+0x28/0x40 [ 110.568639][ T6507] netlink_unicast+0x7f8/0x9a0 [ 110.568673][ T6507] ? __pfx_netlink_unicast+0x10/0x10 [ 110.568700][ T6507] ? skb_put+0x114/0x1f0 [ 110.568736][ T6507] netlink_sendmsg+0x8c3/0xcd0 [ 110.568777][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.568810][ T6507] ? aa_sock_msg_perm+0x91/0x160 [ 110.568844][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.568872][ T6507] __sock_sendmsg+0x221/0x270 [ 110.568930][ T6507] ____sys_sendmsg+0x523/0x860 [ 110.568960][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.568984][ T6507] ? __fget_files+0x2a/0x420 [ 110.569019][ T6507] ? __fget_files+0x2a/0x420 [ 110.569057][ T6507] __sys_sendmsg+0x271/0x360 [ 110.569083][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.569162][ T6507] ? do_syscall_64+0xb6/0x230 [ 110.569193][ T6507] do_syscall_64+0xf3/0x230 [ 110.569220][ T6507] ? clear_bhb_loop+0x45/0xa0 [ 110.569244][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.569264][ T6507] RIP: 0033:0x7f8f8cb8d169 [ 110.569283][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.569300][ T6507] RSP: 002b:00007f8f8a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.569321][ T6507] RAX: ffffffffffffffda RBX: 00007f8f8cda6080 RCX: 00007f8f8cb8d169 [ 110.569347][ T6507] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.569360][ T6507] RBP: 00007f8f8a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.569372][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.569382][ T6507] R13: 0000000000000001 R14: 00007f8f8cda6080 R15: 00007ffc962fa218 [ 110.569413][ T6507] [ 110.640184][ T6488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.016146][ T6444] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.120919][ T6488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.245004][ T6488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.455502][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 111.813650][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 112.209587][ T6554] FAULT_INJECTION: forcing a failure. [ 112.209587][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 112.233187][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.1.158 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 112.233217][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.233231][ T6554] Call Trace: [ 112.233239][ T6554] [ 112.233248][ T6554] dump_stack_lvl+0x241/0x360 [ 112.233286][ T6554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.233314][ T6554] ? __pfx__printk+0x10/0x10 [ 112.233347][ T6554] ? __pfx___might_resched+0x10/0x10 [ 112.233376][ T6554] should_fail_ex+0x424/0x570 [ 112.233413][ T6554] should_failslab+0xac/0x100 [ 112.233443][ T6554] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 112.233471][ T6554] ? __alloc_skb+0x1c2/0x480 [ 112.233498][ T6554] ? __dev_queue_xmit+0x1780/0x3f60 [ 112.233523][ T6554] __alloc_skb+0x1c2/0x480 [ 112.233561][ T6554] ? do_syscall_64+0xf3/0x230 [ 112.233591][ T6554] ? __pfx___alloc_skb+0x10/0x10 [ 112.233627][ T6554] ? netlink_ack_tlv_len+0x6e/0x200 [ 112.233658][ T6554] netlink_ack+0x147/0xa70 [ 112.233685][ T6554] ? __pfx_nl80211_connect+0x10/0x10 [ 112.233721][ T6554] netlink_rcv_skb+0x296/0x480 [ 112.233750][ T6554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.233773][ T6554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.233823][ T6554] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.233858][ T6554] genl_rcv+0x28/0x40 [ 112.233876][ T6554] netlink_unicast+0x7f8/0x9a0 [ 112.233910][ T6554] ? __pfx_netlink_unicast+0x10/0x10 [ 112.233937][ T6554] ? skb_put+0x114/0x1f0 [ 112.233973][ T6554] netlink_sendmsg+0x8c3/0xcd0 [ 112.234016][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.234050][ T6554] ? aa_sock_msg_perm+0x91/0x160 [ 112.234084][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.234110][ T6554] __sock_sendmsg+0x221/0x270 [ 112.234139][ T6554] ____sys_sendmsg+0x523/0x860 [ 112.234170][ T6554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.234188][ T6554] ? __fget_files+0x2a/0x420 [ 112.234221][ T6554] ? __fget_files+0x2a/0x420 [ 112.234262][ T6554] __sys_sendmsg+0x271/0x360 [ 112.234289][ T6554] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.234370][ T6554] ? do_syscall_64+0xb6/0x230 [ 112.234400][ T6554] do_syscall_64+0xf3/0x230 [ 112.234426][ T6554] ? clear_bhb_loop+0x45/0xa0 [ 112.234451][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.234471][ T6554] RIP: 0033:0x7f3ca8b8d169 [ 112.234490][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.234507][ T6554] RSP: 002b:00007f3ca9946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.234529][ T6554] RAX: ffffffffffffffda RBX: 00007f3ca8da5fa0 RCX: 00007f3ca8b8d169 [ 112.234554][ T6554] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 112.234567][ T6554] RBP: 00007f3ca9946090 R08: 0000000000000000 R09: 0000000000000000 [ 112.234591][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.234602][ T6554] R13: 0000000000000000 R14: 00007f3ca8da5fa0 R15: 00007fff47d44708 [ 112.234633][ T6554] [ 112.828324][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.165'. [ 112.844295][ T6568] Bluetooth: MGMT ver 1.23 [ 112.845544][ T6566] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 112.902581][ T6566] netlink: 192668 bytes leftover after parsing attributes in process `syz.4.166'. [ 113.087902][ T6583] bridge_slave_1: left allmulticast mode [ 113.110393][ T6583] bridge_slave_1: left promiscuous mode [ 113.127087][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.149505][ T6583] bridge_slave_0: left allmulticast mode [ 113.155203][ T6583] bridge_slave_0: left promiscuous mode [ 113.164514][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.516213][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.173'. [ 113.792922][ T6488] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.836387][ T6488] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.871311][ T6488] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.880582][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d076000: rx timeout, send abort [ 113.951749][ T6488] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.380962][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d076800: rx timeout, send abort [ 114.389888][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d076000: abort rx timeout. Force session deactivation [ 114.727858][ T6656] syzkaller1: entered promiscuous mode [ 114.772939][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 114.788556][ T6656] syzkaller1: entered allmulticast mode [ 114.889288][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d076800: abort rx timeout. Force session deactivation [ 114.962422][ T6664] raw_sendmsg: syz.4.187 forgot to set AF_INET. Fix it! [ 114.973911][ T6670] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 115.035530][ T6670] veth0_vlan: left promiscuous mode [ 115.066293][ T6670] veth0_vlan: entered promiscuous mode [ 115.091609][ T6670] team0: Device veth0_vlan failed to register rx_handler [ 115.259002][ T6648] veth0_virt_wifi: entered allmulticast mode [ 115.403565][ T6677] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 115.438916][ T6677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.190'. [ 115.946273][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 116.161260][ T6707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.168866][ T6707] IPv6: NLM_F_CREATE should be set when creating new route [ 116.250981][ T6711] netlink: 5 bytes leftover after parsing attributes in process `syz.4.198'. [ 116.552485][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 117.054759][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.125027][ T6745] netlink: 'syz.1.203': attribute type 8 has an invalid length. [ 117.202471][ T6736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.220162][ T6736] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 117.302543][ T6736] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 117.355064][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 117.390677][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 117.475345][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 117.524872][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 117.840046][ T6755] bridge1: entered promiscuous mode [ 117.855823][ T6753] bridge1: left promiscuous mode [ 118.782216][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 118.808683][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 119.532783][ T6846] geneve2: entered promiscuous mode [ 120.772002][ T6900] __nla_validate_parse: 7 callbacks suppressed [ 120.772024][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.249'. [ 120.797319][ T6899] IPv6: sit1: Disabled Multicast RS [ 120.829767][ T6899] sit1: entered allmulticast mode [ 120.868848][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.250'. [ 121.106161][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 121.247092][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 121.464999][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 121.660624][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 121.687007][ T6934] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 121.716384][ T6934] netlink: 'syz.2.261': attribute type 2 has an invalid length. [ 121.729445][ T6934] netlink: 80 bytes leftover after parsing attributes in process `syz.2.261'. [ 122.122033][ T6957] netlink: 'syz.2.267': attribute type 11 has an invalid length. [ 122.133967][ T6957] netlink: 224 bytes leftover after parsing attributes in process `syz.2.267'. [ 122.223915][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.1.268'. [ 122.264724][ T6959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.268'. [ 122.666501][ T6980] veth0_to_bond: entered promiscuous mode [ 122.790257][ T6980] veth0_to_bond (unregistering): left promiscuous mode [ 122.901970][ T6980] bond0: (slave bond_slave_0): Releasing backup interface [ 123.414364][ T7017] geneve2: entered promiscuous mode [ 123.434392][ T7017] geneve2: entered allmulticast mode [ 123.493296][ T7019] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 123.532081][ T7019] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.714834][ T7034] xt_CT: No such helper "snmp" [ 124.433385][ T7080] Bluetooth: MGMT ver 1.23 [ 125.356215][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 125.560351][ T7140] erspan0: entered promiscuous mode [ 125.717026][ T7150] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 126.123728][ T7165] : entered promiscuous mode [ 126.379411][ T7178] __nla_validate_parse: 13 callbacks suppressed [ 126.379431][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 126.692901][ T7197] netlink: 'syz.2.323': attribute type 39 has an invalid length. [ 126.833139][ T7171] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 127.410177][ T7222] netlink: 'syz.1.330': attribute type 11 has an invalid length. [ 127.417996][ T7222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.330'. [ 127.825004][ T7239] vlan2: entered promiscuous mode [ 127.831188][ T7239] vlan2: entered allmulticast mode [ 127.836794][ T7239] hsr_slave_1: entered allmulticast mode [ 127.869976][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.340'. [ 127.877468][ T7249] sctp: [Deprecated]: syz.2.339 (pid 7249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.877468][ T7249] Use struct sctp_sack_info instead [ 127.896560][ T7246] netlink: 120 bytes leftover after parsing attributes in process `syz.1.340'. [ 127.915233][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 128.079513][ T5862] Bluetooth: hci0: command 0x0401 tx timeout [ 129.050775][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.058490][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.533204][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.562056][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.768044][ T7249] veth0_virt_wifi: left allmulticast mode [ 129.998924][ T7249] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.018702][ T7249] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.027122][ T7249] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.036029][ T7249] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.259332][ T7288] trusted_key: syz.2.343 sent an empty control message without MSG_MORE. [ 130.469881][ T7291] xt_hashlimit: size too large, truncated to 1048576 [ 130.523710][ T7295] netlink: 'syz.0.347': attribute type 12 has an invalid length. [ 130.543526][ T7297] xt_hashlimit: size too large, truncated to 1048576 [ 130.566406][ T7298] netlink: 'syz.0.347': attribute type 12 has an invalid length. [ 130.605973][ T7302] : renamed from bond0 (while UP) [ 131.534575][ T7345] openvswitch: netlink: Flow key attr not present in new flow. [ 131.591031][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.668879][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.874342][ T7345] wireguard0: entered promiscuous mode [ 131.887990][ T7345] wireguard0: entered allmulticast mode [ 131.975317][ T7363] netlink: 'syz.0.361': attribute type 13 has an invalid length. [ 132.004724][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.049255][ T5862] Bluetooth: hci4: link tx timeout [ 132.055411][ T5862] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.078255][ T5856] Bluetooth: hci4: link tx timeout [ 132.083704][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.509270][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 132.688762][ T7378] syzkaller0: entered promiscuous mode [ 132.706838][ T7378] syzkaller0: entered allmulticast mode [ 133.787711][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.377'. [ 133.925052][ T5856] Bluetooth: hci4: link tx timeout [ 133.930472][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.080702][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 134.334978][ T7438] netlink: 'syz.3.378': attribute type 12 has an invalid length. [ 135.254970][ T7424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.262366][ T7424] IPv6: NLM_F_CREATE should be set when creating new route [ 135.272771][ T7431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.377'. [ 135.290920][ T7431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.377'. [ 135.718791][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 135.899373][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 135.967836][ T7470] bond0: (slave bond_slave_0): Releasing backup interface [ 136.046641][ T7470] bond0: (slave bond_slave_1): Releasing backup interface [ 136.148776][ T7470] team0: Port device team_slave_0 removed [ 136.215466][ T7470] team0: Port device team_slave_1 removed [ 136.233962][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.250178][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.271570][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.282571][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.548039][ T7481] IPv6: sit1: Disabled Multicast RS [ 136.555888][ T7481] sit1: entered allmulticast mode [ 137.251725][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 138.119753][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.135900][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.144177][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.152991][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.163627][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.466632][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.483482][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.516753][ T7563] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 138.550040][ T7563] netlink: 10 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.972250][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 139.064781][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.099402][ T7574] batadv_slave_0: entered promiscuous mode [ 139.194213][ T7580] netlink: 'syz.1.411': attribute type 21 has an invalid length. [ 139.231195][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'. [ 139.248634][ T7580] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.411'. [ 139.820120][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 139.845878][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 140.238790][ T5862] Bluetooth: hci4: command tx timeout [ 140.440205][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.465061][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.475225][ T7538] bridge_slave_0: entered allmulticast mode [ 140.498221][ T7538] bridge_slave_0: entered promiscuous mode [ 140.526101][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.561619][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.582380][ T7538] bridge_slave_1: entered allmulticast mode [ 140.593359][ T7538] bridge_slave_1: entered promiscuous mode [ 140.801901][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.836772][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.984784][ T7657] netlink: 68 bytes leftover after parsing attributes in process `syz.1.424'. [ 141.098374][ T7538] team0: Port device team_slave_0 added [ 141.123400][ T7669] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 141.155569][ T7663] netlink: 'syz.4.426': attribute type 10 has an invalid length. [ 141.177879][ T7663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 141.241807][ T7538] team0: Port device team_slave_1 added [ 141.316195][ T7663] team0: entered promiscuous mode [ 141.321603][ T7663] team_slave_0: entered promiscuous mode [ 141.345358][ T7663] team_slave_1: entered promiscuous mode [ 141.372947][ T7663] : entered promiscuous mode [ 141.394659][ T7663] bond_slave_0: entered promiscuous mode [ 141.408940][ T7663] bond_slave_1: entered promiscuous mode [ 141.447321][ T7663] team0: entered allmulticast mode [ 141.455310][ T7663] team_slave_0: entered allmulticast mode [ 141.475870][ T7663] team_slave_1: entered allmulticast mode [ 141.488071][ T7663] : entered allmulticast mode [ 141.495915][ T7663] bond_slave_0: entered allmulticast mode [ 141.505558][ T7663] bond_slave_1: entered allmulticast mode [ 141.535983][ T7663] bridge0: port 3(team0) entered blocking state [ 141.554222][ T7663] bridge0: port 3(team0) entered disabled state [ 141.596736][ T7663] bridge0: port 3(team0) entered blocking state [ 141.603304][ T7663] bridge0: port 3(team0) entered forwarding state [ 141.731144][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.760570][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.831625][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.890783][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.897800][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.945304][ T7695] SET target dimension over the limit! [ 141.961195][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.318665][ T5862] Bluetooth: hci4: command tx timeout [ 142.329843][ T7538] hsr_slave_0: entered promiscuous mode [ 142.343158][ T7538] hsr_slave_1: entered promiscuous mode [ 142.350088][ T7538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.359600][ T7538] Cannot create hsr debugfs directory [ 142.714372][ T7731] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20002 [ 142.732727][ T7733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.360508][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 143.613459][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 143.629231][ T7771] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 143.663498][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 143.787162][ T7538] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.810636][ T7538] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.853879][ T7538] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.880852][ T7538] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.960357][ T7753] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 144.256979][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.311995][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.353261][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.360572][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.398753][ T5862] Bluetooth: hci4: command tx timeout [ 144.421696][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.428945][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.809334][ T7800] bond0: (slave bridge0): Releasing backup interface [ 144.840384][ T7803] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 145.161358][ T7800] bond0: (slave wlan1): Releasing backup interface [ 145.263167][ T7803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.362228][ T5862] Bluetooth: hci3: command 0x0401 tx timeout [ 145.507735][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.608234][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 145.674820][ T7832] x_tables: duplicate underflow at hook 3 [ 145.963556][ T10] IPVS: starting estimator thread 0... [ 146.039209][ T7829] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.048130][ T7829] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.058121][ T7829] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.067373][ T7852] IPVS: using max 37 ests per chain, 88800 per kthread [ 146.074524][ T7829] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.440482][ T7851] erspan0: left promiscuous mode [ 146.449956][ T7864] netlink: 'syz.3.468': attribute type 3 has an invalid length. [ 146.457669][ T7864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.468'. [ 146.480520][ T5862] Bluetooth: hci4: command tx timeout [ 146.744384][ T7851] bridge0: port 3(team0) entered disabled state [ 146.750972][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.758651][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.220595][ T7851] batadv_slave_0: left promiscuous mode [ 147.248041][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.618539][ T7851] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.627634][ T7851] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.637808][ T7851] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.651006][ T7851] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.669609][ T7851] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 147.909301][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 148.060160][ T7538] veth0_vlan: entered promiscuous mode [ 148.066208][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 148.091614][ T7886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 148.126628][ T7886] vti0: entered promiscuous mode [ 148.153595][ T7538] veth1_vlan: entered promiscuous mode [ 148.191748][ T7886] netlink: 84 bytes leftover after parsing attributes in process `syz.1.474'. [ 148.267872][ T7538] veth0_macvtap: entered promiscuous mode [ 148.291379][ T7538] veth1_macvtap: entered promiscuous mode [ 148.529103][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.562249][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.592678][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.667547][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.692725][ T5901] IPVS: starting estimator thread 0... [ 148.698331][ T7902] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 148.704164][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.766436][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.778575][ T7903] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.842589][ T7538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.865527][ T7538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.888523][ T7538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.910203][ T7538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.300526][ T7873] IPVS: starting estimator thread 0... [ 149.414878][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.428711][ T7918] IPVS: using max 28 ests per chain, 67200 per kthread [ 149.455745][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.536457][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.553943][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.826173][ T7932] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 149.901583][ T7926] xt_CT: No such helper "snmp" [ 149.911848][ T7932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.931649][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 150.233601][ T7946] syz.0.488 (7946) used greatest stack depth: 16984 bytes left [ 150.344491][ T7949] vlan0: entered promiscuous mode [ 151.020743][ T198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.070452][ T7968] veth1_macvtap: left promiscuous mode [ 151.092930][ T7968] macsec0: entered promiscuous mode [ 151.098304][ T7968] macsec0: entered allmulticast mode [ 151.132571][ T7965] veth1_macvtap: entered promiscuous mode [ 151.150121][ T7965] veth1_macvtap: entered allmulticast mode [ 151.163739][ T7965] macsec0: left promiscuous mode [ 151.174073][ T7965] macsec0: left allmulticast mode [ 151.188575][ T7965] veth1_macvtap: left allmulticast mode [ 151.257389][ T198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.481476][ T198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.524496][ T7984] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 151.532456][ T7984] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 151.710520][ T198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.844930][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 151.915918][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.932295][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.946061][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.966365][ T7991] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.966982][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.983887][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.134131][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.501'. [ 152.402457][ T8008] netlink: 'syz.1.502': attribute type 9 has an invalid length. [ 152.412106][ T8008] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 152.421667][ T8008] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.502'. [ 152.460417][ T198] bridge_slave_1: left allmulticast mode [ 152.482055][ T198] bridge_slave_1: left promiscuous mode [ 152.507597][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.530116][ T198] bridge_slave_0: left allmulticast mode [ 152.536156][ T198] bridge_slave_0: left promiscuous mode [ 152.548044][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.133790][ T8018] IPVS: set_ctl: invalid protocol: 33 172.20.20.18:20001 [ 153.214327][ T8020] netlink: 84 bytes leftover after parsing attributes in process `syz.4.507'. [ 153.504051][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.518184][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.530837][ T198] bond0 (unregistering): Released all slaves [ 153.584324][ T8020] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 153.622419][ T8020] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 153.649365][ T8020] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 154.078929][ T5862] Bluetooth: hci4: command tx timeout [ 154.243006][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 154.441042][ T198] hsr_slave_0: left promiscuous mode [ 154.465675][ T198] hsr_slave_1: left promiscuous mode [ 154.471744][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 154.489704][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.497235][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.524223][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.533464][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.562955][ T198] veth1_macvtap: left promiscuous mode [ 154.569468][ T198] veth0_macvtap: left promiscuous mode [ 154.575198][ T198] veth1_vlan: left promiscuous mode [ 154.581132][ T198] veth0_vlan: left promiscuous mode [ 155.235324][ T198] team0 (unregistering): Port device team_slave_1 removed [ 155.281405][ T198] team0 (unregistering): Port device team_slave_0 removed [ 155.539158][ T8061] netlink: 45 bytes leftover after parsing attributes in process `syz.0.519'. [ 156.169318][ T5862] Bluetooth: hci4: command tx timeout [ 156.176531][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.188997][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.193794][ T8080] netlink: 256 bytes leftover after parsing attributes in process `syz.4.526'. [ 156.196392][ T7994] bridge_slave_0: entered allmulticast mode [ 156.213943][ T7994] bridge_slave_0: entered promiscuous mode [ 156.223607][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.231720][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.239714][ T7994] bridge_slave_1: entered allmulticast mode [ 156.249074][ T7994] bridge_slave_1: entered promiscuous mode [ 156.252907][ T8080] netlink: 'syz.4.526': attribute type 9 has an invalid length. [ 156.297651][ T8082] netlink: 'syz.0.525': attribute type 298 has an invalid length. [ 156.395529][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.443305][ T8084] bridge0: port 1(batadv1) entered blocking state [ 156.460721][ T8084] bridge0: port 1(batadv1) entered disabled state [ 156.467395][ T8084] batadv1: entered allmulticast mode [ 156.500570][ T8084] batadv1: entered promiscuous mode [ 156.522199][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.687848][ T7994] team0: Port device team_slave_0 added [ 156.725968][ T7994] team0: Port device team_slave_1 added [ 156.959641][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 156.961624][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.969219][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 157.010024][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.065520][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.106863][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.129190][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.225522][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.315722][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 157.526602][ T7994] hsr_slave_0: entered promiscuous mode [ 157.569757][ T7994] hsr_slave_1: entered promiscuous mode [ 157.594910][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.630170][ T7994] Cannot create hsr debugfs directory [ 157.798166][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 158.023486][ T8134] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 158.238831][ T5862] Bluetooth: hci4: command tx timeout [ 158.312077][ T8145] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 158.380021][ T8145] bond1: entered promiscuous mode [ 158.388870][ T8145] bond1: entered allmulticast mode [ 158.395649][ T8145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.419500][ T8145] ip6gretap1: entered promiscuous mode [ 158.425258][ T8145] ip6gretap1: entered allmulticast mode [ 158.433941][ T8145] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 158.490175][ T53] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 158.545441][ T7994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.574800][ T7994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.600597][ T7994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.629163][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 158.640096][ T7994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.722440][ T8154] netlink: 'syz.0.552': attribute type 21 has an invalid length. [ 158.737131][ T8156] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 158.738531][ T8154] netlink: 128 bytes leftover after parsing attributes in process `syz.0.552'. [ 158.752633][ T8156] netlink: 'syz.3.553': attribute type 29 has an invalid length. [ 158.763419][ T8156] netlink: 148 bytes leftover after parsing attributes in process `syz.3.553'. [ 158.780513][ T8154] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 158.788366][ T8154] netlink: 'syz.0.552': attribute type 5 has an invalid length. [ 158.796361][ T8154] netlink: 3 bytes leftover after parsing attributes in process `syz.0.552'. [ 158.807210][ T8156] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 158.815218][ T8156] netlink: 148 bytes leftover after parsing attributes in process `syz.3.553'. [ 158.969051][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.013566][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.068326][ T8163] netlink: 84 bytes leftover after parsing attributes in process `syz.3.556'. [ 159.191789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.199103][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.386140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.393418][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.011052][ T8188] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 160.069797][ T8188] bond0 (unregistering): Released all slaves [ 160.329583][ T5862] Bluetooth: hci4: command tx timeout [ 160.515838][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.675395][ T7994] veth0_vlan: entered promiscuous mode [ 160.716996][ T7994] veth1_vlan: entered promiscuous mode [ 160.802388][ T7994] veth0_macvtap: entered promiscuous mode [ 160.845164][ T7994] veth1_macvtap: entered promiscuous mode [ 160.895460][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.936957][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.985486][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.036386][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.059992][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.085707][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.122351][ T7994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.133749][ T7994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.144055][ T7994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.153642][ T7994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.425125][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 161.499164][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.509205][ T8226] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 161.522825][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.654953][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.694804][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.829033][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.577'. [ 161.885242][ T8240] validate_nla: 3 callbacks suppressed [ 161.885266][ T8240] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 163.415380][ T8285] tipc: Started in network mode [ 163.420354][ T8283] sctp: [Deprecated]: syz.3.589 (pid 8283) Use of int in max_burst socket option deprecated. [ 163.420354][ T8283] Use struct sctp_assoc_value instead [ 163.441868][ T8285] tipc: Node identity , cluster identity 4711 [ 163.486789][ T8285] tipc: Failed to set node id, please configure manually [ 163.516237][ T8285] tipc: Enabling of bearer rejected, failed to enable media [ 163.616835][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.633262][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.646219][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.658591][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.667861][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.942829][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.951478][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.092661][ T8296] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.183007][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 164.221866][ T8296] veth0_to_team: left promiscuous mode [ 164.227580][ T8296] veth0_to_team: left allmulticast mode [ 164.284173][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.299882][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.352375][ T8296] vlan0: left promiscuous mode [ 164.385041][ T8296] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.393804][ T8296] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.402565][ T8296] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.411335][ T8296] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.442903][ T8296] bond1: left promiscuous mode [ 164.447714][ T8296] ip6gretap1: left promiscuous mode [ 164.453640][ T8296] bond1: left allmulticast mode [ 164.458697][ T8296] ip6gretap1: left allmulticast mode [ 164.654177][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 164.740032][ T8334] netlink: 'syz.4.605': attribute type 6 has an invalid length. [ 164.961783][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 165.290560][ T8299] chnl_net:caif_netlink_parms(): no params data found [ 165.312790][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 165.323348][ T8364] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 165.353091][ T8363] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 165.370196][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 165.407114][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 165.427111][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.521088][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.598016][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.629853][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.772244][ T5856] Bluetooth: hci4: command tx timeout [ 165.889181][ T8388] Bluetooth: MGMT ver 1.23 [ 165.900960][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.909462][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.919800][ T8299] bridge_slave_0: entered allmulticast mode [ 165.927776][ T8299] bridge_slave_0: entered promiscuous mode [ 165.937012][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.950238][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.957559][ T8299] bridge_slave_1: entered allmulticast mode [ 165.980553][ T8299] bridge_slave_1: entered promiscuous mode [ 166.137706][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.162581][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.357971][ T8299] team0: Port device team_slave_0 added [ 166.421659][ T8299] team0: Port device team_slave_1 added [ 166.628824][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.655654][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.740098][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.782062][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.816320][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.898900][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.010178][ T8299] hsr_slave_0: entered promiscuous mode [ 167.017045][ T8299] hsr_slave_1: entered promiscuous mode [ 167.024732][ T8299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.033363][ T8299] Cannot create hsr debugfs directory [ 167.436113][ T8437] netlink: 112 bytes leftover after parsing attributes in process `syz.0.636'. [ 167.540320][ T8299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.693155][ T8299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.802985][ T8299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.838627][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 167.927073][ T8299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.035889][ T8443] sctp: [Deprecated]: syz.1.634 (pid 8443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.035889][ T8443] Use struct sctp_sack_info instead [ 168.111365][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.136533][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.145032][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.155505][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.174864][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.280954][ T8299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.331338][ T8299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.374035][ T8299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.421076][ T8299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.907463][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 168.987500][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.089321][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 169.182772][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.193801][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 169.551719][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.558951][ T7083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.722289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.729540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.759518][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.787143][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.811530][ T8445] bridge_slave_0: entered allmulticast mode [ 169.839277][ T8445] bridge_slave_0: entered promiscuous mode [ 169.862503][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.885799][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.909522][ T8445] bridge_slave_1: entered allmulticast mode [ 169.922993][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 169.938936][ T8445] bridge_slave_1: entered promiscuous mode [ 170.076743][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.108254][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.233598][ T8445] team0: Port device team_slave_0 added [ 170.240806][ T5856] Bluetooth: hci2: command tx timeout [ 170.256697][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 170.259933][ T8445] team0: Port device team_slave_1 added [ 170.355928][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.363359][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.398591][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.407470][ T8538] netlink: 'syz.3.659': attribute type 4 has an invalid length. [ 170.420594][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.427591][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.455058][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.532142][ T8299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.563672][ T8299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.611886][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.660'. [ 170.635911][ T8546] netlink: zone id is out of range [ 170.642422][ T8546] netlink: zone id is out of range [ 170.844032][ T8445] hsr_slave_0: entered promiscuous mode [ 170.860755][ T8445] hsr_slave_1: entered promiscuous mode [ 170.867399][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.897155][ T8445] Cannot create hsr debugfs directory [ 171.329254][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.461586][ T8574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.670'. [ 171.671288][ T8299] veth0_vlan: entered promiscuous mode [ 171.744275][ T8299] veth1_vlan: entered promiscuous mode [ 171.854216][ T8299] veth0_macvtap: entered promiscuous mode [ 171.898710][ T8299] veth1_macvtap: entered promiscuous mode [ 172.015403][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 172.053741][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.068230][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.084828][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.148910][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.168770][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.180879][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.211558][ T8299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.230224][ T8299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.242094][ T8299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.252503][ T8299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.297917][ T8445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.319232][ T5862] Bluetooth: hci2: command tx timeout [ 172.331190][ T8445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.385142][ T8445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.423249][ T8445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.531624][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 172.835903][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.879125][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.010664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.036693][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.097608][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.188758][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.270849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.278059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.323352][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.330633][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.581717][ T8632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.687'. [ 173.614568][ T8631] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 173.786524][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 173.836295][ T8638] netlink: 'syz.3.689': attribute type 21 has an invalid length. [ 173.869283][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.689'. [ 173.901561][ T8638] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 173.955068][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 174.214081][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.398879][ T5862] Bluetooth: hci2: command tx timeout [ 174.483082][ T8445] veth0_vlan: entered promiscuous mode [ 174.509461][ T8445] veth1_vlan: entered promiscuous mode [ 174.543220][ T8445] veth0_macvtap: entered promiscuous mode [ 174.556043][ T8445] veth1_macvtap: entered promiscuous mode [ 174.580351][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.592604][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.602752][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.614183][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.626603][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.641663][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.652439][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.663041][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.684303][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.696791][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.716770][ T8445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.726904][ T8445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.760864][ T8445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.788514][ T8445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.846111][ T8659] xfrm1: entered promiscuous mode [ 174.867875][ T8659] xfrm1: entered allmulticast mode [ 174.893654][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 175.087564][ T8670] netlink: 5 bytes leftover after parsing attributes in process `syz.0.692'. [ 175.174099][ T8667] vxcan3: entered allmulticast mode [ 175.352821][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.394959][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.550340][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 175.567443][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 175.581131][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.607024][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.811141][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.822744][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.842600][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.861403][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.870667][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.954370][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 176.513810][ T8718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.707'. [ 176.756753][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 176.930361][ T8726] netlink: 'syz.1.708': attribute type 33 has an invalid length. [ 177.005087][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 177.122360][ T8729] netlink: 'syz.3.709': attribute type 21 has an invalid length. [ 177.130456][ T8729] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.709'. [ 177.199645][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 177.323364][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.341058][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.360064][ T8693] bridge_slave_0: entered allmulticast mode [ 177.371029][ T8693] bridge_slave_0: entered promiscuous mode [ 177.394186][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.411968][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.425359][ T8693] bridge_slave_1: entered allmulticast mode [ 177.444495][ T8693] bridge_slave_1: entered promiscuous mode [ 177.480488][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.490605][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.501685][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.514393][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.532536][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.586224][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.621733][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.710500][ T8693] team0: Port device team_slave_0 added [ 177.745802][ T8693] team0: Port device team_slave_1 added [ 177.803266][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 177.909705][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.917392][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.922984][ T5856] Bluetooth: hci4: command tx timeout [ 177.956389][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.017995][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.034603][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.069062][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.317799][ T8693] hsr_slave_0: entered promiscuous mode [ 178.327492][ T8693] hsr_slave_1: entered promiscuous mode [ 178.334286][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.342013][ T8693] Cannot create hsr debugfs directory [ 178.645181][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 178.787838][ T8771] sctp: [Deprecated]: syz.1.719 (pid 8771) Use of int in max_burst socket option. [ 178.787838][ T8771] Use struct sctp_assoc_value instead [ 179.094301][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.132497][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.150982][ T8738] bridge_slave_0: entered allmulticast mode [ 179.166679][ T8738] bridge_slave_0: entered promiscuous mode [ 179.203228][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.225619][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.238818][ T8738] bridge_slave_1: entered allmulticast mode [ 179.246845][ T8738] bridge_slave_1: entered promiscuous mode [ 179.261744][ T8788] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 179.321811][ T8693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.477174][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.517456][ T8693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.565292][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.600354][ T5856] Bluetooth: hci2: command tx timeout [ 179.861426][ T8693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.899865][ T8814] netlink: 256 bytes leftover after parsing attributes in process `syz.0.728'. [ 179.924655][ T8738] team0: Port device team_slave_0 added [ 179.944655][ T8738] team0: Port device team_slave_1 added [ 179.968733][ T8816] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 179.976446][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 180.000658][ T5856] Bluetooth: hci4: command tx timeout [ 180.007445][ T8816] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 180.151178][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 180.170942][ T8693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.202234][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.218059][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.248193][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.538208][ T8824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.599454][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.606693][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.663701][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.690096][ T8826] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.940696][ T8738] hsr_slave_0: entered promiscuous mode [ 180.948128][ T8738] hsr_slave_1: entered promiscuous mode [ 180.962060][ T8738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.980864][ T8738] Cannot create hsr debugfs directory [ 181.153168][ T8693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.391473][ T8693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.457512][ T8693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.499175][ T8693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.679009][ T5856] Bluetooth: hci2: command tx timeout [ 181.821026][ T8738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.962200][ T8738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.016544][ T8870] netlink: 'syz.1.738': attribute type 12 has an invalid length. [ 182.038691][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.738'. [ 182.078985][ T5856] Bluetooth: hci4: command tx timeout [ 182.129249][ T8738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.178731][ T8873] sctp: [Deprecated]: syz.3.737 (pid 8873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.178731][ T8873] Use struct sctp_sack_info instead [ 182.231632][ T8738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.294851][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.740'. [ 182.427902][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.554838][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.593396][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.600634][ T8859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.624415][ T8738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.673231][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.680484][ T8859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.693910][ T8738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.725982][ T8738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.764946][ T8738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.034753][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 183.065441][ T8897] netlink: 'syz.1.743': attribute type 7 has an invalid length. [ 183.091928][ T8897] netlink: 'syz.1.743': attribute type 8 has an invalid length. [ 183.164030][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 183.166754][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.281757][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.341842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.349190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.407999][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.415273][ T8859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.760434][ T5856] Bluetooth: hci2: command tx timeout [ 183.782866][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.017563][ T8693] veth0_vlan: entered promiscuous mode [ 184.067429][ T8693] veth1_vlan: entered promiscuous mode [ 184.159875][ T5856] Bluetooth: hci4: command tx timeout [ 184.368689][ T8693] veth0_macvtap: entered promiscuous mode [ 184.385075][ T8693] veth1_macvtap: entered promiscuous mode [ 184.515198][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.541888][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.555628][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.567705][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.578227][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.589093][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.601115][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.671651][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.729960][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.748608][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.768841][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.780740][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.798082][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.852220][ T8924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.750'. [ 184.870235][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.883294][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.033224][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 185.156170][ T8693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.188845][ T8693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.207701][ T8926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'. [ 185.219280][ T8693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.228034][ T8693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.566453][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.586329][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.651669][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.688226][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.849127][ T5862] Bluetooth: hci2: command tx timeout [ 186.035433][ T8738] veth0_vlan: entered promiscuous mode [ 186.137520][ T8738] veth1_vlan: entered promiscuous mode [ 186.441277][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 186.683312][ T8738] veth0_macvtap: entered promiscuous mode [ 186.717060][ T8738] veth1_macvtap: entered promiscuous mode [ 186.804316][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.848805][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.868639][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.888666][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.908567][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.938511][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.958936][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.978527][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.000114][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.052769][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.075223][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.089051][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.100300][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.110581][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.121983][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.133674][ T8738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.144809][ T8738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.156869][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.200994][ T8738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.218450][ T8738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.227214][ T8738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.247400][ T8738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.434513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.458799][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.538217][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.547351][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.241988][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 188.701717][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.714962][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.729470][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.741035][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.756010][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.153410][ T8977] netlink: 248 bytes leftover after parsing attributes in process `syz.3.759'. [ 189.324412][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.337078][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.346027][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.355692][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.366591][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.553383][ T8982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.760'. [ 189.665609][ T8972] chnl_net:caif_netlink_parms(): no params data found [ 190.167221][ T8897] Set syz1 is full, maxelem 65536 reached [ 190.261867][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.271555][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.289785][ T8972] bridge_slave_0: entered allmulticast mode [ 190.299649][ T8972] bridge_slave_0: entered promiscuous mode [ 190.332315][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 190.357855][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 190.413004][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.427398][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 190.441096][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.448843][ T8972] bridge_slave_1: entered allmulticast mode [ 190.457969][ T8972] bridge_slave_1: entered promiscuous mode [ 190.772564][ T8972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.796223][ T8972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.809135][ T5862] Bluetooth: hci2: command tx timeout [ 190.924374][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 191.011518][ T8972] team0: Port device team_slave_0 added [ 191.013147][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 191.031189][ T8972] team0: Port device team_slave_1 added [ 191.059691][ T9023] netlink: 'syz.0.770': attribute type 4 has an invalid length. [ 191.095900][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 191.149733][ T9035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.771'. [ 191.293684][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.300898][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.329551][ T8972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.339517][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 191.342922][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.355937][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.386347][ T8972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.438863][ T5862] Bluetooth: hci4: command tx timeout [ 191.703441][ T8972] hsr_slave_0: entered promiscuous mode [ 191.710560][ T8972] hsr_slave_1: entered promiscuous mode [ 191.720375][ T8972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.728119][ T8972] Cannot create hsr debugfs directory [ 191.792913][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.823619][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.851995][ T8978] bridge_slave_0: entered allmulticast mode [ 191.870945][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 191.884034][ T8978] bridge_slave_0: entered promiscuous mode [ 191.977934][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.003606][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.018925][ T8978] bridge_slave_1: entered allmulticast mode [ 192.050626][ T8978] bridge_slave_1: entered promiscuous mode [ 192.265694][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.344204][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.591659][ T8978] team0: Port device team_slave_0 added [ 192.642492][ T8978] team0: Port device team_slave_1 added [ 192.709681][ T9081] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.785'. [ 192.878788][ T5862] Bluetooth: hci2: command tx timeout [ 192.921560][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.936994][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.969609][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.985134][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.994574][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.059893][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.305912][ T9097] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 193.320888][ T8972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.381606][ T8978] hsr_slave_0: entered promiscuous mode [ 193.389563][ T8978] hsr_slave_1: entered promiscuous mode [ 193.398191][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.405979][ T8978] Cannot create hsr debugfs directory [ 193.462156][ T9097] bond2: entered promiscuous mode [ 193.468235][ T9097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.518944][ T5862] Bluetooth: hci4: command tx timeout [ 193.519703][ T9100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.551699][ T9100] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 193.564950][ T9100] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 193.579368][ T9100] bond2: (slave ip6gre1): making interface the new active one [ 193.587245][ T9100] ip6gre1: entered promiscuous mode [ 193.596634][ T9100] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 193.725568][ T8972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.894108][ T8972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.040617][ T8972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.333700][ T9121] xt_TCPMSS: Only works on TCP SYN packets [ 194.597096][ T8972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.671556][ T8972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.830056][ T8978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.869470][ T8972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.907721][ T8972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.963095][ T5862] Bluetooth: hci2: command tx timeout [ 194.990386][ T8978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.122612][ T9151] netlink: 'syz.3.807': attribute type 21 has an invalid length. [ 195.179696][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 195.229750][ T8978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.389636][ T8978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.529017][ T9162] vlan2: entered promiscuous mode [ 195.534979][ T9162] bridge0: entered promiscuous mode [ 195.546706][ T9162] vlan2: entered allmulticast mode [ 195.559867][ T9162] bridge0: entered allmulticast mode [ 195.603817][ T5862] Bluetooth: hci4: command tx timeout [ 195.692065][ T8972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.762073][ T8972] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.844129][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.851396][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.938344][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.945640][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.155585][ T8978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.187465][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 196.210231][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 196.227537][ T8978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.256398][ T8978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.344568][ T8978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.534124][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 196.563587][ T9188] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 196.571945][ T9188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.818'. [ 196.586285][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 196.742052][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.816508][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.865266][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.872529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.885146][ T9199] bridge0: port 1(macsec0) entered blocking state [ 196.896076][ T9199] bridge0: port 1(macsec0) entered disabled state [ 196.903150][ T9199] macsec0: entered allmulticast mode [ 196.912563][ T9199] veth1_macvtap: entered allmulticast mode [ 196.921185][ T9199] macsec0: entered promiscuous mode [ 196.982125][ T9202] IPVS: set_ctl: invalid protocol: 1 172.20.20.11:20003 [ 196.990773][ T8972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.040945][ T5862] Bluetooth: hci2: command tx timeout [ 197.054011][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.061269][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.384558][ T8972] veth0_vlan: entered promiscuous mode [ 197.430549][ T9210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 197.455714][ T8972] veth1_vlan: entered promiscuous mode [ 197.642275][ T8972] veth0_macvtap: entered promiscuous mode [ 197.678604][ T5862] Bluetooth: hci4: command tx timeout [ 197.693342][ T8972] veth1_macvtap: entered promiscuous mode [ 197.792719][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.842315][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.869617][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.901842][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.920869][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.945675][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.957977][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.969549][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.980122][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.991298][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.006203][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.102351][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.124826][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.140033][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.164904][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.184584][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.195976][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.206482][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.217520][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.228286][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.266027][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.288015][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.310865][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.339874][ T9235] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 198.351070][ T8972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.394596][ T8972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.429689][ T8972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.462632][ T8972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.820182][ T9248] bond0: (slave team0): Releasing backup interface [ 198.854195][ T9248] batman_adv: batadv0: Removing interface: dummy0 [ 198.919920][ T9248] bridge_slave_0: left allmulticast mode [ 198.925648][ T9248] bridge_slave_0: left promiscuous mode [ 198.948839][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.974720][ T9248] bridge_slave_1: left allmulticast mode [ 198.980680][ T9248] bridge_slave_1: left promiscuous mode [ 198.996727][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.027350][ T9248] bond0: (slave bond_slave_1): Releasing backup interface [ 199.056674][ T9248] team0: Port device team_slave_0 removed [ 199.068719][ T9248] team0: Port device team_slave_1 removed [ 199.075083][ T9248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.095159][ T9248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.142349][ T9248] bond1: (slave ip6gretap1): Removing an active aggregator [ 199.151670][ T9248] bond1: (slave ip6gretap1): Releasing backup interface [ 199.181018][ T9248] bond2: (slave ip6gre1): Releasing backup interface [ 199.187875][ T9248] ip6gre1: left promiscuous mode [ 199.275081][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.287248][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.544007][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.563331][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.852994][ T8978] veth0_vlan: entered promiscuous mode [ 199.900403][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 199.930037][ T9283] sctp: [Deprecated]: syz.3.842 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.930037][ T9283] Use struct sctp_sack_info instead [ 199.978966][ T8978] veth1_vlan: entered promiscuous mode [ 200.154026][ T9290] netlink: 248 bytes leftover after parsing attributes in process `syz.1.844'. [ 200.279724][ T9294] vti0: left promiscuous mode [ 200.327360][ T9294] xfrm1: left promiscuous mode [ 200.368911][ T9294] xfrm1: left allmulticast mode [ 200.434575][ T8978] veth0_macvtap: entered promiscuous mode [ 200.500784][ T8978] veth1_macvtap: entered promiscuous mode [ 200.605598][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.621619][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.631954][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.643799][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.655246][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.666544][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.676689][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.697568][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.721905][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.766146][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.787924][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.817951][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.848285][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.873055][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.884813][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.912539][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.933615][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.949472][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.963869][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.973851][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.984494][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.994448][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.004948][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.017423][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.028003][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.040835][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.059243][ T8978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.068036][ T8978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.077371][ T8978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.090131][ T8978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.192402][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.226533][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.265346][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.275003][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.066192][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.077033][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.103532][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.117588][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.127171][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.455592][ T9315] chnl_net:caif_netlink_parms(): no params data found [ 202.495077][ T9322] netlink: 248 bytes leftover after parsing attributes in process `syz.3.853'. [ 202.745373][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 202.862321][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.877722][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.896246][ T9315] bridge_slave_0: entered allmulticast mode [ 202.913145][ T9315] bridge_slave_0: entered promiscuous mode [ 202.949839][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.970232][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.977880][ T9315] bridge_slave_1: entered allmulticast mode [ 203.030517][ T9315] bridge_slave_1: entered promiscuous mode [ 203.067836][ T9337] netlink: 268 bytes leftover after parsing attributes in process `syz.3.855'. [ 203.094769][ T9337] unsupported nla_type 65024 [ 203.101480][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.115478][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.133463][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.143953][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.152949][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.220102][ T9315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.236943][ T9315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.416783][ T9315] team0: Port device team_slave_0 added [ 203.447609][ T9315] team0: Port device team_slave_1 added [ 203.477646][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 203.655897][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.693538][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.746126][ T9315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.774763][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.788556][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.845321][ T9315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.037903][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 204.067839][ T9315] hsr_slave_0: entered promiscuous mode [ 204.075476][ T9315] hsr_slave_1: entered promiscuous mode [ 204.087170][ T9315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.115930][ T9315] Cannot create hsr debugfs directory [ 204.158750][ T5862] Bluetooth: hci2: command tx timeout [ 204.219418][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 204.486065][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 204.790922][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 204.806036][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 204.839338][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 204.987840][ T9315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.199980][ T5862] Bluetooth: hci4: command tx timeout [ 205.274221][ T9315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.711899][ T9315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.945939][ T9315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.019464][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.030548][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.036624][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 206.037945][ T9338] bridge_slave_0: entered allmulticast mode [ 206.055616][ T9338] bridge_slave_0: entered promiscuous mode [ 206.080166][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.098779][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.128873][ T9338] bridge_slave_1: entered allmulticast mode [ 206.137325][ T9338] bridge_slave_1: entered promiscuous mode [ 206.242741][ T5862] Bluetooth: hci2: command tx timeout [ 206.294440][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.432620][ T9437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.446145][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.467099][ T9437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.512150][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.524805][ T9439] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 206.736715][ T9338] team0: Port device team_slave_0 added [ 206.750709][ T9338] team0: Port device team_slave_1 added [ 206.995768][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.010916][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.037188][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.262567][ T9315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.288964][ T5862] Bluetooth: hci4: command tx timeout [ 207.324356][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.391023][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.458932][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.541233][ T9315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.611913][ T9468] __nla_validate_parse: 2 callbacks suppressed [ 207.611939][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 207.632216][ T9468] netlink: 112 bytes leftover after parsing attributes in process `syz.0.891'. [ 207.643728][ T9315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.685433][ T9469] netlink: zone id is out of range [ 207.690834][ T9469] netlink: zone id is out of range [ 207.696072][ T9469] netlink: zone id is out of range [ 207.723738][ T9469] netlink: zone id is out of range [ 207.737230][ T9469] netlink: zone id is out of range [ 207.750779][ T9469] netlink: zone id is out of range [ 207.770195][ T9469] netlink: zone id is out of range [ 207.775390][ T9469] netlink: zone id is out of range [ 207.794953][ T9315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.831143][ T9469] netlink: zone id is out of range [ 207.849518][ T9338] hsr_slave_0: entered promiscuous mode [ 207.864911][ T9338] hsr_slave_1: entered promiscuous mode [ 207.889945][ T9338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.907899][ T9338] Cannot create hsr debugfs directory [ 208.300053][ T9481] tipc: Enabling of bearer rejected, failed to enable media [ 208.318757][ T5862] Bluetooth: hci2: command tx timeout [ 208.554444][ T9494] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 208.622507][ T9494] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.855304][ T9338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.132963][ T9514] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 209.369096][ T5862] Bluetooth: hci4: command tx timeout [ 209.388222][ T9338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.601974][ T9338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.851758][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.961118][ T9338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.088256][ T9315] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.150923][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 210.161728][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.168969][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.204080][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.211351][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.415946][ T5851] Bluetooth: hci2: command tx timeout [ 210.694991][ T9338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.755247][ T9338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.824075][ T9338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.880828][ T9338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.342599][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.434660][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.453466][ T5856] Bluetooth: hci4: command tx timeout [ 211.562571][ T9581] tipc: Started in network mode [ 211.571909][ T9581] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 211.584402][ T9581] tipc: Enabling of bearer rejected, failed to enable media [ 211.628093][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.635440][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 211.696444][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.703722][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.754476][ T9581] Cannot find add_set index 0 as target [ 211.798405][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.805646][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.850291][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 211.915492][ T9315] veth0_vlan: entered promiscuous mode [ 211.967571][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 212.017361][ T9315] veth1_vlan: entered promiscuous mode [ 212.235436][ T9315] veth0_macvtap: entered promiscuous mode [ 212.286604][ T9315] veth1_macvtap: entered promiscuous mode [ 212.309461][ T9604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'. [ 212.506024][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.568789][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.608607][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.640350][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.669720][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.692626][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.709147][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.722616][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.728827][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 212.738268][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.753555][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.763823][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.776696][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.791652][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.804534][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.823141][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.882199][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.915113][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.933406][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.944699][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.955078][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.995286][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.006515][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.025905][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.046318][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.060360][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.070881][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.081824][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.095882][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.107050][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.132581][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.185885][ T9631] sctp: [Deprecated]: syz.3.929 (pid 9631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.185885][ T9631] Use struct sctp_sack_info instead [ 213.275369][ T9315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.296760][ T9315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.308835][ T9315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.317754][ T9315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.403296][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.668626][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.684675][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.962446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.018624][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.346240][ T9654] net_ratelimit: 20 callbacks suppressed [ 214.346263][ T9654] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 214.681600][ T9338] veth0_vlan: entered promiscuous mode [ 214.749319][ T9338] veth1_vlan: entered promiscuous mode [ 214.863444][ T9338] veth0_macvtap: entered promiscuous mode [ 214.909188][ T9338] veth1_macvtap: entered promiscuous mode [ 214.974067][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.985940][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.996102][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.006832][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.016787][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.027580][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.039778][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.062241][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.072632][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.083745][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.094493][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.105084][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.116166][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.127564][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.139791][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.160105][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.172627][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.194198][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.205238][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.216460][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.229990][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.256069][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.270076][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.280171][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.290852][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.300923][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.311885][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.321892][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.332725][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.351828][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.363437][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.373831][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.385521][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.397134][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.420127][ T9338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.430502][ T9338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.440394][ T9338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.452248][ T9338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.563760][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.579313][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.657498][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.665485][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.097103][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 216.307932][ T9681] syzkaller1: entered promiscuous mode [ 216.327624][ T9681] syzkaller1: entered allmulticast mode [ 216.637819][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.651278][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.661467][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.670901][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.682985][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.923943][ T9683] chnl_net:caif_netlink_parms(): no params data found [ 217.155097][ T9700] xt_hashlimit: size too large, truncated to 1048576 [ 217.205078][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.239673][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.247129][ T9683] bridge_slave_0: entered allmulticast mode [ 217.257021][ T9700] syz.0.943: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.308624][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.0.943 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 217.308655][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.308668][ T9700] Call Trace: [ 217.308676][ T9700] [ 217.308686][ T9700] dump_stack_lvl+0x241/0x360 [ 217.308737][ T9700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.308765][ T9700] ? __pfx__printk+0x10/0x10 [ 217.308792][ T9700] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.308823][ T9700] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.308851][ T9700] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 217.308883][ T9700] warn_alloc+0x27c/0x410 [ 217.308923][ T9700] ? __pfx_warn_alloc+0x10/0x10 [ 217.308963][ T9700] ? htable_create+0x10c/0x890 [ 217.309004][ T9700] ? __get_vm_area_node+0x1c8/0x2d0 [ 217.309031][ T9700] ? __get_vm_area_node+0x25c/0x2d0 [ 217.309066][ T9700] __vmalloc_node_range_noprof+0x634/0x1390 [ 217.309126][ T9700] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.309159][ T9700] ? __kasan_kmalloc_large+0x1a/0xa0 [ 217.309189][ T9700] ? htable_create+0x10c/0x890 [ 217.309221][ T9700] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 217.309250][ T9700] ? htable_create+0x10c/0x890 [ 217.309278][ T9700] ? htable_create+0x10c/0x890 [ 217.309307][ T9700] ? hashlimit_pernet+0x23/0x240 [ 217.309344][ T9700] htable_create+0x10c/0x890 [ 217.309401][ T9700] hashlimit_mt_check_common+0x763/0xa50 [ 217.309445][ T9700] hashlimit_mt_check_v1+0x2ec/0x550 [ 217.309490][ T9700] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 217.309526][ T9700] ? xt_find_match+0x1e5/0x240 [ 217.309559][ T9700] ? __mutex_unlock_slowpath+0x229/0x800 [ 217.309592][ T9700] xt_check_match+0x36a/0xa40 [ 217.309629][ T9700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.309659][ T9700] ? __pfx_xt_check_match+0x10/0x10 [ 217.309718][ T9700] ? xt_find_match+0x1e5/0x240 [ 217.309756][ T9700] translate_table+0x1721/0x24b0 [ 217.309782][ T9700] ? __x64_sys_setsockopt+0x1ee/0x280 [ 217.309812][ T9700] ? do_syscall_64+0xf3/0x230 [ 217.309836][ T9700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.309887][ T9700] ? __pfx_translate_table+0x10/0x10 [ 217.309945][ T9700] ? copy_from_sockptr_offset+0x60/0xb0 [ 217.309976][ T9700] do_ip6t_set_ctl+0xe53/0x1270 [ 217.310015][ T9700] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 217.310061][ T9700] ? __mutex_unlock_slowpath+0x229/0x800 [ 217.310098][ T9700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.310131][ T9700] ? futex_wake+0x525/0x5d0 [ 217.310161][ T9700] nf_setsockopt+0x295/0x2c0 [ 217.310200][ T9700] rawv6_setsockopt+0x2b3/0x6d0 [ 217.310234][ T9700] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 217.310266][ T9700] ? aa_sock_opt_perm+0x79/0x120 [ 217.310293][ T9700] ? sock_common_setsockopt+0x37/0xc0 [ 217.310323][ T9700] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.310349][ T9700] do_sock_setsockopt+0x3b1/0x710 [ 217.310388][ T9700] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.310417][ T9700] ? __fget_files+0x2a/0x420 [ 217.310451][ T9700] ? __fget_files+0x39d/0x420 [ 217.310503][ T9700] ? __fget_files+0x2a/0x420 [ 217.310544][ T9700] __x64_sys_setsockopt+0x1ee/0x280 [ 217.310586][ T9700] do_syscall_64+0xf3/0x230 [ 217.310613][ T9700] ? clear_bhb_loop+0x45/0xa0 [ 217.310650][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.310670][ T9700] RIP: 0033:0x7fe547f8d169 [ 217.310695][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.310713][ T9700] RSP: 002b:00007fe545dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.310735][ T9700] RAX: ffffffffffffffda RBX: 00007fe5481a6080 RCX: 00007fe547f8d169 [ 217.310750][ T9700] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 217.310763][ T9700] RBP: 00007fe54800e990 R08: 00000000000004c0 R09: 0000000000000000 [ 217.310775][ T9700] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 217.310789][ T9700] R13: 0000000000000000 R14: 00007fe5481a6080 R15: 00007ffe8aed72a8 [ 217.310821][ T9700] [ 217.321233][ T9683] bridge_slave_0: entered promiscuous mode [ 217.338557][ T9700] Mem-Info: [ 217.738071][ T9695] tipc: New replicast peer: 255.255.255.255 [ 217.745766][ T9700] active_anon:5180 inactive_anon:0 isolated_anon:0 [ 217.745766][ T9700] active_file:1447 inactive_file:38377 isolated_file:0 [ 217.745766][ T9700] unevictable:768 dirty:67 writeback:0 [ 217.745766][ T9700] slab_reclaimable:10980 slab_unreclaimable:130688 [ 217.745766][ T9700] mapped:26750 shmem:1439 pagetables:807 [ 217.745766][ T9700] sec_pagetables:0 bounce:0 [ 217.745766][ T9700] kernel_misc_reclaimable:0 [ 217.745766][ T9700] free:1310333 free_pcp:722 free_cma:0 [ 217.787851][ T9695] tipc: Enabled bearer , priority 10 [ 217.807826][ T9708] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.840955][ T9700] Node 0 active_anon:20720kB inactive_anon:0kB active_file:5788kB inactive_file:153436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107000kB dirty:268kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13324kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.878042][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.909788][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.938955][ T9683] bridge_slave_1: entered allmulticast mode [ 217.969331][ T9683] bridge_slave_1: entered promiscuous mode [ 217.975347][ T9700] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.069281][ T9700] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.120397][ T9700] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 218.126909][ T9700] Node 0 DMA32 free:1296676kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20776kB inactive_anon:0kB active_file:5788kB inactive_file:153348kB unevictable:1536kB writepending:268kB present:3129332kB managed:2547532kB mlocked:0kB bounce:0kB free_pcp:6028kB local_pcp:908kB free_cma:0kB [ 218.127319][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.172369][ T9708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.946'. [ 218.215011][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.225752][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.240682][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.248740][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.351041][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.377805][ T9700] lowmem_reserve[]: 0 0 0 0 0 [ 218.408632][ T9700] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 218.465294][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.622789][ T9700] lowmem_reserve[]: 0 0 0 0 0 [ 218.627612][ T9700] Node 1 Normal free:3915240kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.724688][ T5856] Bluetooth: hci2: command tx timeout [ 218.778576][ T9700] lowmem_reserve[]: 0 0 0 0 0 [ 218.783398][ T9700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.900202][ T5898] tipc: Node number set to 4278255617 [ 218.925412][ T9700] Node 0 DMA32: 2*4kB (UE) 2*8kB (UE) 104*16kB (ME) 127*32kB (UME) 78*64kB (UME) 28*128kB (UME) 27*256kB (UM) 13*512kB (UM) 8*1024kB (UME) 4*2048kB (ME) 306*4096kB (UM) = 1297656kB [ 218.955906][ T9719] bridge0: port 2(vlan2) entered blocking state [ 219.000792][ T9719] bridge0: port 2(vlan2) entered disabled state [ 219.007475][ T9719] vlan2: entered allmulticast mode [ 219.058584][ T9700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 219.088474][ T9719] bridge0: entered allmulticast mode [ 219.110341][ T9700] Node 1 Normal: 222*4kB (UE) 50*8kB (UME) 42*16kB (UME) 198*32kB (UME) 106*64kB (UME) 24*128kB (UME) 13*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3915240kB [ 219.112756][ T9719] vlan2: left allmulticast mode [ 219.150817][ T9700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.179893][ T9700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.200304][ T9719] bridge0: left allmulticast mode [ 219.222691][ T9700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.258199][ T9700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.275833][ T9683] team0: Port device team_slave_0 added [ 219.287730][ T9700] 41269 total pagecache pages [ 219.302703][ T9700] 0 pages in swap cache [ 219.323777][ T9700] Free swap = 124996kB [ 219.337769][ T9700] Total swap = 124996kB [ 219.371749][ T9700] 2097051 pages RAM [ 219.373611][ T9683] team0: Port device team_slave_1 added [ 219.384745][ T9700] 0 pages HighMem/MovableOnly [ 219.400038][ T9700] 428510 pages reserved [ 219.421266][ T9700] 0 pages cma reserved [ 219.600665][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.629449][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.716368][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.760064][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.767164][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.821171][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.865572][ T9734] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 220.113167][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.167175][ T9734] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.213812][ T9683] hsr_slave_0: entered promiscuous mode [ 220.221092][ T9683] hsr_slave_1: entered promiscuous mode [ 220.227476][ T9683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.238099][ T9683] Cannot create hsr debugfs directory [ 220.320107][ T5862] Bluetooth: hci4: command tx timeout [ 220.676732][ T9761] [ 220.679140][ T9761] ====================================================== [ 220.686188][ T9761] WARNING: possible circular locking dependency detected [ 220.693243][ T9761] 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 Not tainted [ 220.700379][ T9761] ------------------------------------------------------ [ 220.707412][ T9761] syz.3.959/9761 is trying to acquire lock: [ 220.713317][ T9761] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0 [ 220.722498][ T9761] [ 220.722498][ T9761] but task is already holding lock: [ 220.729870][ T9761] ffff88804d740aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 220.739991][ T9761] [ 220.739991][ T9761] which lock already depends on the new lock. [ 220.739991][ T9761] [ 220.750402][ T9761] [ 220.750402][ T9761] the existing dependency chain (in reverse order) is: [ 220.759418][ T9761] [ 220.759418][ T9761] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 220.768037][ T9761] lock_acquire+0x116/0x2f0 [ 220.773079][ T9761] __mutex_lock+0x1a5/0x10c0 [ 220.778207][ T9761] smc_switch_to_fallback+0x35/0xda0 [ 220.784069][ T9761] smc_sendmsg+0x11f/0x530 [ 220.789024][ T9761] __sock_sendmsg+0x221/0x270 [ 220.794232][ T9761] __sys_sendto+0x365/0x4c0 [ 220.799268][ T9761] __x64_sys_sendto+0xde/0x100 [ 220.804566][ T9761] do_syscall_64+0xf3/0x230 [ 220.809630][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.816052][ T9761] [ 220.816052][ T9761] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 220.823718][ T9761] lock_acquire+0x116/0x2f0 [ 220.828760][ T9761] lock_sock_nested+0x48/0x100 [ 220.834057][ T9761] do_ip_setsockopt+0x17e9/0x39c0 [ 220.839612][ T9761] ip_setsockopt+0x63/0x100 [ 220.844646][ T9761] do_sock_setsockopt+0x3b1/0x710 [ 220.850258][ T9761] __x64_sys_setsockopt+0x1ee/0x280 [ 220.855994][ T9761] do_syscall_64+0xf3/0x230 [ 220.861030][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.867456][ T9761] [ 220.867456][ T9761] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 220.874689][ T9761] validate_chain+0xa69/0x24e0 [ 220.879992][ T9761] __lock_acquire+0xad5/0xd80 [ 220.885200][ T9761] lock_acquire+0x116/0x2f0 [ 220.890231][ T9761] __mutex_lock+0x1a5/0x10c0 [ 220.895355][ T9761] do_ip_setsockopt+0x10f0/0x39c0 [ 220.900915][ T9761] ip_setsockopt+0x63/0x100 [ 220.905948][ T9761] smc_setsockopt+0x25c/0xd50 [ 220.911159][ T9761] do_sock_setsockopt+0x3b1/0x710 [ 220.916721][ T9761] __x64_sys_setsockopt+0x1ee/0x280 [ 220.922455][ T9761] do_syscall_64+0xf3/0x230 [ 220.927518][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.933945][ T9761] [ 220.933945][ T9761] other info that might help us debug this: [ 220.933945][ T9761] [ 220.944183][ T9761] Chain exists of: [ 220.944183][ T9761] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 220.944183][ T9761] [ 220.957810][ T9761] Possible unsafe locking scenario: [ 220.957810][ T9761] [ 220.965267][ T9761] CPU0 CPU1 [ 220.970636][ T9761] ---- ---- [ 220.976013][ T9761] lock(&smc->clcsock_release_lock); [ 220.981410][ T9761] lock(sk_lock-AF_INET); [ 220.988371][ T9761] lock(&smc->clcsock_release_lock); [ 220.996287][ T9761] lock(rtnl_mutex); [ 221.000280][ T9761] [ 221.000280][ T9761] *** DEADLOCK *** [ 221.000280][ T9761] [ 221.008424][ T9761] 1 lock held by syz.3.959/9761: [ 221.013376][ T9761] #0: ffff88804d740aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 221.023936][ T9761] [ 221.023936][ T9761] stack backtrace: [ 221.029844][ T9761] CPU: 0 UID: 0 PID: 9761 Comm: syz.3.959 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 221.029869][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.029880][ T9761] Call Trace: [ 221.029889][ T9761] [ 221.029897][ T9761] dump_stack_lvl+0x241/0x360 [ 221.029926][ T9761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.029949][ T9761] ? __pfx__printk+0x10/0x10 [ 221.029972][ T9761] ? print_lock+0x171/0x1a0 [ 221.029993][ T9761] print_circular_bug+0x2e1/0x300 [ 221.030015][ T9761] check_noncircular+0x142/0x160 [ 221.030038][ T9761] validate_chain+0xa69/0x24e0 [ 221.030061][ T9761] ? finish_task_switch+0x1e5/0x870 [ 221.030093][ T9761] __lock_acquire+0xad5/0xd80 [ 221.030113][ T9761] lock_acquire+0x116/0x2f0 [ 221.030128][ T9761] ? do_ip_setsockopt+0x10f0/0x39c0 [ 221.030152][ T9761] __mutex_lock+0x1a5/0x10c0 [ 221.030173][ T9761] ? do_ip_setsockopt+0x10f0/0x39c0 [ 221.030192][ T9761] ? look_up_lock_class+0x7b/0x170 [ 221.030213][ T9761] ? register_lock_class+0x54/0x330 [ 221.030240][ T9761] ? do_ip_setsockopt+0x10f0/0x39c0 [ 221.030259][ T9761] ? __pfx___mutex_lock+0x10/0x10 [ 221.030278][ T9761] ? __lock_acquire+0xad5/0xd80 [ 221.030299][ T9761] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.030322][ T9761] do_ip_setsockopt+0x10f0/0x39c0 [ 221.030344][ T9761] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 221.030372][ T9761] ? smc_setsockopt+0x1b2/0xd50 [ 221.030393][ T9761] ? __pfx___mutex_lock+0x10/0x10 [ 221.030419][ T9761] ip_setsockopt+0x63/0x100 [ 221.030437][ T9761] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 221.030464][ T9761] smc_setsockopt+0x25c/0xd50 [ 221.030485][ T9761] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.030505][ T9761] ? __pfx_smc_setsockopt+0x10/0x10 [ 221.030524][ T9761] ? aa_sock_opt_perm+0x79/0x120 [ 221.030548][ T9761] ? __pfx_smc_setsockopt+0x10/0x10 [ 221.030568][ T9761] do_sock_setsockopt+0x3b1/0x710 [ 221.030596][ T9761] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 221.030622][ T9761] ? __fget_files+0x2a/0x420 [ 221.030647][ T9761] ? __fget_files+0x39d/0x420 [ 221.030670][ T9761] ? __fget_files+0x2a/0x420 [ 221.030697][ T9761] __x64_sys_setsockopt+0x1ee/0x280 [ 221.030725][ T9761] do_syscall_64+0xf3/0x230 [ 221.030747][ T9761] ? clear_bhb_loop+0x45/0xa0 [ 221.030767][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.030786][ T9761] RIP: 0033:0x7fe1df58d169 [ 221.030803][ T9761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.030818][ T9761] RSP: 002b:00007fe1e04d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.030838][ T9761] RAX: ffffffffffffffda RBX: 00007fe1df7a5fa0 RCX: 00007fe1df58d169 [ 221.030851][ T9761] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000004 [ 221.030861][ T9761] RBP: 00007fe1df60e990 R08: 00000000000000fd R09: 0000000000000000 [ 221.030872][ T9761] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 221.030883][ T9761] R13: 0000000000000000 R14: 00007fe1df7a5fa0 R15: 00007ffeb0c5f1c8 [ 221.030902][ T9761] [ 221.039352][ T5862] Bluetooth: hci2: command tx timeout [ 221.161439][ T9766] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.361571][ T9766] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 221.562891][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 221.591739][ T9683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.641515][ T9683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.662401][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.669874][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.677146][ T9712] bridge_slave_0: entered allmulticast mode [ 221.684789][ T9712] bridge_slave_0: entered promiscuous mode [ 221.694494][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.702060][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.709442][ T9712] bridge_slave_1: entered allmulticast mode [ 221.716393][ T9712] bridge_slave_1: entered promiscuous mode [ 221.725989][ T9683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.758241][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.771068][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.800637][ T9712] team0: Port device team_slave_0 added [ 221.814129][ T9683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.827554][ T9712] team0: Port device team_slave_1 added [ 221.852026][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.859180][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.885392][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.904437][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.911858][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.939693][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.997215][ T9712] hsr_slave_0: entered promiscuous mode [ 222.010096][ T9712] hsr_slave_1: entered promiscuous mode [ 222.016360][ T9712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.024506][ T9712] Cannot create hsr debugfs directory [ 222.041737][ T9683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.064929][ T9683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.078101][ T9683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.095283][ T9683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.166079][ T9712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.224705][ T9712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.244336][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.266890][ T9683] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.276958][ T9712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.296713][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.303864][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.324606][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.331775][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.353631][ T9712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.398569][ T5862] Bluetooth: hci4: command tx timeout [ 222.521183][ T9712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.536772][ T9712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.554442][ T9712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.565777][ T9712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.583158][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.655446][ T9683] veth0_vlan: entered promiscuous mode [ 222.679946][ T9683] veth1_vlan: entered promiscuous mode [ 222.692290][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.720964][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.737959][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.745088][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.759326][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.766486][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.783513][ T9683] veth0_macvtap: entered promiscuous mode [ 222.795859][ T9683] veth1_macvtap: entered promiscuous mode [ 222.824308][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.836483][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.846864][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.857592][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.867638][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.878120][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.888073][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.899263][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.909483][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.922400][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.932322][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.942925][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.953135][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.964108][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.974119][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.984693][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.994601][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.005132][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.016233][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.035486][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.046191][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.056362][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.067384][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.077390][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.088017][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.098038][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.108821][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.120583][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.133276][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.143355][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.153977][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.163872][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.174485][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.184381][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.194948][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.205860][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.216558][ T5862] Bluetooth: hci2: command tx timeout [ 223.222251][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.234962][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.266645][ T9683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.283116][ T9683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.296075][ T9683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.305663][ T9683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.385480][ T9683] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 223.417320][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.429741][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.443442][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.451850][ T9683] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 223.507264][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.515998][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.688044][ T9712] veth0_vlan: entered promiscuous mode [ 223.705935][ T9712] veth1_vlan: entered promiscuous mode [ 223.730274][ T9712] veth0_macvtap: entered promiscuous mode [ 223.740871][ T9712] veth1_macvtap: entered promiscuous mode [ 223.755673][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.767155][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.777191][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.787936][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.798010][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.808642][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.818560][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.829163][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.847786][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.858635][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.868627][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.879513][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.889405][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.899996][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.909869][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.920534][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.930392][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.940990][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.952886][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.963498][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.974484][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.985131][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.995655][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.005771][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.016269][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.026177][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.036668][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.048433][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.058927][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.068867][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.079584][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.089705][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.100270][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.110303][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.120865][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.130876][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.141398][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.153318][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.164232][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.175030][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.185842][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.200711][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.212092][ T9712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.221286][ T9712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.230159][ T9712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.240190][ T9712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.290195][ T9712] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 224.327533][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.329937][ T9712] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 224.346647][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.376783][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.385482][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50