last executing test programs: 1m46.201714691s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 1m40.593339022s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 1m32.260970771s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 1m30.810278602s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 1m14.411620649s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 1m13.330509127s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 1m0.453697507s ago: executing program 3 (id=2150): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x200000, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6(0xa, 0x800, 0x2000000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x23b8, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x118, 0xa, 0x148, 0x0, 0x10, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xf0, 0x118, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan0\x00', {0x0, 0x0, 0x100, 0x1, 0xfffffffd, 0xffffffff, 0x7}}}, @common=@inet=@tos={{0x28}, {0xb4, 0x4, 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x2c0, 0x320, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r10, 0x2, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) listen(r0, 0x80080400) r11 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r11, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 1m0.307035252s ago: executing program 3 (id=2151): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x100000000, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 1m0.243384824s ago: executing program 3 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.525390394s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 51.797657012s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 38.059612608s ago: executing program 3 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.578208161s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 28.753532573s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 21.247281932s ago: executing program 3 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.508022195s ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000400677265000c001380080004000180000000000000000000ea10177b7b69eaeff96b2ab1dd3073301569762dae2ce33d41c0955ca9fec5a81c5de02f59e91f6b535e03739e1e060d8c57f9b9bb9c353e65ce20ce8b82cce799a67640ae029083f2a73d747fdd96e01e3713badfd9c22a389307a327047e10f986a5fb1620e51064cb35522e1cf4b0501e6e46e3b39256daa7fa66b057367b5c93bf639bb5bf88e5e8769ff8bd968eba93d4b7de0d5957ebb00d0fd8d9945d3abbf948858b1f4bce266b0f94abb891dbb1896b1a3c7104508d8c42cea7"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x8081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r10}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="ffff1affffff000000000000000000000000000042f928f8a0aafacbead982877a72c603b062194349fab3d58c20fa6f83d04f00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, &(0x7f0000000200)=""/76}, 0x20) 7.01647721s ago: executing program 4 (id=1801): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000100), 0x12) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a9aa9ef3", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_FLOW={0x8, 0xb, 0x29f8}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x400}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000bfff00000000000000003"], 0x2c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth0_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="03f504c9a403b8e02f54dacf3a33c88c406aef360be492ab27862b6cc65fc4df5d1b7ecc362596063b74bf66241c8f49bd16af6d06a09c99e32a0bd896aa78a14623248fd655d6c66254d6d0b7cea8feb19f952e5f5cc72215101072e7c83311dc98d9f5eaf2c0fb4a98c88af72e64604f0dc4aff0125a68ea1583770bed7d095292fccabbb073cff0b1a4b075b707799223cf4b85a0eaef948de973e207eb378b40587e2f585dc1e94ee3b315bc1983ed0317ba5390970ea6d20b968e3c27b054f91d5987d10a19406d9200e7ee6e4ff44cf82f2c28446d41898fd9f47e", 0xde}], 0x1}, 0x48060) write$tun(r2, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data}}}}}}, 0xfdef) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 5.279169288s ago: executing program 3 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c, 0xa}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.489775752s ago: executing program 0 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x24}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r2, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r3], 0x38}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) 1.405907467s ago: executing program 2 (id=2399): syz_emit_ethernet(0x41, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@arp={0x806, @generic={0x308, 0x22eb, 0x6, 0xe, 0xa, @empty, "ceade243c8215a904f543a173530", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "e6dfdf61fd7e25024b658d6a7f"}}}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xb}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff5d, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000060003400000080007400000004006001240000200000000"], 0xa4}}, 0x0) 1.187968922s ago: executing program 0 (id=2400): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x2000}) 1.164926312s ago: executing program 2 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000540)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast}, {{0x8100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 942.068962ms ago: executing program 0 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}], {0x14}}, 0x8c}}, 0x0) 914.037157ms ago: executing program 0 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18001000"/24], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="e5bb6f0248913eae9e874408bd6607d1c566", @ANYRES64=0x0], 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x28, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_query, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @generic={0x0, 0x7, 0x7, 0x400}, @generic={0x0, 0x4, 0x4, 0x8001, 0xbf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff004}, {0x6}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x25}, @generic={0x6, 0x5, 0x5, 0xad9, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x12, &(0x7f00000003c0)=""/18, 0x40f00, 0x15, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xa, 0xb, 0x7}, 0x10, 0x14423, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000480)=[{0x4, 0x2, 0x0, 0x5}, {0x4, 0x4, 0x3, 0xb}, {0x5, 0x5, 0x10, 0x6}], 0x10, 0x94, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="feffffff00080000000100000300000000030000", @ANYRES32=0x1, @ANYBLOB="ae4a00"/20, @ANYBLOB="9c0cc8b5cd6c05acf85d1787a1bf5947b8885095a794d3b6e65741973e43b44f56d079dbdd59493510effd4b4f1f5df9cfcc57890ded3f41a07db4d559d16486387f3144f43ab5e8cf9f2dda26abb7af77dceaf83210d5a73e2456af9ab3e84491bdedbfdddc62af068c", @ANYRES32, @ANYBLOB="000000000100000000bf00000d0000000000006d554dc7e90000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) preadv(r11, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(&(0x7f00000003c0)=[{r12, 0x8080}], 0x1, 0x80000001) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x0, r0}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="2000d7ef3062a100008c07d4c22391e4fc7e380226711c890661f64aaf097cb6d92223000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r16, &(0x7f0000000800)=ANY=[@ANYRESHEX=r13, @ANYRES8=r15, @ANYRESHEX=r11, @ANYRES64=r11, @ANYRES16=r12, @ANYRES64, @ANYRES8=r11], 0x32600) socket$inet(0x2, 0xa, 0xd0000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r16, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x1d, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa92}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x7, 0xe, 0x9, 0x4, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, r6, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0x5, 0x7ff}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f0000000880)=[r8, r9, r10, r11, r12, r13, r14, r15, r16], &(0x7f00000008c0)=[{0x0, 0x4, 0x9, 0x6}, {0x1, 0x1, 0x10, 0x2}, {0x2, 0x1, 0x6, 0x9}, {0x0, 0x1, 0x2, 0xc}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) 643.843555ms ago: executing program 2 (id=2404): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00f7c3c846d3a3503441f85f3c24061f09000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b004b8998e74ab7ba5b0000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x4, &(0x7f0000000440)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6a, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000540)='FREEZING\x00', 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d951d7a617558b674e1c4fdfd591ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8f91633a8b9c70e70e28b18b04a800600dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f20202866b18c3c3771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439548addac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b9e909df1a5110f61f9eb41062532a6270fed17111fd9857b1d44a6daf4b2dfbd816f6b965c15fd6c6eac9f9c14d7b185b3851860ef5c0c74fc7c95717f94433"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec00000000000000009500000000000000ef2108e0ef8887e2bc5b76f1cc4310"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000020712500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000640)={0xffffffff, {{0xa, 0x4e23, 0x1, @empty, 0x2}}}, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 365.964419ms ago: executing program 0 (id=2405): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x13c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x11c, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8}, {0x8}, {0x8, 0x2}, {0x8}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x0, 0x0, 0x0, 0xfffffffe}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x13c}}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x1f, 0x0, 0x0) 333.335823ms ago: executing program 2 (id=2406): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x6, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}], {0x0, 0x0, 0x8}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x50}}, 0x0) 257.198283ms ago: executing program 0 (id=2407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0xa, 0x384992c2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000000080101000000000000000000006af591f054f07a30fd7f050003083a000800040004770900010073797a30000000000600024000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x30) r5 = getpid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYRESOCT], 0x68}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYRES8], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRESOCT, @ANYRES32=r11, @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r3, 0x0, 0x0, 0x0}, 0x30) r12 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYRESOCT], &(0x7f00000003c0)=""/135, 0x108, 0x87, 0x0, 0x2, 0x0, @void, @value}, 0x28) socket$packet(0x11, 0x2, 0x300) 93.93872ms ago: executing program 2 (id=2408): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x48, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x6, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xc}]}, 0x48}}, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x2) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001700)="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", 0x4d1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000900000000000000017010000020000007700000066a2ce04b7a3e98e3e9ebcf1ba26862615576ebd4911683255bbd2afdfb3593b5ee7f4a92762adbd88b39ef676f35fb9fd97c08479e68471b868d65e50e0c5dc66f9131156541fcac1ba31221606133eed00d23951268bcae56a351d5e8d3b8c6695ab9eae8227c3b4817e6063822d0d584246c8b99024000000000018000000000000001701000003000000010000000000000018000000000000001701000003000000010000000000000018"], 0xf0, 0x800}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) close(r7) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ted cc 0x0c25 length: 249 > 3 [ 268.591895][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.674635][T11973] netlink: 2032 bytes leftover after parsing attributes in process `syz.2.1920'. [ 268.691910][ T3760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.754355][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 269.205953][ T3760] bridge_slave_1: left allmulticast mode [ 269.215238][ T3760] bridge_slave_1: left promiscuous mode [ 269.222276][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.253614][ T3760] bridge_slave_0: left allmulticast mode [ 269.265567][ T3760] bridge_slave_0: left promiscuous mode [ 269.275404][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.947273][T12000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1929'. [ 269.998846][ T4620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.014504][ T4620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.025857][ T4620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.043010][ T4620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.055806][ T4620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.071092][ T4620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.220934][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.241298][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.254821][ T3760] bond0 (unregistering): Released all slaves [ 270.596691][T11969] chnl_net:caif_netlink_parms(): no params data found [ 270.634037][T12014] tipc: Resetting bearer [ 270.646639][ T5238] Bluetooth: hci2: command tx timeout [ 270.663129][T12014] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 270.690928][T12023] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1932'. [ 270.705464][T12014] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 271.078401][ T3760] hsr_slave_0: left promiscuous mode [ 271.107693][ T3760] hsr_slave_1: left promiscuous mode [ 271.135441][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.142943][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.153134][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.162255][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.232459][ T3760] veth1_macvtap: left promiscuous mode [ 271.246312][ T3760] veth0_macvtap: left promiscuous mode [ 271.252654][ T3760] veth1_vlan: left promiscuous mode [ 271.276129][ T3760] veth0_vlan: left promiscuous mode [ 272.167870][ T5238] Bluetooth: hci5: command tx timeout [ 272.480154][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 272.558493][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 272.726509][ T5238] Bluetooth: hci2: command tx timeout [ 273.182293][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.189905][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.205049][T11969] bridge_slave_0: entered allmulticast mode [ 273.221443][T11969] bridge_slave_0: entered promiscuous mode [ 273.232278][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.245586][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.263138][T11969] bridge_slave_1: entered allmulticast mode [ 273.276780][T11969] bridge_slave_1: entered promiscuous mode [ 273.307681][T12049] netlink: 'syz.0.1939': attribute type 21 has an invalid length. [ 273.421314][T12002] chnl_net:caif_netlink_parms(): no params data found [ 273.444342][T12071] batadv_slave_1: default FDB implementation only supports local addresses [ 273.541689][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.593627][T12078] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 273.604711][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.876954][T11969] team0: Port device team_slave_0 added [ 273.968647][T12084] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1950'. [ 273.988152][T12084] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 274.000546][T12084] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 274.013460][T11969] team0: Port device team_slave_1 added [ 274.118956][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.137067][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.165715][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 274.177204][T12002] bridge_slave_0: entered allmulticast mode [ 274.193733][T12002] bridge_slave_0: entered promiscuous mode [ 274.244705][T12109] Cannot find del_set index 4 as target [ 274.255796][ T5238] Bluetooth: hci5: command tx timeout [ 274.274128][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.282643][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.323314][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.375422][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.382656][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.430096][T12002] bridge_slave_1: entered allmulticast mode [ 274.447048][T12002] bridge_slave_1: entered promiscuous mode [ 274.502492][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.518586][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.559139][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.597535][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.619444][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.639629][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 274.680435][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 274.792445][ T3760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.806129][ T5238] Bluetooth: hci2: command tx timeout [ 274.833158][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 274.845633][T12121] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1959'. [ 275.030062][ T3760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.068367][T12002] team0: Port device team_slave_0 added [ 275.086403][T11969] hsr_slave_0: entered promiscuous mode [ 275.102081][T11969] hsr_slave_1: entered promiscuous mode [ 275.109861][T11969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.119350][T11969] Cannot create hsr debugfs directory [ 275.124997][T12132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 275.156901][T12002] team0: Port device team_slave_1 added [ 275.242450][ T3760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.272855][T12142] netlink: 'syz.2.1966': attribute type 21 has an invalid length. [ 275.285742][T12142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1966'. [ 275.334954][T12147] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1968'. [ 275.350222][ T3760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.451055][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.460901][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.488256][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.514190][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.522087][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.564298][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.575838][T12152] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 275.892465][T12002] hsr_slave_0: entered promiscuous mode [ 275.927438][T12002] hsr_slave_1: entered promiscuous mode [ 275.934293][T12002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.959881][T12002] Cannot create hsr debugfs directory [ 276.150263][ T3760] bridge_slave_1: left allmulticast mode [ 276.163134][ T3760] bridge_slave_1: left promiscuous mode [ 276.167426][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 276.185639][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.200330][ T3760] bridge_slave_0: left allmulticast mode [ 276.206379][ T3760] bridge_slave_0: left promiscuous mode [ 276.212129][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.325598][ T5238] Bluetooth: hci5: command tx timeout [ 276.733074][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.749126][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.762148][ T3760] bond0 (unregistering): Released all slaves [ 276.793247][T12176] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 276.885611][ T5238] Bluetooth: hci2: command tx timeout [ 277.398120][ T3760] hsr_slave_0: left promiscuous mode [ 277.404749][ T3760] hsr_slave_1: left promiscuous mode [ 277.412773][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.424175][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.440806][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.450779][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.497508][ T3760] veth1_macvtap: left promiscuous mode [ 277.505047][ T3760] veth0_macvtap: left promiscuous mode [ 277.511173][ T3760] veth1_vlan: left promiscuous mode [ 277.523269][ T3760] veth0_vlan: left promiscuous mode [ 278.282388][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 278.343475][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 278.406015][ T5238] Bluetooth: hci5: command tx timeout [ 278.982526][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 279.047770][T12213] pimreg: entered allmulticast mode [ 279.058815][T12215] pimreg: left allmulticast mode [ 279.166068][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 279.416719][T12226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1992'. [ 279.461125][T12230] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.1993'. [ 279.474363][T12230] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1993'. [ 279.516683][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'. [ 279.728634][T12237] veth1: mtu less than device minimum [ 279.751437][T11969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.812585][T11969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.860062][T11969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.897689][T11969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.022734][T12248] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 280.171428][T12258] __nla_validate_parse: 5 callbacks suppressed [ 280.171450][T12258] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2004'. [ 280.341709][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.449178][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.470294][T12271] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2009'. [ 280.490665][T12271] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 280.511677][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.518950][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.556826][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.564032][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.627895][T12002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.642476][T12279] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2011'. [ 280.688028][T12002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.737980][T12002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.788656][T12002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.202726][T12298] netlink: 5304 bytes leftover after parsing attributes in process `syz.3.2015'. [ 281.204545][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.292485][T12002] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.324574][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.331873][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.354988][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 281.385547][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.392813][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.458009][T12314] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2019'. [ 281.614848][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.894730][T12329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.014917][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 282.192503][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.462778][T11969] veth0_vlan: entered promiscuous mode [ 282.509862][T12002] veth0_vlan: entered promiscuous mode [ 282.544568][T12351] netlink: 'syz.2.2025': attribute type 34 has an invalid length. [ 282.658548][T11969] veth1_vlan: entered promiscuous mode [ 282.717588][T12002] veth1_vlan: entered promiscuous mode [ 282.759021][T11969] veth0_macvtap: entered promiscuous mode [ 282.792919][T11969] veth1_macvtap: entered promiscuous mode [ 282.879385][T12366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.914853][T12002] veth0_macvtap: entered promiscuous mode [ 282.922521][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 282.943750][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 282.968959][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.996012][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.006505][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.017686][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.028814][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.040001][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.054370][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.067371][T12002] veth1_macvtap: entered promiscuous mode [ 283.119626][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.168299][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.210303][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.221320][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.232126][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.243209][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.253550][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.281301][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.315995][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.381455][T11969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.405309][T11969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.414094][T11969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.450098][T11969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.504460][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.528083][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.547862][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.564779][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.586290][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.604428][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.626327][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.654654][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.684461][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.730869][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 283.780668][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.794661][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.810898][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.821905][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.839574][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.853059][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.863145][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.873690][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.883607][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.894339][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.912252][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.929089][T12002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.938052][T12002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.948557][T12002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.958431][T12002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.399131][ T8240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.420625][ T8240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.671645][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.703347][ T8256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.716217][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.722801][ T8256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.816860][ T8260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.824809][ T8260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.204841][T12429] netlink: 'syz.2.2048': attribute type 27 has an invalid length. [ 285.228865][T12434] netlink: 'syz.2.2048': attribute type 27 has an invalid length. [ 285.494032][ T8256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.830003][ T8256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.876816][T12457] veth0_to_hsr: invalid flags given to default FDB implementation [ 286.093737][ T8256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.205940][ T8256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.227959][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.238754][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.253583][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.264536][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.272736][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.280377][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.387422][T12473] dummy0: left allmulticast mode [ 286.393105][T12473] dummy0: left promiscuous mode [ 286.424478][T12473] bridge0: port 3(dummy0) entered disabled state [ 286.453649][T12473] bridge_slave_1: left allmulticast mode [ 286.474126][T12473] bridge_slave_1: left promiscuous mode [ 286.499212][T12473] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.534000][T12473] bridge_slave_0: left allmulticast mode [ 286.558443][T12473] bridge_slave_0: left promiscuous mode [ 286.564727][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.983365][ T8256] bridge_slave_1: left allmulticast mode [ 287.017521][ T8256] bridge_slave_1: left promiscuous mode [ 287.038447][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.079635][ T8256] bridge_slave_0: left allmulticast mode [ 287.105356][ T8256] bridge_slave_0: left promiscuous mode [ 287.111481][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.453955][ T4620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.466346][ T4620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.474373][ T4620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.500584][ T4620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.528887][ T4620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.548902][ T4620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.893687][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.909739][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.922206][ T8256] bond0 (unregistering): Released all slaves [ 288.327554][ T5238] Bluetooth: hci2: command tx timeout [ 288.486710][T12532] xt_bpf: check failed: parse error [ 288.509204][T12466] chnl_net:caif_netlink_parms(): no params data found [ 288.613560][ T8256] hsr_slave_0: left promiscuous mode [ 288.622333][ T8256] hsr_slave_1: left promiscuous mode [ 288.643228][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.652644][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.678026][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.686032][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.755162][ T8256] veth1_macvtap: left promiscuous mode [ 288.775028][ T8256] veth0_macvtap: left promiscuous mode [ 288.786313][ T8256] veth1_vlan: left promiscuous mode [ 288.791716][ T8256] veth0_vlan: left promiscuous mode [ 289.612085][ T5238] Bluetooth: hci5: command tx timeout [ 289.751730][ T8256] team0 (unregistering): Port device team_slave_1 removed [ 289.811838][ T8256] team0 (unregistering): Port device team_slave_0 removed [ 290.405356][ T5238] Bluetooth: hci2: command tx timeout [ 290.688581][T12566] __nla_validate_parse: 76 callbacks suppressed [ 290.688604][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 290.745914][T12559] netlink: 'syz.3.2080': attribute type 4 has an invalid length. [ 290.755767][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 290.764791][T12565] tc_dump_action: action bad kind [ 290.876643][T12569] pim6reg: entered allmulticast mode [ 290.891065][T12466] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.899936][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.915763][T12466] bridge_slave_0: entered allmulticast mode [ 290.942433][T12466] bridge_slave_0: entered promiscuous mode [ 290.997954][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.031073][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.046722][T12466] bridge_slave_1: entered allmulticast mode [ 291.075938][T12466] bridge_slave_1: entered promiscuous mode [ 291.184062][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.216893][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.242000][T12510] chnl_net:caif_netlink_parms(): no params data found [ 291.324784][T12583] netlink: 'syz.0.2087': attribute type 21 has an invalid length. [ 291.338632][T12583] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2087'. [ 291.364342][T12584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2087'. [ 291.376702][T12584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2087'. [ 291.471004][T12466] team0: Port device team_slave_0 added [ 291.549950][T12466] team0: Port device team_slave_1 added [ 291.617220][T12597] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.2090'. [ 291.667557][T12601] netlink: 203452 bytes leftover after parsing attributes in process `syz.3.2093'. [ 291.679097][T12601] netlink: 'syz.3.2093': attribute type 2 has an invalid length. [ 291.687448][ T5238] Bluetooth: hci5: command tx timeout [ 291.693444][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 291.708675][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.716127][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.732914][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 291.774985][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.789581][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.798701][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.847629][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.910603][ T8256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.112593][ T8256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.134647][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.155332][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.162716][T12510] bridge_slave_0: entered allmulticast mode [ 292.184499][T12510] bridge_slave_0: entered promiscuous mode [ 292.207146][T12510] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.225628][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.233121][T12510] bridge_slave_1: entered allmulticast mode [ 292.241820][T12620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2096'. [ 292.253013][T12510] bridge_slave_1: entered promiscuous mode [ 292.255243][T12620] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 292.358872][ T8256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.439301][T12466] hsr_slave_0: entered promiscuous mode [ 292.461001][T12466] hsr_slave_1: entered promiscuous mode [ 292.479963][T12466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.495919][ T5238] Bluetooth: hci2: command tx timeout [ 292.497036][T12466] Cannot create hsr debugfs directory [ 292.556269][ T8256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.598390][T12628] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 292.632280][T12628] team0: Device veth0_macvtap failed to register rx_handler [ 292.808569][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.839803][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.023770][T12510] team0: Port device team_slave_0 added [ 293.124309][T12648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.159293][T12510] team0: Port device team_slave_1 added [ 293.175917][T12641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.364545][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.374683][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.402820][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.431182][ T8256] bridge_slave_1: left allmulticast mode [ 293.437426][ T8256] bridge_slave_1: left promiscuous mode [ 293.443409][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.465719][ T8256] bridge_slave_0: left allmulticast mode [ 293.472534][ T8256] bridge_slave_0: left promiscuous mode [ 293.479512][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.776820][ T5238] Bluetooth: hci5: command tx timeout [ 294.232228][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.244800][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.263908][ T8256] bond0 (unregistering): Released all slaves [ 294.279872][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.288403][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.333279][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.566275][ T5238] Bluetooth: hci2: command tx timeout [ 294.579087][T12675] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 294.714252][T12510] hsr_slave_0: entered promiscuous mode [ 294.746460][T12510] hsr_slave_1: entered promiscuous mode [ 294.755622][T12510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.763262][T12510] Cannot create hsr debugfs directory [ 294.781245][T12686] netlink: 'syz.3.2114': attribute type 142 has an invalid length. [ 295.115902][ T8256] hsr_slave_0: left promiscuous mode [ 295.133868][ T8256] hsr_slave_1: left promiscuous mode [ 295.151626][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.169864][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.180746][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.188920][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.276222][ T8256] veth1_macvtap: left promiscuous mode [ 295.298325][ T8256] veth0_macvtap: left promiscuous mode [ 295.323439][ T8256] veth1_vlan: left promiscuous mode [ 295.332651][ T8256] veth0_vlan: left promiscuous mode [ 295.845649][ T4620] Bluetooth: hci5: command tx timeout [ 296.214675][ T8256] team0 (unregistering): Port device team_slave_1 removed [ 296.275736][ T8256] team0 (unregistering): Port device team_slave_0 removed [ 297.581660][T12734] __nla_validate_parse: 2 callbacks suppressed [ 297.581681][T12734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 297.833394][T12751] syzkaller0: entered allmulticast mode [ 297.896893][T12754] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 297.907558][T12754] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.2134'. [ 297.932252][T12754] netlink: 217 bytes leftover after parsing attributes in process `syz.2.2134'. [ 297.992597][T12758] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 298.002705][T12758] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.2134'. [ 298.023867][T12758] netlink: 217 bytes leftover after parsing attributes in process `syz.2.2134'. [ 298.040274][T12510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.079896][T12510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.117583][T12510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.204945][T12510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.268760][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 298.319972][T12466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.338902][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2140'. [ 298.366443][T12466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.409637][T12466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.454018][T12466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.566241][T12778] batadv0: entered promiscuous mode [ 298.624975][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.673270][T12787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2143'. [ 298.694725][T12787] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 298.717285][T12787] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 298.737729][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.784580][T12789] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 298.785629][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 298.804385][T12792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.812776][T12792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.949288][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 299.071227][T12510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.194080][T12510] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.217932][T12466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.245762][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.253005][ T8256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.294131][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.301389][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.335093][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.373146][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.380345][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.436803][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.444214][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.633329][ T8256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.644766][ T8256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.782372][ T8256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.793820][ T8256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.914021][ T8256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.938908][ T8256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 300.148230][ T8256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.180213][ T8256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 300.459986][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.486231][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.497783][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.514340][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.523917][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 300.532203][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.399139][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.413464][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.426563][ T8256] bond0 (unregistering): Released all slaves [ 301.443122][ T8256] bond1 (unregistering): Released all slaves [ 301.460795][ T8256]  (unregistering): Released all slaves [ 301.503077][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.525616][T12466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.604377][ T8256] Êü: left promiscuous mode [ 301.786472][ T8256] IPVS: stopping master sync thread 8379 ... [ 302.410470][ T8256] hsr_slave_0: left promiscuous mode [ 302.429098][ T8256] 0·: left promiscuous mode [ 302.475833][ T8256] veth1_macvtap: left promiscuous mode [ 302.483950][ T8256] veth0_macvtap: left promiscuous mode [ 302.496210][ T8256] veth1_vlan: left promiscuous mode [ 302.501710][ T8256] veth0_vlan: left allmulticast mode [ 302.655871][ T4620] Bluetooth: hci1: command tx timeout [ 303.387079][ T8256] team0 (unregistering): Port device team_slave_1 removed [ 303.440590][ T8256] team0 (unregistering): Port device team_slave_0 removed [ 303.857260][T12510] veth0_vlan: entered promiscuous mode [ 303.968102][T12510] veth1_vlan: entered promiscuous mode [ 304.000712][T12825] chnl_net:caif_netlink_parms(): no params data found [ 304.259793][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.268335][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.275867][T12825] bridge_slave_0: entered allmulticast mode [ 304.283351][T12825] bridge_slave_0: entered promiscuous mode [ 304.301547][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.317003][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.324296][T12825] bridge_slave_1: entered allmulticast mode [ 304.333139][T12825] bridge_slave_1: entered promiscuous mode [ 304.358976][T12466] veth0_vlan: entered promiscuous mode [ 304.421329][T12510] veth0_macvtap: entered promiscuous mode [ 304.443449][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.454364][T12510] veth1_macvtap: entered promiscuous mode [ 304.472378][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.483472][T12466] veth1_vlan: entered promiscuous mode [ 304.537265][T12825] team0: Port device team_slave_0 added [ 304.546841][T12825] team0: Port device team_slave_1 added [ 304.563618][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.585171][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.595061][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.626666][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.636818][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.647842][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.660016][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.725526][ T4620] Bluetooth: hci1: command tx timeout [ 304.768408][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.786096][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.797222][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.809255][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.819187][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.836777][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.863969][T12510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.876401][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.883603][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.915040][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.928124][T12899] __nla_validate_parse: 3 callbacks suppressed [ 304.928143][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2172'. [ 304.944882][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.952259][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.982135][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.999793][T12510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.012827][T12510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.021879][T12510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.039954][T12510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.077438][T12900] IPVS: Unknown mcast interface: vcan0 [ 305.102973][T12466] veth0_macvtap: entered promiscuous mode [ 305.209831][T12466] veth1_macvtap: entered promiscuous mode [ 305.241705][T12825] hsr_slave_0: entered promiscuous mode [ 305.262423][T12825] hsr_slave_1: entered promiscuous mode [ 305.269182][T12825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.277475][T12825] Cannot create hsr debugfs directory [ 305.302446][T12907] batadv_slave_0: entered promiscuous mode [ 305.310119][T12907] batadv_slave_0: left promiscuous mode [ 305.659311][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.677862][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.688199][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.707957][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.723600][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.743116][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.754418][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.773896][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.801209][T12466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.886437][ T8254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.894306][ T8254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.995275][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.019921][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.035418][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.046457][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.076155][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.090560][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.102031][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.115629][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.130367][T12466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.490051][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2180'. [ 306.504626][ T8254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.516686][T12466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.519292][ T8254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.542020][T12466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.555367][T12466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.564143][T12466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.806584][ T4620] Bluetooth: hci1: command tx timeout [ 307.070992][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.085689][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.153343][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.164260][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.184341][T12939] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2186'. [ 307.353417][ T8256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.578574][ T8256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.624750][T12825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.637674][T12825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.649813][T12825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.672323][T12825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.738598][ T8256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.848731][ T8256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.078555][T12952] netlink: 472 bytes leftover after parsing attributes in process `syz.2.2189'. [ 308.078566][T12951] netlink: 472 bytes leftover after parsing attributes in process `syz.2.2189'. [ 308.109059][T12950] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2188'. [ 308.148776][T12950] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 308.196380][T12950] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 308.332760][ T8256] bridge_slave_1: left allmulticast mode [ 308.346322][ T8256] bridge_slave_1: left promiscuous mode [ 308.352231][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.373766][ T8256] bridge_slave_0: left allmulticast mode [ 308.402520][ T8256] bridge_slave_0: left promiscuous mode [ 308.409300][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.633515][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.648703][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.675584][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.686533][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.706328][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.714679][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.869698][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.880125][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.890439][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.897851][ T5238] Bluetooth: hci1: command tx timeout [ 308.923133][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.938063][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 308.945729][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.330513][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.342919][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.356758][ T8256] bond0 (unregistering): Released all slaves [ 309.375515][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.387869][T12961] ipip1: entered promiscuous mode [ 309.523905][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.676676][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.683859][ T8238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.686116][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2193'. [ 309.847116][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.854342][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.901237][ T8256] hsr_slave_0: left promiscuous mode [ 309.907638][ T8256] hsr_slave_1: left promiscuous mode [ 309.913810][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.924416][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.938000][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.945617][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.971771][ T8256] veth1_macvtap: left promiscuous mode [ 309.977520][ T8256] veth0_macvtap: left promiscuous mode [ 309.983177][ T8256] veth1_vlan: left promiscuous mode [ 309.989239][ T8256] veth0_vlan: left promiscuous mode [ 310.655255][ T8256] team0 (unregistering): Port device team_slave_1 removed [ 310.714409][ T8256] team0 (unregistering): Port device team_slave_0 removed [ 310.817248][ T4620] Bluetooth: hci2: command tx timeout [ 310.979454][ T4620] Bluetooth: hci5: command tx timeout [ 311.353499][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2194'. [ 311.554731][T12987] netlink: 'syz.2.2197': attribute type 4 has an invalid length. [ 311.898794][T12967] chnl_net:caif_netlink_parms(): no params data found [ 311.944692][T12969] chnl_net:caif_netlink_parms(): no params data found [ 312.113334][T13004] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2200'. [ 312.594798][ T8240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.653414][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.667254][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.687399][T12967] bridge_slave_0: entered allmulticast mode [ 312.702962][T12967] bridge_slave_0: entered promiscuous mode [ 312.714305][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.729377][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.737030][T12967] bridge_slave_1: entered allmulticast mode [ 312.744780][T12967] bridge_slave_1: entered promiscuous mode [ 312.800965][T12969] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.813179][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.821966][T12969] bridge_slave_0: entered allmulticast mode [ 312.837700][T12969] bridge_slave_0: entered promiscuous mode [ 312.895475][ T4620] Bluetooth: hci2: command tx timeout [ 313.045375][ T4620] Bluetooth: hci5: command tx timeout [ 314.979741][ T4620] Bluetooth: hci2: command tx timeout [ 315.125725][ T4620] Bluetooth: hci5: command tx timeout [ 315.239139][T13020] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 315.248693][T13020] syz_tun: entered promiscuous mode [ 315.279591][T13020] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 315.338720][ T8240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.382205][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.390435][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.409263][T12969] bridge_slave_1: entered allmulticast mode [ 315.421915][T12969] bridge_slave_1: entered promiscuous mode [ 315.569136][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2205'. [ 315.569647][ T8240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.618554][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.633956][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.677149][T12969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.709638][T12969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.865783][ T8240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.941681][T12967] team0: Port device team_slave_0 added [ 316.004654][T12969] team0: Port device team_slave_0 added [ 316.028470][T12967] team0: Port device team_slave_1 added [ 316.034715][T13043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2208'. [ 316.064609][T12969] team0: Port device team_slave_1 added [ 316.211146][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.226627][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 316.247831][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.254847][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.294090][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.313739][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.327347][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.364099][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.383721][T12969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.391479][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.421014][T12969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.448178][T12969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.465217][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.525083][T12969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.875492][T12967] hsr_slave_0: entered promiscuous mode [ 316.882721][T12967] hsr_slave_1: entered promiscuous mode [ 316.895742][T12967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.903468][T12967] Cannot create hsr debugfs directory [ 316.940165][T12969] hsr_slave_0: entered promiscuous mode [ 316.947090][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2214'. [ 316.957964][T12969] hsr_slave_1: entered promiscuous mode [ 316.967173][T12969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.998411][T12969] Cannot create hsr debugfs directory [ 317.006015][ T8240] bridge_slave_1: left allmulticast mode [ 317.012426][ T8240] bridge_slave_1: left promiscuous mode [ 317.018652][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.034367][ T8240] bridge_slave_0: left allmulticast mode [ 317.041134][ T8240] bridge_slave_0: left promiscuous mode [ 317.048000][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.055055][ T4620] Bluetooth: hci2: command tx timeout [ 317.196081][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 317.205461][ T4620] Bluetooth: hci5: command tx timeout [ 317.568734][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.580748][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.593446][ T8240] bond0 (unregistering): Released all slaves [ 317.820262][T13085] xt_recent: Unsupported userspace flags (00000042) [ 317.841307][T13086] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2217'. [ 317.852102][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2217'. [ 317.898194][T13087] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2218'. [ 317.908024][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 318.082516][ T8240] hsr_slave_0: left promiscuous mode [ 318.091087][ T8240] hsr_slave_1: left promiscuous mode [ 318.098787][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.109274][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.118541][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.126980][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.151262][ T8240] veth1_macvtap: left promiscuous mode [ 318.156980][ T8240] veth0_macvtap: left promiscuous mode [ 318.162736][ T8240] veth1_vlan: left promiscuous mode [ 318.168556][ T8240] veth0_vlan: left promiscuous mode [ 318.843244][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 318.905828][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 319.551869][T13094] netlink: 'syz.2.2220': attribute type 21 has an invalid length. [ 319.563854][T13094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2220'. [ 319.672094][T12825] veth0_vlan: entered promiscuous mode [ 319.907342][T12825] veth1_vlan: entered promiscuous mode [ 320.028153][T12825] veth0_macvtap: entered promiscuous mode [ 320.067071][T12825] veth1_macvtap: entered promiscuous mode [ 320.138830][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.179869][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.204266][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.217062][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.227363][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.238619][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.250850][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.302860][T13118] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 320.330765][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.342487][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.357187][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.368553][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.378740][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.415182][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.436556][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.466885][T12825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.488258][T12825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.503524][T12825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.515938][T12825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.586119][T13126] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 320.618735][T13126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.795284][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.805852][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.862521][T13135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 320.891102][ T8256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.935392][ T8256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.196627][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 321.220924][T13148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2231'. [ 321.257544][T12967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.309944][T12967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.443604][T12967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.468052][T12967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.544525][T12969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.580742][T12969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.629353][T12969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.641486][T12969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.829313][ T8240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.984149][ T8240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.073750][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.133675][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.162086][T12969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.173449][T13170] sctp: [Deprecated]: syz.2.2235 (pid 13170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.173449][T13170] Use struct sctp_sack_info instead [ 322.204898][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.212162][ T8259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.271290][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.278603][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.387223][ T8240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.439305][T12969] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.524409][ T8240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.622832][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.630092][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.669720][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.676973][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.731361][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.748645][T13182] netlink: 'syz.0.2237': attribute type 2 has an invalid length. [ 322.758233][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.769406][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.780661][T13182] __nla_validate_parse: 1 callbacks suppressed [ 322.780686][T13182] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2237'. [ 322.810058][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.819413][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.827322][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.889895][ T5238] Bluetooth: hci5: command 0x0405 tx timeout [ 322.921397][T13182] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 323.090446][ T8240] bridge_slave_1: left allmulticast mode [ 323.100387][T13189] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 323.109650][ T8240] bridge_slave_1: left promiscuous mode [ 323.117693][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.123846][T13191] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 323.148522][ T8240] bridge_slave_0: left allmulticast mode [ 323.154405][ T8240] bridge_slave_0: left promiscuous mode [ 323.175619][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.698087][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.711540][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.723707][ T8240] bond0 (unregistering): Released all slaves [ 323.984052][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'. [ 324.084215][T13201] bridge_slave_0: default FDB implementation only supports local addresses [ 324.276186][T13211] netlink: 'syz.0.2242': attribute type 3 has an invalid length. [ 324.283999][T13211] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2242'. [ 324.324630][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.520513][ T8240] hsr_slave_0: left promiscuous mode [ 324.527018][ T8240] hsr_slave_1: left promiscuous mode [ 324.539439][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.549288][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.560425][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.570607][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.637022][ T8240] veth1_macvtap: left promiscuous mode [ 324.642662][ T8240] veth0_macvtap: left promiscuous mode [ 324.656137][ T8240] veth1_vlan: left promiscuous mode [ 324.661653][ T8240] veth0_vlan: left promiscuous mode [ 324.896114][ T4620] Bluetooth: hci1: command tx timeout [ 325.857570][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 325.930148][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 326.668991][T12969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.766015][T13180] chnl_net:caif_netlink_parms(): no params data found [ 326.973776][ T4620] Bluetooth: hci1: command tx timeout [ 327.011977][T12967] veth0_vlan: entered promiscuous mode [ 327.223427][T12967] veth1_vlan: entered promiscuous mode [ 327.269751][T13180] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.297460][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.304993][T13180] bridge_slave_0: entered allmulticast mode [ 327.345947][T13180] bridge_slave_0: entered promiscuous mode [ 327.368318][T13180] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.390707][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.402965][T13180] bridge_slave_1: entered allmulticast mode [ 327.422767][T13180] bridge_slave_1: entered promiscuous mode [ 327.592231][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.609601][T13271] netlink: 'syz.0.2257': attribute type 34 has an invalid length. [ 327.646213][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 327.649623][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.730421][T13273] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2258'. [ 327.740841][T13273] openvswitch: netlink: Multiple metadata blocks provided [ 327.773868][T13180] team0: Port device team_slave_0 added [ 327.808323][T13180] team0: Port device team_slave_1 added [ 327.819626][T12969] veth0_vlan: entered promiscuous mode [ 327.856944][T12967] veth0_macvtap: entered promiscuous mode [ 327.902402][T13277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2259'. [ 327.913656][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.924058][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.953593][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.967845][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.976388][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.032695][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.053222][T12967] veth1_macvtap: entered promiscuous mode [ 328.077177][T12969] veth1_vlan: entered promiscuous mode [ 328.169780][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.182446][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.193524][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.204577][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.215177][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.225744][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.238479][T12967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.256892][T13180] hsr_slave_0: entered promiscuous mode [ 328.264289][T13180] hsr_slave_1: entered promiscuous mode [ 328.271519][T13180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.279555][T13180] Cannot create hsr debugfs directory [ 328.390714][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.406204][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.417791][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.429669][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.440276][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.457673][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.473519][T12967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.532630][T12967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.543254][T12967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.566131][T12967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.577103][T12967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.599983][T12969] veth0_macvtap: entered promiscuous mode [ 328.638715][T12969] veth1_macvtap: entered promiscuous mode [ 328.917137][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.946967][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.965160][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.985152][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.995044][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.007089][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.017821][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.030767][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.045000][T12969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.050507][ T4620] Bluetooth: hci1: command tx timeout [ 329.105969][T13289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2262'. [ 329.141746][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.153499][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.166178][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.178907][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.189139][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.203622][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.214579][T12969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.225527][T12969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.237563][T12969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.308050][ T8241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.316436][ T8241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.402245][T12969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.415675][T12969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.424556][T12969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.433619][T12969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.507639][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.527221][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.701404][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.737067][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.935340][T13180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.962563][T13180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.962925][ T8254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.987999][T13180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.996224][ T8254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.020926][T13180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.369953][ T8240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.493394][ T8240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.523433][T13180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.551841][T13180] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.570497][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.577708][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.603420][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.610661][ T8259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.661340][ T8240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.759338][T13180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.887604][ T8240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.130177][ T4620] Bluetooth: hci1: command tx timeout [ 331.171247][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2268'. [ 331.245745][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'. [ 331.254755][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.318807][ T8240] bridge_slave_1: left allmulticast mode [ 331.324548][ T8240] bridge_slave_1: left promiscuous mode [ 331.339921][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.355278][ T8240] bridge_slave_0: left allmulticast mode [ 331.362296][ T8240] bridge_slave_0: left promiscuous mode [ 331.380786][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.563072][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.599447][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.608752][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.628180][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.645045][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.664374][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.124791][ T4620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.148524][ T4620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.159336][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.159427][ T4620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.192846][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.204222][ T4620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.214796][ T4620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.223934][ T4620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.227453][ T8240] bond0 (unregistering): Released all slaves [ 332.369393][T13180] veth0_vlan: entered promiscuous mode [ 332.416618][T13180] veth1_vlan: entered promiscuous mode [ 332.803740][T13180] veth0_macvtap: entered promiscuous mode [ 332.843765][T13180] veth1_macvtap: entered promiscuous mode [ 332.922571][ T8240] hsr_slave_0: left promiscuous mode [ 332.939671][ T8240] hsr_slave_1: left promiscuous mode [ 332.954360][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.967934][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.991096][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.001801][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.072804][ T8240] veth1_macvtap: left promiscuous mode [ 333.081404][ T8240] veth0_macvtap: left promiscuous mode [ 333.094348][ T8240] veth1_vlan: left promiscuous mode [ 333.103130][ T8240] veth0_vlan: left promiscuous mode [ 333.685422][ T4620] Bluetooth: hci2: command tx timeout [ 334.034260][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 334.110423][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 334.325939][ T4620] Bluetooth: hci5: command tx timeout [ 334.803503][T13343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2274'. [ 334.945025][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'. [ 335.069445][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.127488][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.147226][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.175191][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.190872][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.201962][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.213579][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.226064][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.249211][T13180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.304365][T13359] netlink: 'syz.2.2277': attribute type 4 has an invalid length. [ 335.323731][T13360] netlink: 'syz.2.2277': attribute type 4 has an invalid length. [ 335.364864][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.395607][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.415351][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.428697][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.439423][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.462187][T13367] netlink: 'syz.2.2280': attribute type 32 has an invalid length. [ 335.463308][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.481666][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.493102][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.546634][T13180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.580837][T13317] chnl_net:caif_netlink_parms(): no params data found [ 335.595643][T13367] netlink: 'syz.2.2280': attribute type 24 has an invalid length. [ 335.629101][T13180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.652737][T13180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.671595][T13180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.682972][T13180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.724795][T13323] chnl_net:caif_netlink_parms(): no params data found [ 335.765929][ T4620] Bluetooth: hci2: command tx timeout [ 336.096584][T13317] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.103994][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.112689][T13317] bridge_slave_0: entered allmulticast mode [ 336.122711][T13317] bridge_slave_0: entered promiscuous mode [ 336.132773][T13317] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.145279][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.152986][T13317] bridge_slave_1: entered allmulticast mode [ 336.157464][T13392] openvswitch: netlink: Actions may not be safe on all matching packets [ 336.161890][T13317] bridge_slave_1: entered promiscuous mode [ 336.257480][T13323] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.264667][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.286319][T13323] bridge_slave_0: entered allmulticast mode [ 336.294088][T13323] bridge_slave_0: entered promiscuous mode [ 336.364267][T13323] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.384838][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.407782][ T4620] Bluetooth: hci5: command tx timeout [ 336.423515][T13323] bridge_slave_1: entered allmulticast mode [ 336.437605][T13323] bridge_slave_1: entered promiscuous mode [ 336.572323][ T8240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.623539][T13405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2292'. [ 336.661393][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.674525][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.694633][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.699822][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.779893][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.797435][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.864801][ T8240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.027031][ T8240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.063243][T13317] team0: Port device team_slave_0 added [ 337.114381][T13421] FAULT_INJECTION: forcing a failure. [ 337.114381][T13421] name failslab, interval 1, probability 0, space 0, times 1 [ 337.118379][ T8240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.128112][T13421] CPU: 1 UID: 0 PID: 13421 Comm: syz.0.2297 Not tainted 6.11.0-syzkaller-01478-gb514c47ebf41 #0 [ 337.148297][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.158640][T13421] Call Trace: [ 337.161962][T13421] [ 337.164999][T13421] dump_stack_lvl+0x241/0x360 [ 337.169987][T13421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.175215][T13421] ? __pfx__printk+0x10/0x10 [ 337.179842][T13421] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 337.185852][T13421] ? __pfx___might_resched+0x10/0x10 [ 337.191174][T13421] should_fail_ex+0x3b0/0x4e0 [ 337.196159][T13421] should_failslab+0xac/0x100 [ 337.200926][T13421] ? __alloc_skb+0x1c3/0x440 [ 337.205550][T13421] kmem_cache_alloc_node_noprof+0x71/0x320 [ 337.211388][T13421] __alloc_skb+0x1c3/0x440 [ 337.215835][T13421] ? __pfx___alloc_skb+0x10/0x10 [ 337.220808][T13421] ? netlink_autobind+0xd6/0x2f0 [ 337.225762][T13421] ? netlink_autobind+0x2b0/0x2f0 [ 337.230842][T13421] netlink_sendmsg+0x638/0xcb0 [ 337.235640][T13421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.240953][T13421] ? __import_iovec+0x536/0x820 [ 337.245820][T13421] ? aa_sock_msg_perm+0x91/0x160 [ 337.250796][T13421] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 337.256100][T13421] ? security_socket_sendmsg+0x87/0xb0 [ 337.261586][T13421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.266891][T13421] __sock_sendmsg+0x221/0x270 [ 337.271590][T13421] ____sys_sendmsg+0x525/0x7d0 [ 337.276412][T13421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.281737][T13421] __sys_sendmsg+0x2b0/0x3a0 [ 337.286353][T13421] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.291477][T13421] ? vfs_write+0x7c4/0xc90 [ 337.295945][T13421] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.302295][T13421] ? do_syscall_64+0x100/0x230 [ 337.307098][T13421] ? do_syscall_64+0xb6/0x230 [ 337.311820][T13421] do_syscall_64+0xf3/0x230 [ 337.316405][T13421] ? clear_bhb_loop+0x35/0x90 [ 337.321102][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.327028][T13421] RIP: 0033:0x7f0a56b7df39 [ 337.331470][T13421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.351133][T13421] RSP: 002b:00007f0a57a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.359569][T13421] RAX: ffffffffffffffda RBX: 00007f0a56d35f80 RCX: 00007f0a56b7df39 [ 337.367560][T13421] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 337.375612][T13421] RBP: 00007f0a57a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.383602][T13421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.391586][T13421] R13: 0000000000000000 R14: 00007f0a56d35f80 R15: 00007ffd5ea3cbf8 [ 337.399622][T13421] [ 337.427678][ T8238] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 337.449866][T13418] netlink: 'syz.2.2296': attribute type 10 has an invalid length. [ 337.475303][T13418] bond0: (slave netdevsim0): no link monitoring support [ 337.497200][T13418] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 337.532325][T13418] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 337.538529][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 337.552015][T13423] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 337.560261][T13423] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2298'. [ 337.560947][T13323] team0: Port device team_slave_0 added [ 337.611648][T13323] team0: Port device team_slave_1 added [ 337.646803][T13317] team0: Port device team_slave_1 added [ 337.766845][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.773864][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.801926][ T8259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.819839][ T8259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.831961][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.845849][ T4620] Bluetooth: hci2: command tx timeout [ 337.869651][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.879686][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.908617][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.936409][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.943418][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.975218][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.004130][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.014362][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.042711][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.081891][T13432] pimreg: entered allmulticast mode [ 338.126209][T13433] pimreg: left allmulticast mode [ 338.201807][T13439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.388196][T13317] hsr_slave_0: entered promiscuous mode [ 338.395066][T13317] hsr_slave_1: entered promiscuous mode [ 338.403246][T13317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.412484][T13317] Cannot create hsr debugfs directory [ 338.436117][T13323] hsr_slave_0: entered promiscuous mode [ 338.442919][T13323] hsr_slave_1: entered promiscuous mode [ 338.453746][T13323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.461737][T13323] Cannot create hsr debugfs directory [ 338.468614][ T8240] bridge_slave_1: left allmulticast mode [ 338.475761][ T8240] bridge_slave_1: left promiscuous mode [ 338.481517][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.489852][ T4620] Bluetooth: hci5: command tx timeout [ 338.508112][ T8240] bridge_slave_0: left allmulticast mode [ 338.513970][ T8240] bridge_slave_0: left promiscuous mode [ 338.520295][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.213574][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.255533][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.266500][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.285858][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.293803][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.304118][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.413115][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.440761][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.468401][ T8240] bond0 (unregistering): Released all slaves [ 339.565568][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2306'. [ 339.713227][T13462] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 339.840935][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 339.901620][T13467] openvswitch: netlink: Missing valid actions attribute. [ 339.920799][T13467] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.929997][ T5238] Bluetooth: hci2: command tx timeout [ 340.262151][ T8240] hsr_slave_0: left promiscuous mode [ 340.271568][ T8240] hsr_slave_1: left promiscuous mode [ 340.288994][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.297961][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.336185][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.343689][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.406728][ T8240] veth1_macvtap: left promiscuous mode [ 340.412483][ T8240] veth0_macvtap: left promiscuous mode [ 340.418664][ T8240] veth1_vlan: left promiscuous mode [ 340.424522][ T8240] veth0_vlan: left promiscuous mode [ 340.575622][ T5238] Bluetooth: hci5: command tx timeout [ 341.243927][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 341.307603][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 341.376599][ T5238] Bluetooth: hci1: command tx timeout [ 342.319107][T13504] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2323'. [ 342.452659][T13447] chnl_net:caif_netlink_parms(): no params data found [ 342.585526][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 342.622014][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 342.756910][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.764208][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.797211][T13447] bridge_slave_0: entered allmulticast mode [ 342.804744][T13447] bridge_slave_0: entered promiscuous mode [ 342.817322][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.824556][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.833455][T13447] bridge_slave_1: entered allmulticast mode [ 342.842052][T13447] bridge_slave_1: entered promiscuous mode [ 343.023825][ T8240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.081373][T13523] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 343.121306][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.149613][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.205693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.284906][ T8240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.380769][T13317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.408870][T13317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.455729][ T5238] Bluetooth: hci1: command tx timeout [ 343.523635][ T8240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.554342][T13447] team0: Port device team_slave_0 added [ 343.568359][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 343.584881][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.598355][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.609003][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.624818][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.635336][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.653329][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.672257][T13317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.690331][T13317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.737615][T13447] team0: Port device team_slave_1 added [ 343.790144][ T8240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.904138][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.935976][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.963809][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.984182][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.993461][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.035879][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.184148][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 344.230003][T13447] hsr_slave_0: entered promiscuous mode [ 344.237309][T13447] hsr_slave_1: entered promiscuous mode [ 344.243821][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.253292][T13447] Cannot create hsr debugfs directory [ 344.472643][ T8240] bridge_slave_1: left allmulticast mode [ 344.478827][ T8240] bridge_slave_1: left promiscuous mode [ 344.484637][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.499272][ T8240] bridge_slave_0: left allmulticast mode [ 344.504950][ T8240] bridge_slave_0: left promiscuous mode [ 344.513418][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.042163][ T8240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.058634][ T8240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.071795][ T8240] bond0 (unregistering): Released all slaves [ 345.092914][T13323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.104813][T13323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.264538][T13323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.367623][T13566] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2343'. [ 345.385811][T13323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.531380][ T5238] Bluetooth: hci1: command tx timeout [ 345.599147][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.754836][ T8240] hsr_slave_0: left promiscuous mode [ 345.763439][ T8240] hsr_slave_1: left promiscuous mode [ 345.780024][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.789009][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.798955][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.807717][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.853132][ T8240] veth1_macvtap: left promiscuous mode [ 345.865290][ T8240] veth0_macvtap: left promiscuous mode [ 345.871027][ T8240] veth1_vlan: left promiscuous mode [ 345.880357][ T8240] veth0_vlan: left promiscuous mode [ 346.077919][T13583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2349'. [ 346.609309][ T8240] team0 (unregistering): Port device team_slave_1 removed [ 346.698582][ T8240] team0 (unregistering): Port device team_slave_0 removed [ 346.783574][T13593] netlink: 696 bytes leftover after parsing attributes in process `syz.0.2351'. [ 347.338737][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.462008][T13595] delete_channel: no stack [ 347.464235][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.473750][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.513232][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.520500][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.608226][ T5238] Bluetooth: hci1: command tx timeout [ 347.811751][T13601] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 347.840366][T13601] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 347.892336][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 347.947396][T13606] FAULT_INJECTION: forcing a failure. [ 347.947396][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 347.982795][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.2.2356 Not tainted 6.11.0-syzkaller-01478-gb514c47ebf41 #0 [ 347.993312][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.003410][T13606] Call Trace: [ 348.006703][T13606] [ 348.009647][T13606] dump_stack_lvl+0x241/0x360 [ 348.014353][T13606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.019576][T13606] ? __pfx__printk+0x10/0x10 [ 348.024195][T13606] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 348.030229][T13606] ? __pfx___might_resched+0x10/0x10 [ 348.035557][T13606] should_fail_ex+0x3b0/0x4e0 [ 348.040289][T13606] should_failslab+0xac/0x100 [ 348.044987][T13606] ? __alloc_skb+0x1c3/0x440 [ 348.049599][T13606] kmem_cache_alloc_node_noprof+0x71/0x320 [ 348.055508][T13606] __alloc_skb+0x1c3/0x440 [ 348.059952][T13606] ? __pfx___alloc_skb+0x10/0x10 [ 348.064914][T13606] ? netlink_ack_tlv_len+0x6e/0x200 [ 348.070132][T13606] netlink_ack+0x13f/0xa30 [ 348.074593][T13606] ? __pfx_lock_acquire+0x10/0x10 [ 348.079638][T13606] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 348.085633][T13606] ? __pfx_batadv_post_doit+0x10/0x10 [ 348.091034][T13606] netlink_rcv_skb+0x262/0x430 [ 348.095821][T13606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.100884][T13606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.106217][T13606] ? __netlink_deliver_tap+0x77e/0x7c0 [ 348.111708][T13606] genl_rcv+0x28/0x40 [ 348.115702][T13606] netlink_unicast+0x7f6/0x990 [ 348.120492][T13606] ? __pfx_netlink_unicast+0x10/0x10 [ 348.125792][T13606] ? __virt_addr_valid+0x183/0x530 [ 348.130918][T13606] ? __check_object_size+0x49c/0x900 [ 348.136222][T13606] ? bpf_lsm_netlink_send+0x9/0x10 [ 348.141366][T13606] netlink_sendmsg+0x8e4/0xcb0 [ 348.146164][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.151469][T13606] ? __import_iovec+0x536/0x820 [ 348.156335][T13606] ? aa_sock_msg_perm+0x91/0x160 [ 348.161288][T13606] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.166587][T13606] ? security_socket_sendmsg+0x87/0xb0 [ 348.172065][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.177369][T13606] __sock_sendmsg+0x221/0x270 [ 348.182067][T13606] ____sys_sendmsg+0x525/0x7d0 [ 348.186883][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.192196][T13606] __sys_sendmsg+0x2b0/0x3a0 [ 348.196825][T13606] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.201952][T13606] ? vfs_write+0x7c4/0xc90 [ 348.206419][T13606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.212773][T13606] ? do_syscall_64+0x100/0x230 [ 348.217561][T13606] ? do_syscall_64+0xb6/0x230 [ 348.222269][T13606] do_syscall_64+0xf3/0x230 [ 348.226795][T13606] ? clear_bhb_loop+0x35/0x90 [ 348.231490][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.237397][T13606] RIP: 0033:0x7f688237df39 [ 348.241842][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.261481][T13606] RSP: 002b:00007f6883179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.269917][T13606] RAX: ffffffffffffffda RBX: 00007f6882536058 RCX: 00007f688237df39 [ 348.277904][T13606] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 348.285885][T13606] RBP: 00007f6883179090 R08: 0000000000000000 R09: 0000000000000000 [ 348.294052][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.302036][T13606] R13: 0000000000000001 R14: 00007f6882536058 R15: 00007fff8489e488 [ 348.310065][T13606] [ 348.376134][T13323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.512836][T13611] netlink: 'syz.0.2357': attribute type 15 has an invalid length. [ 348.550314][T13323] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.578552][T13447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.602117][T13447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.646906][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.654155][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.680519][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2359'. [ 348.686591][T13447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.710357][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2359'. [ 348.712080][T13447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.777913][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.785312][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.811329][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.892436][T13622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.188281][T13317] veth0_vlan: entered promiscuous mode [ 349.234744][T13317] veth1_vlan: entered promiscuous mode [ 349.309630][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.436464][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.457895][T13317] veth0_macvtap: entered promiscuous mode [ 349.504561][T13317] veth1_macvtap: entered promiscuous mode [ 349.581260][T13323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.599090][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.606376][ T8240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.628227][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.635499][ T8240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.700823][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.732512][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.745875][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.757577][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.768242][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.779349][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.791240][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.855070][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.875251][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.899349][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.911962][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.935336][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.960158][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.972484][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.989486][T13317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.015269][T13317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.024461][T13317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.045430][T13317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.095307][T13660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 350.354510][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.383433][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.501255][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.511968][T13323] veth0_vlan: entered promiscuous mode [ 350.540825][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.561481][T13323] veth1_vlan: entered promiscuous mode [ 350.654093][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 350.693562][T13670] netlink: 'syz.2.2367': attribute type 10 has an invalid length. [ 350.711318][T13670] bond0: (slave bond_slave_0): Releasing backup interface [ 350.754403][T13672] openvswitch: netlink: EtherType 0 is less than min 600 [ 350.790379][T13323] veth0_macvtap: entered promiscuous mode [ 350.940081][T13323] veth1_macvtap: entered promiscuous mode [ 351.019233][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.059206][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.087750][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.104354][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.125367][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.136142][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.147366][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.158200][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.170611][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.193270][T13323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.235820][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.256578][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.267414][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.277956][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.290506][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.301083][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.312936][T13323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.323538][T13323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.338141][T13323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.359839][T13323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.374216][T13323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.383986][T13323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.404200][T13323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.543219][ T8259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.665159][ T8259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.740060][T13447] veth0_vlan: entered promiscuous mode [ 351.804673][T13447] veth1_vlan: entered promiscuous mode [ 351.843966][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.863327][ T8253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.872960][ T8253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.874933][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.911468][ T8259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.980299][T13447] veth0_macvtap: entered promiscuous mode [ 351.994284][T13447] veth1_macvtap: entered promiscuous mode [ 352.032273][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.043613][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.054705][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.069503][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.085050][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.101186][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.112057][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.127772][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.138024][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.151200][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.163218][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.279156][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.291388][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.335838][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.345604][T13704] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 352.362264][T13704] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2375'. [ 352.367817][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.371917][T13704] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2375'. [ 352.405523][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.416612][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.427931][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.441636][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.452639][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.471228][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.492755][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.525816][ T8259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.576400][T13447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.603422][T13447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.616455][T13447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.633118][T13447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.735812][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.757338][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.770791][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.779907][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.790754][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.804657][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.990456][ T8240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.030576][ T8240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.090581][ T8259] bridge_slave_1: left allmulticast mode [ 353.106606][ T8259] bridge_slave_1: left promiscuous mode [ 353.112607][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.130364][ T8259] bridge_slave_0: left allmulticast mode [ 353.140676][ T8259] bridge_slave_0: left promiscuous mode [ 353.148586][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.686167][ T8259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.710734][ T8259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.734903][ T8259] bond0 (unregistering): Released all slaves [ 353.849928][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.875612][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.009681][T13724] xt_policy: too many policy elements [ 354.125342][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 354.363062][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.386056][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.417470][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.435925][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.447095][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.470402][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.692903][ T8259] hsr_slave_0: left promiscuous mode [ 354.717064][ T8259] hsr_slave_1: left promiscuous mode [ 354.735592][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.743559][ T8259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.759896][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.773530][ T8259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.827716][ T8259] veth1_macvtap: left promiscuous mode [ 354.833451][ T8259] veth0_macvtap: left promiscuous mode [ 354.840873][ T8259] veth1_vlan: left promiscuous mode [ 354.846487][ T8259] veth0_vlan: left promiscuous mode [ 354.885688][ T5238] Bluetooth: hci2: command tx timeout [ 355.525255][ T5238] Bluetooth: hci4: command 0x0405 tx timeout [ 355.739123][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.751134][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.760949][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.780222][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.794156][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.802251][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.821510][ T8259] team0 (unregistering): Port device team_slave_1 removed [ 355.884187][ T8259] team0 (unregistering): Port device team_slave_0 removed [ 356.572667][ T5238] Bluetooth: hci1: command tx timeout [ 356.585356][T13750] netlink: 'syz.2.2386': attribute type 2 has an invalid length. [ 356.629658][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2386'. [ 356.660114][T13713] chnl_net:caif_netlink_parms(): no params data found [ 356.837092][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2388'. [ 356.965361][ T5238] Bluetooth: hci2: command tx timeout [ 357.206022][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.235409][T13713] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.253031][T13713] bridge_slave_0: entered allmulticast mode [ 357.277424][T13713] bridge_slave_0: entered promiscuous mode [ 357.308146][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 357.313370][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.340331][T13713] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.348511][T13713] bridge_slave_1: entered allmulticast mode [ 357.356000][T13713] bridge_slave_1: entered promiscuous mode [ 357.451358][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.498707][T13782] x_tables: duplicate underflow at hook 1 [ 357.560183][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.768453][T13713] team0: Port device team_slave_0 added [ 357.817184][ T8259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.850542][T13713] team0: Port device team_slave_1 added [ 357.856493][ T5238] Bluetooth: hci5: command tx timeout [ 357.889960][T13734] chnl_net:caif_netlink_parms(): no params data found [ 357.944024][ T8259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.992845][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.001513][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.034356][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.048298][T13751] chnl_net:caif_netlink_parms(): no params data found [ 358.115711][ T8259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.140557][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.157274][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.187590][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.225317][T13798] netlink: 'syz.0.2397': attribute type 4 has an invalid length. [ 358.289561][ T8259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.411206][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 358.438447][T13803] netlink: 'syz.0.2398': attribute type 13 has an invalid length. [ 358.449298][T13803] veth0_macvtap: left promiscuous mode [ 358.455659][T13803] macvtap0: entered allmulticast mode [ 358.478064][T13803] macvtap0: refused to change device tx_queue_len [ 358.529515][T13713] hsr_slave_0: entered promiscuous mode [ 358.558818][T13713] hsr_slave_1: entered promiscuous mode [ 358.606321][T13713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.613963][T13713] Cannot create hsr debugfs directory [ 358.645746][ T5238] Bluetooth: hci1: command tx timeout [ 358.838925][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.856390][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.873312][T13751] bridge_slave_0: entered allmulticast mode [ 358.884817][T13751] bridge_slave_0: entered promiscuous mode [ 358.910488][T13814] syzkaller1: entered promiscuous mode [ 358.916667][T13814] syzkaller1: entered allmulticast mode [ 358.963191][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.976080][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.983566][T13751] bridge_slave_1: entered allmulticast mode [ 358.991304][T13751] bridge_slave_1: entered promiscuous mode [ 359.051476][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.058935][ T5238] Bluetooth: hci2: command tx timeout [ 359.065036][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.073492][T13734] bridge_slave_0: entered allmulticast mode [ 359.082621][T13734] bridge_slave_0: entered promiscuous mode [ 359.159122][ T8259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.199785][T13734] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.213669][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.231263][T13734] bridge_slave_1: entered allmulticast mode [ 359.242693][T13734] bridge_slave_1: entered promiscuous mode [ 359.341058][ T8259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.447946][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.461622][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.520348][ T8259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.540225][T13734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.602943][T13734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.663552][T13836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2407'. [ 359.711319][ T8259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.799166][T13751] team0: Port device team_slave_0 added [ 359.820113][T13751] team0: Port device team_slave_1 added [ 359.860406][T13734] team0: Port device team_slave_0 added [ 359.881050][T13836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2407'. [ 359.925855][ T5238] Bluetooth: hci5: command tx timeout [ 359.933313][T13734] team0: Port device team_slave_1 added [ 359.975496][T13840] ------------[ cut here ]------------ [ 359.981478][T13840] WARNING: CPU: 0 PID: 13840 at include/net/mac80211.h:7028 minstrel_ht_update_caps+0x44a/0x17e0 [ 359.992255][T13840] Modules linked in: [ 359.996273][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.2.2409 Not tainted 6.11.0-syzkaller-01478-gb514c47ebf41 #0 [ 360.006904][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.017157][T13840] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 360.023717][T13840] Code: da e8 0a 14 a1 f9 e9 24 ff ff ff e8 40 48 48 f6 eb 17 e8 39 48 48 f6 eb 14 e8 32 48 48 f6 49 c1 fd 38 eb 0c e8 27 48 48 f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 360.043547][T13840] RSP: 0018:ffffc9000313ef80 EFLAGS: 00010283 [ 360.050159][T13840] RAX: ffffffff8b4b4489 RBX: 000000000000000c RCX: 0000000000040000 [ 360.058586][T13840] RDX: ffffc9000a10e000 RSI: 000000000000173f RDI: 0000000000001740 [ 360.066849][T13840] RBP: 0000000000000000 R08: ffffffff8b4b43a5 R09: 0000000000000000 [ 360.074871][T13840] R10: ffff8880601fc008 R11: ffffed100c03fd49 R12: 1ffff110068e061c [ 360.082940][T13840] R13: 0b00000000000000 R14: ffff8880347030e0 R15: 0100000000000000 [ 360.091034][T13840] FS: 00007f68831796c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 360.100077][T13840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.106779][T13840] CR2: 0000000020004cc0 CR3: 000000001e2d0000 CR4: 00000000003506f0 [ 360.114818][T13840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.122897][T13840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.130965][T13840] Call Trace: [ 360.134276][T13840] [ 360.137316][T13840] ? __warn+0x163/0x4e0 [ 360.141513][T13840] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 360.147434][T13840] ? report_bug+0x2b3/0x500 [ 360.151987][T13840] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 360.157806][T13840] ? handle_bug+0x3e/0x70 [ 360.162173][T13840] ? exc_invalid_op+0x1a/0x50 [ 360.166956][T13840] ? asm_exc_invalid_op+0x1a/0x20 [ 360.172035][T13840] ? minstrel_ht_update_caps+0x365/0x17e0 [ 360.177869][T13840] ? minstrel_ht_update_caps+0x449/0x17e0 [ 360.183740][T13840] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 360.189620][T13840] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.195057][T13840] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 360.201041][T13840] rate_control_rate_init+0x3cf/0x5f0 [ 360.206529][T13840] ? rate_control_rate_init+0xe3/0x5f0 [ 360.212173][T13840] sta_apply_auth_flags+0x1b6/0x410 [ 360.217465][T13840] sta_apply_parameters+0xe23/0x1550 [ 360.222802][T13840] ieee80211_add_station+0x3da/0x630 [ 360.228189][T13840] rdev_add_station+0x11b/0x2b0 [ 360.233089][T13840] nl80211_new_station+0x1d53/0x2550 [ 360.238516][T13840] ? __pfx_nl80211_new_station+0x10/0x10 [ 360.244243][T13840] ? netdev_run_todo+0xf88/0x1000 [ 360.249492][T13840] genl_rcv_msg+0xb14/0xec0 [ 360.254060][T13840] ? mark_lock+0x9a/0x350 [ 360.258521][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.263648][T13840] ? __pfx_lock_acquire+0x10/0x10 [ 360.268770][T13840] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 360.274187][T13840] ? __pfx_nl80211_new_station+0x10/0x10 [ 360.279921][T13840] ? __pfx_nl80211_post_doit+0x10/0x10 [ 360.285588][T13840] ? __pfx___might_resched+0x10/0x10 [ 360.290937][T13840] netlink_rcv_skb+0x1e3/0x430 [ 360.295843][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.300934][T13840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.306388][T13840] ? __netlink_deliver_tap+0x77e/0x7c0 [ 360.311928][T13840] genl_rcv+0x28/0x40 [ 360.316088][T13840] netlink_unicast+0x7f6/0x990 [ 360.320934][T13840] ? __pfx_netlink_unicast+0x10/0x10 [ 360.326459][T13840] ? __virt_addr_valid+0x183/0x530 [ 360.331642][T13840] ? __check_object_size+0x49c/0x900 [ 360.337036][T13840] ? bpf_lsm_netlink_send+0x9/0x10 [ 360.342213][T13840] netlink_sendmsg+0x8e4/0xcb0 [ 360.347147][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.352525][T13840] ? __import_iovec+0x536/0x820 [ 360.357474][T13840] ? aa_sock_msg_perm+0x91/0x160 [ 360.362556][T13840] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 360.367997][T13840] ? security_socket_sendmsg+0x87/0xb0 [ 360.373598][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.379107][T13840] __sock_sendmsg+0x221/0x270 [ 360.383857][T13840] ____sys_sendmsg+0x525/0x7d0 [ 360.388843][T13840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.394200][T13840] __sys_sendmsg+0x2b0/0x3a0 [ 360.398902][T13840] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.404195][T13840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.410683][T13840] ? do_syscall_64+0x100/0x230 [ 360.415698][T13840] ? do_syscall_64+0xb6/0x230 [ 360.420551][T13840] do_syscall_64+0xf3/0x230 [ 360.425205][T13840] ? clear_bhb_loop+0x35/0x90 [ 360.430203][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.436283][T13840] RIP: 0033:0x7f688237df39 [ 360.440759][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.460506][T13840] RSP: 002b:00007f6883179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.469435][T13840] RAX: ffffffffffffffda RBX: 00007f6882536058 RCX: 00007f688237df39 [ 360.478602][T13840] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000008 [ 360.488173][T13840] RBP: 00007f68823f0216 R08: 0000000000000000 R09: 0000000000000000 [ 360.496828][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.504969][T13840] R13: 0000000000000000 R14: 00007f6882536058 R15: 00007fff8489e488 [ 360.513445][T13840] [ 360.516540][T13840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.524016][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.2.2409 Not tainted 6.11.0-syzkaller-01478-gb514c47ebf41 #0 [ 360.534547][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.544641][T13840] Call Trace: [ 360.547934][T13840] [ 360.550888][T13840] dump_stack_lvl+0x241/0x360 [ 360.555704][T13840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.560968][T13840] ? __pfx__printk+0x10/0x10 [ 360.565618][T13840] ? vscnprintf+0x5d/0x90 [ 360.570069][T13840] panic+0x349/0x860 [ 360.574009][T13840] ? __warn+0x172/0x4e0 [ 360.578380][T13840] ? __pfx_panic+0x10/0x10 [ 360.582866][T13840] __warn+0x346/0x4e0 [ 360.586986][T13840] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 360.592753][T13840] report_bug+0x2b3/0x500 [ 360.597109][T13840] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 360.602869][T13840] handle_bug+0x3e/0x70 [ 360.607044][T13840] exc_invalid_op+0x1a/0x50 [ 360.611600][T13840] asm_exc_invalid_op+0x1a/0x20 [ 360.616553][T13840] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 360.622910][T13840] Code: da e8 0a 14 a1 f9 e9 24 ff ff ff e8 40 48 48 f6 eb 17 e8 39 48 48 f6 eb 14 e8 32 48 48 f6 49 c1 fd 38 eb 0c e8 27 48 48 f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 360.642547][T13840] RSP: 0018:ffffc9000313ef80 EFLAGS: 00010283 [ 360.648685][T13840] RAX: ffffffff8b4b4489 RBX: 000000000000000c RCX: 0000000000040000 [ 360.656706][T13840] RDX: ffffc9000a10e000 RSI: 000000000000173f RDI: 0000000000001740 [ 360.664794][T13840] RBP: 0000000000000000 R08: ffffffff8b4b43a5 R09: 0000000000000000 [ 360.672797][T13840] R10: ffff8880601fc008 R11: ffffed100c03fd49 R12: 1ffff110068e061c [ 360.680981][T13840] R13: 0b00000000000000 R14: ffff8880347030e0 R15: 0100000000000000 [ 360.688976][T13840] ? minstrel_ht_update_caps+0x365/0x17e0 [ 360.694794][T13840] ? minstrel_ht_update_caps+0x449/0x17e0 [ 360.700590][T13840] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.706002][T13840] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 360.711914][T13840] rate_control_rate_init+0x3cf/0x5f0 [ 360.717321][T13840] ? rate_control_rate_init+0xe3/0x5f0 [ 360.722866][T13840] sta_apply_auth_flags+0x1b6/0x410 [ 360.728292][T13840] sta_apply_parameters+0xe23/0x1550 [ 360.733674][T13840] ieee80211_add_station+0x3da/0x630 [ 360.739012][T13840] rdev_add_station+0x11b/0x2b0 [ 360.743893][T13840] nl80211_new_station+0x1d53/0x2550 [ 360.749232][T13840] ? __pfx_nl80211_new_station+0x10/0x10 [ 360.754975][T13840] ? netdev_run_todo+0xf88/0x1000 [ 360.760133][T13840] genl_rcv_msg+0xb14/0xec0 [ 360.764653][T13840] ? mark_lock+0x9a/0x350 [ 360.769025][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.774098][T13840] ? __pfx_lock_acquire+0x10/0x10 [ 360.779154][T13840] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 360.784545][T13840] ? __pfx_nl80211_new_station+0x10/0x10 [ 360.790247][T13840] ? __pfx_nl80211_post_doit+0x10/0x10 [ 360.795860][T13840] ? __pfx___might_resched+0x10/0x10 [ 360.801275][T13840] netlink_rcv_skb+0x1e3/0x430 [ 360.806103][T13840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.811255][T13840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.816635][T13840] ? __netlink_deliver_tap+0x77e/0x7c0 [ 360.822149][T13840] genl_rcv+0x28/0x40 [ 360.826167][T13840] netlink_unicast+0x7f6/0x990 [ 360.830995][T13840] ? __pfx_netlink_unicast+0x10/0x10 [ 360.836407][T13840] ? __virt_addr_valid+0x183/0x530 [ 360.841564][T13840] ? __check_object_size+0x49c/0x900 [ 360.847136][T13840] ? bpf_lsm_netlink_send+0x9/0x10 [ 360.852353][T13840] netlink_sendmsg+0x8e4/0xcb0 [ 360.857256][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.862572][T13840] ? __import_iovec+0x536/0x820 [ 360.867436][T13840] ? aa_sock_msg_perm+0x91/0x160 [ 360.872383][T13840] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 360.877690][T13840] ? security_socket_sendmsg+0x87/0xb0 [ 360.883364][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.888784][T13840] __sock_sendmsg+0x221/0x270 [ 360.893697][T13840] ____sys_sendmsg+0x525/0x7d0 [ 360.898505][T13840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.903882][T13840] __sys_sendmsg+0x2b0/0x3a0 [ 360.908519][T13840] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.914125][T13840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.920519][T13840] ? do_syscall_64+0x100/0x230 [ 360.925956][T13840] ? do_syscall_64+0xb6/0x230 [ 360.930693][T13840] do_syscall_64+0xf3/0x230 [ 360.935356][T13840] ? clear_bhb_loop+0x35/0x90 [ 360.940160][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.946079][T13840] RIP: 0033:0x7f688237df39 [ 360.950514][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.970615][T13840] RSP: 002b:00007f6883179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.979061][T13840] RAX: ffffffffffffffda RBX: 00007f6882536058 RCX: 00007f688237df39 [ 360.987494][T13840] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000008 [ 360.995502][T13840] RBP: 00007f68823f0216 R08: 0000000000000000 R09: 0000000000000000 [ 361.003519][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.011877][T13840] R13: 0000000000000000 R14: 00007f6882536058 R15: 00007fff8489e488 [ 361.019885][T13840] [ 361.023220][T13840] Kernel Offset: disabled [ 361.027776][T13840] Rebooting in 86400 seconds..