last executing test programs: 1m0.943051368s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 50.13487546s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 38.79151711s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 28.471496251s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 16.715700353s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 8.425412343s ago: executing program 4 (id=843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e7fadeca8d79e34c8612886a99059e9e61be6c4cbded75a6b16d", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc8c4) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "005d88", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0xfffd, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 8.285719604s ago: executing program 4 (id=845): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xbe, 0x38}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe2, 0x1, "e463417c9eed718ef7ce1e144796244c9c0c25e8422d9013bdfd6e6bf0755fb1443340afd615b869420cb977216c8462165e2fee99615f4257aee4b7032c08048d4ea191950a9b036bcc3f1b60263b96be8ab3b7d986ebc4458b081963bf87f86f609dce20bfac3ad1a340e0bb2e58b84427f582a609f100a7a237fb9a27395009904f69ee268fc8987f2f91f1158ec3309eb57a922a77611fdad4d2161b44be2a3a5c4e70f8edcbacbe1a0301f0d504f0c3853441afd0cbde37fb46e961fb78ae346a5394dac460eba00b1d8e58b19734d77ecfd786afb1621490db4591"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x140}}, 0x50) 7.853660145s ago: executing program 4 (id=850): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800210000020000000001000000003381000000000000009500000000000000a39565e2d71c4c3d0fd8161f71c60cba0f367ac6146916e50527daccf70fa0c19aecc5f5715e5b6681f9552f598243b53aecaa61126c1fc7863fbd4932b5be7012ac95eb99d8db9560f7d457e3bb4d073de603356e8922dd9295bc00b36c99286eb665acb496cf909106870156689a977ca21fc6e48c1b3755f1bf10e2c3ab234643f6360322575e88ad2be6a926721f07f8dd9fe0ffd42ad9bfa73b7ff4a7a0022adcf3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.776082412s ago: executing program 4 (id=853): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) close(r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$unix(r4, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r6, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) 7.029496598s ago: executing program 4 (id=863): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x20, 0x20, 0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x18) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x4040841}, 0x8080) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018007a00000000000c0000100c00000002000000c80000000000000d000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x3e, 0x0, 0x60, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.8273339s ago: executing program 4 (id=867): r0 = socket(0x2b, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x2b, &(0x7f0000002240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@generic={0x2, "e008a3b71c32492a77b89121bb9a960862d98c9766dd2ed463602a6dc5"}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @initdev={0xac, 0x1e, 0x2, 0x0}}, {0x4e21, 0xffff, 0x8}}}}}, 0x0) 4.908328253s ago: executing program 0 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r4, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) write(r7, &(0x7f0000000040)="9d6d2350e1c7f00b72", 0x9) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000680)="1a25210b79c4278898a768a41bfc64b76d24ce9e1276c90cd97490120d9c1e93b9de9e9f978c419a2499bba3395fc7d41611d2b4376abcde54a11f0ec9ba6b60e95cc56dde6a326b518066bf8e36ccde06e3504bc3129b77edeeeb60c1f541a807d2914b76ac5f55501a22a12eec984e45bf652f7c5d3f34261fab84d9096b2ae19e55c89e339338bfde2d7d7d775f6bc851e1227fbf335dae921b122939b1a6fa59fe0999e2842d1016c4ed5cf0698668825525afed831bc2468814a8978e063409d1f14028605f4a0c31c6572b2df336a7670fe5be060cbad581ccea957eb2813005c5c205e32324ab916523d3984756b9836e5ed4fed6e1716c0ef1450ca7bb8d563a854997efef0ccf3c1560c88669669ac175bbe0e8c44948959140f4034cc7981da9b133784f6ebecdfd89a8756ecc95c34e7334b182041daf2b3ccbd50f9480fccab8422cf00c2acaee64be94f7bd8a3fa0821df482d2d6cb6f3e636e3f294238fbf7c427029000b7140d06c7dafa0a68d0b767bc9a89265d362d366d30415299a6e3df6edac2be972c5f26189706a2811e0ff001165e92f578246a5454b67d3c8bee79f9e6f1eb23970fdf404e76a563ab4581f0f20284ae9a8722c02a1f245b84fa30341d1d82e6603489c0dbbca0a14f152e0523527eccd71b64c6af8c69fd9cf79c242d56e8716ac638b5949d1742ec5346d9fe947ef632cc77d1e3df295ced1fdd892174f49b4d8b901d0e4e44bbd8a754724710dac61ef9f58d6207c06cf952478d9cda468aec815b8276d9d329a8ad1f47e9944e0aa319dc71f4793635c5290a886acb1238c33dc319ee09ea0e999847048677568fce0a35d8b918c90303c70ab59bea76f1c7d3f6d1930ec755aec5039d9b92a30d5332a0bfa5799aa1f412528c56562d60bcfd024c7e03f58a0463c2340ff9d0875298bf0f755c7481ec517b42827c1e202b45037137a401404f276667e8d251ad18d8b8e712e0c11c0f0a9bd20a14a3b29a32d6687f8f4fa0b8c42e5654c8a15cf0cc5f6a5e31843fd5e24eede351d0fb4337862d1791aee9bdcf554ab7486912aa1c6d330f93a6b125718057f0c382dbe69c52df543804d84a703b9fcfaa889c32db91c527df3f85e438079f7e78d731f24bed2c34c916a62aff5e01631ea731206b34ddb27c9f952e8cd044f37bfa71de3b60322a78e89409c300ecfad7da047dcfe47fa745446f573187361155b46cf097919e3f53da3ebee4b0cfffe4800831bcd742982b2c7107e23d530c5a60a097fca80e8b3b3ce81529c3d5907305589c87d311e1feffc042468fb24039c4beec102cb6cdff9c14030a45fe1458478e5e8fb3439a79ddfd37134e68f8e88966ba1f9f92e21d4892d477c7365c3072dae0d1a006a9d229f584973308181260cebb17e5f67001b3a34fc5e4644c75464820ae8bdbe394ce3ad836c93c3ca36c00228a5cbcaab5f652f7a762725975711d63095d7dff789489d27aa458bc5191e9d1bc9b6d82c8808e9a123d2af2fc44ae4d56129db89ec6b29ec7248c584b8f12f75921c87acabe8ce97566ced972722c3e550d431254d5d5b4e64c2260ef73288f0eedf2ceeb011c16aba4ce47eb1bd265e624f3a500bfd39006724daa456f6c898d3e4d1c6b55d41e262927e85a6403b9736d9d87c17001121fb22da0a2abc89560a1c21acb0d9958894b162a97c993c921e9e6cf96029fdc0ec0e1e88a490f615560465162ce8bc23bb1eafb9cf6dd985ade450b7cbf3ca426031d8c8a902fd7e21d1f0a9e5c2d5847cc4202e999b2667a265a53e482a0f4ca0866e16a95728d231fc27fe5d51d613f9eb10e8e5084d9da716f9c6cd1065d937a6c87fc280c4f3971dd0c4e194c4e01d1f8215ead81b53026fa9e06075671e9ff207bc2f888e6d4842a2e67888381f311dbd4c25d392e658c315c217ce3fe69cc57925c4d58c99034627c172c1f45ef861ccce98ca60321d314d20d70e5541d4b23471e1d0d1d521259bcbba6ead3ef08d56b51778fd7be6af1c9bc008461ee6b1da3e2cc423f1aa598156f567ac5120bad047ba728987ae048075e3b64cae0c05c6bde03b92a5ac02839a9d4c1848dddbfc568927bcb3897f8717dd3d66d008ebd445b3c8dda41696a804865d56667fb949091e22db7abf4fe1e095f9f74e8f90c7cc7a886c39331f359eff985aa3ac91cbf28f9f4014167ba3c5de20d31b0a7979a98f40aa3796d548ce5fea57d24c9d69cfad608ddf0401aaf36449ee4810aea0b812c69989a2697fb51aa561b554e4c95c20b183771af67befda160ba4a2f4e7f40c27fc38a2136e65273748b60dc25cc0379b062260d33db10a1ff9aea48426d5dd35d629f8e55dc539c0bf791483d1f8ccd6a642fefcbf7836e44b1f77b6120fa636fe8f987e4bc8848eaf9c7bd4490150f0b984d5eb8ecea450a6112356c9c78a33736856dae34087a52106faf084787b0699f4f4d6628f97d65c8f6da870534d51c090a86b363c752f2fc97277718a95ff60148def12cf14a77f418959c363c5a788e586d0eca2ba2b729bffe24a4455b71a8ac79008a5c8fd6936a1cb1a708385a4a6287b91d0be9a548e29aa33390758d6582bf78d04c22a2cb814255602d29aeebfa0f4ab90b639de5b0c40dd4a43493e3bff47a7c7df19f2123bc2fb72b34993c57342f4d941b039f59fc3dddcfc59c5a35fabea3b759d10805cc6422f40fc9ead3041a82f45df0016ce369a11bdf888e899a2d5ce4a90df4f7b2c3001815b33fe9591e327f06ef37c3d350237e3492d4752ae305396c4653c61e4fa1de6ed89bccb0dbcf190a8bfae72e0156281ea7580a993fbca4eecf705b92f7266595cebcb2a80922cfe45054d0cc45d97cc4adda73fb506f644bb3e167b5ca59e5eb9e11a7e0f361826b0f8a00c59a17de64f2f36fa0746d05906d97ea1b6a02a8fe86cb68d5b3aa5e1d1364712ae21a3a840393e15af937f1e156a5d7a0defe701e4fcecfec3fc13521880ac715d3e7435be159dff92e5419abd885dfbd40d57c2bf72615b34e6976039cdaea407b58b02036daa311718c30a14cb347f096d5d2d96915c78987a3a15cd7f5d1db695ef9fdecb92beeb350c79342710b56eeebce847823b520957f063bc563434347850b304d24ee50181cd4e0c13a67125291e6fef81df5ac103679adf7a72feceb531a8ed0ffa9008beb7118a475422a9b5e29868047e760769358b0e560b899b283f3cffafeac7da08c90139648d032ec403cebaca66258b8d8b84e457b9eac45df68f084ec6f5fcddea68dcd22bf6d6112ba159b78601ed47de858a1dc46f263f2b3119ed518cffead27c4e60a3ef92f17f0568d0d1a95bec089e3deeecc4eb8875d661f97acc019310cad16a09f644c0f42bbe939c6eec359f7d0d4978403628530edd3a4a0153daaf94d9707f69ce884900b6a98625c2e7d75d5e92e4eea24274b603fecd4405ad3c543285838273c9788a8e9e7c976a8bfb46478f335192a9320616837182f9d1371a65ce92072fa73baa56ca4591e9eac37d77f1a36a5f0225782582d17b34fc88f4ab5fc73940fe063e379a403c483804961191058acccb73db11409e115bc5b3c66a5dd127b99ca99a70fe357cab020937f4b591c20556b74cfbf21d1455df144ffa20b9aee4d234e418c509c4a2fe6e83288b550c1c38a30626da512a0db796bb7c8fd6f3d19c88781cd507e22f1cd917819b7d684d2acdb9d3101096a05220b3dc446a497a89e73fc77c678a0229b9d1c3817653a7b2a7435af59da3b5cc9ea6468beb3ef060a83b6b93c7954c09cc80cb10932d9b72209949f4cf35b93205fcc7ac1ce2ce894459b2e0ed9140190f44d4ef06e0c0f7ff26901c9e1f7cbc16a8cea58b175eea7be17887deb669913170d8047299bcbaa94f07f10b5caabce4e838bc60bcc7ac2fbc0981fb79e57f025674087d7ddf209de509da592b6144a138cd2256746979a3cb5d5ca2a7794c39601cae8205a00a5fae6cbfd3470e7840055b9b36c6eb13b696cecb5cde17bd79f3ba6d2f8854268b21e4035512736a0ff8da7cadfec1fec10b1a95506893334295117809621c10c98827f79ce1eaf81e127c0e9e9c3c40f9787449359c142bd7150b963f3e977108ef7e9e726467ec9296a3ef784c74c363f0fad1077afb944218b41afb017e1ba1c228cd10b7801e761ae17ef0261f0a77897a2b9e1b11b1d033dbb471087b446fa6533dbcff2450e3d0bedee54ba1b513bdca3c8b7a551c2923e246f5c13fb1e9491bc289329119260af1577e311205cb6ff89e16ce44720a337b2d9b02ff4c6223bad6d5f11711c344ebf79af14747ab1c738671b3b76c9ae8c7f083e92d9b7fba4ededf9c78a0669f3ebea5a1bceba4a668b251cd21d1f5c806ff0585c9008bec19a03691caa0b2154371a660865a54c2cc244fad4a88001199e0076aba35d9e25bb8a6ac2e4709ace2e2afb2feb5bb4a766d7447f3f43012d81dc093e2f39de56a915d9b7b287bc135c5352400dc5511a488531552c67fbb11f8eb848517d98adb5bfb0522925fbe988b0edc9df693bea720af4fc45935f7a65ee73d50dcb45aa98ac23e6d4265bc8845fdfb8252843722cac7cf28ee22a75225328d0e58f87ea357d04136e3c27fbfcd75e621e7ed54dcd367c53c6da9f11b847509b3329f0554b7c3d0004a6ed1ef9810699c33a61514a868261a2666a823e2e85be9367e3b390195fe7fce05599e4307e2d3998cf8322d95493daa214e93a148625c662abca7740f0c7a16ba3e8467abcd31e8cc956e052a1c00dcf7262dc0ff7581143f6ead155fb0e1fbb0cd43e06470e46df1374efe502ff857a7265b64f85fcd5e64280a59a482c043f98bbe0ee4bbb7a98a6ca0c76f7558e52c263e655d994a9bfe3925099ad68f62cf4a37cff7ad835622e4203bb48e486537613691fd1afd678ecbb634129a47e27bb20634fb238e4a553893ef26d66a34677152b774956c9b4202c5952f2fbbbb74d686da71a7506259f34faad2dbd5790c868aaadee401c3aa0611fd9ae7d3b2789b600bba94042acc0930e2c2d581e08e4a9660908bbe0be9f952d1a79c86fdf72587093e9a010cf43867c48beb1a98f1f79084044794cce298cacb60265253b5129611e26a6827c6134ace32537e845a355c2f7aab09941c877c4406313dd411e32db8b236cd2c20b2e51ed9071d8ce488cdd7d9821c641840161e9ad8c05ef6e5d4f116a53b71f4dcda5c26d654b60bf08ab384adcc4385941ce7593a160b0a6fa7d4c5d3f3af5eba6d64a6e56e8f74593a3f3ab1e36d487eacd6d7e2d552122a53e654fbd0a8a205293a8c068e780543dfd6d8de172c3fbfc9f18a920ed605ad4687db8561b1acf68b28ba71f62b7696cf626f06cf29fd255f4ab0056e2537950199877ceaa5824136c13d5f3119ba1efa57490b70b8857593f3213017f7ad0680845c12ee32430cb41aa0c07aa995594ab9963ce3097ba7904805b2dedd08a1c5166a363f8211bf7c2280ac840c44c0971b1ba5ad072d1adb0e9e42aded6649cd7c8916deafb9313fd46a1067a48c35c616049b7d3b6769b47b1d48d512d672cbc5baad2b996c5a7dab57c882f19d9a872d53730b662eac40e95890ed1ee490683680b69698d8f3a936f36a071d313830a74a56e8230dfbdfbd1598d12f5cc8499ea01f1fd494877cfcf6d04a7c786d9f4c36124a34d0ac6ecdbd4c4a87f3c352b48290879198e0873966d3872b0c3402942126116ffad200260f49e4b", 0x1000}, {&(0x7f0000000100)="6c71fe25ce21e1d5113d9087a95967e370eb474e469614885495b7541bccbb053e57ad755c5f12964bad98b647f68ffbdf529b8ae203518a1e33a5c8bff802c33cc60e6af3d0ccb527313db3bdb53835c93fa7c09d99833bd071a645f0c97b4dc41af1fc079106dfd9de420332c37fcaa6e084722b8a90c12d770e11e6eca034f04a015a87173cf2e306627d1c70a76f6d01d5f6a0e323715ddd1ba2c380423ac7997cb9ac189696a833cd715474440bfe2d19a5ab3205537bf78314e18f06ee0e2ee178318e5e31aa8c42315c5a81a902320bc833824aaa617d5c72f31525d6ea5f171844", 0xe5}, {&(0x7f0000000000)="885a4120256888e86d7525ed41d35a5c7d0638cee919ab408c87814c5701a5836b71b7dd9591ebfed8178f34fa560bae43906ae5a9ccfea548bfa852d966e9a73115fd9fd56f09b873cc381f38585bb1aef4ce8617a1cbf87998a8b7a5b26c0416c65208802965f9e92c32010ac626c16027882007370652cd410e5118c2acef4fa665b7e092b821c255d1fd855fea4512ece0c17e022b8810670e67965c56d16b3a7fb9ab3b814ccd541831f1419141", 0xb0}, {&(0x7f0000000200)="504ea78cf8d61064cd18bcdae69967a55b67108ab4eb81f34c2c7dc547808c5eac48b8111bd4909a04a03e4503991dfdfe5ca5", 0x33}, {&(0x7f0000000240)="58e6b52ea829a6e27f19945fc3863e05ad04c55ff829255fdd058b8ccdbe97ac2290ce7b2eb428451169120e6e6f0b5179df8f7bd00eedccb4a7aaa2fc9cb6b532f6037c36bfa155c4ffc9d2621684", 0x4f}, {&(0x7f00000002c0)="8d7e42cddb7eb19412", 0x9}], 0x6) 1.786413028s ago: executing program 3 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0b00000000000000001fffffff20000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r2], 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'ipvlan0\x00', @broadcast}) 1.417582642s ago: executing program 3 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0, 0x4}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x38, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r1, @ANYRES16=r0], 0x44}}, 0x4020850) 1.267645893s ago: executing program 2 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) 1.25881023s ago: executing program 3 (id=911): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x8b, &(0x7f0000000000), &(0x7f0000000240)=0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000900000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000850000005500000095000000e1ff00ee"], &(0x7f0000000180)='syzkaller\x00', 0x7ff, 0x56, &(0x7f0000000280)=""/86, 0x0, 0x0, '\x00', r5, @cgroup_skb, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0x8, 0x4}, {0x9, 0x5, 0xc, 0xb}, {0x1, 0x3, 0x2, 0xb}], 0x10, 0x7, @void, @value}, 0x94) 1.180661207s ago: executing program 3 (id=912): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) 1.089530347s ago: executing program 2 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.088942476s ago: executing program 1 (id=914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r0], 0x154}, 0x1, 0x0, 0x0, 0x4004815}, 0x10) 1.033045342s ago: executing program 1 (id=915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xb) (async) accept(r0, 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x89, @private=0xa010102, 0x4e21, 0x1, 'sed\x00', 0x25, 0x9, 0x37}, {@multicast1, 0x4e21, 0x4, 0x8, 0x64b, 0xff}}, 0x44) 993.581393ms ago: executing program 3 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, r1, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9d42}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x73}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc98a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}]}, 0x70}, 0x1, 0x0, 0x0, 0x40008004}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 933.581033ms ago: executing program 2 (id=917): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x40000a4, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d5, 0x8, 0x4, 0x57, 0x3, 0x20000000}, @sadb_ident={0x2, 0xb, 0x6fbe}, @sadb_sa={0x2, 0x1, 0x4d2, 0x6, 0xd, 0x66, 0x0, 0xa0000000}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast2}}]}, 0x70}}, 0x20000001) 933.341635ms ago: executing program 1 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 869.385416ms ago: executing program 1 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}, {0xb}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x0) 841.433253ms ago: executing program 2 (id=920): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff1146f532d9590edacac7b29ce6365c856765", &(0x7f0000000240), 0x800, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r2}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f00000005c0)="e4f1c8d49f2644888af24641477c3d2300f18018ec5341b94705e28d48ab6f34a246f016324506fdbf0f84c325445434ee0d473e8b9ac9f6f469ff994459d9996d496de623f5466fa7f3f478da000d3ae46f7f438b8df23e7d5fab42932ee814ba75ab31c7f058032a9f4159479b2a99212b3b643956085f2629e28530c125e1522bc736f3ccd67807d753dfcd1caa68418f5f54a3619744114117bd9f30fc7c084b9e6c046b256a69aa6ad29cde5edfeeafbac7449affd899895cadec141332dc782c85c2", &(0x7f00000006c0)=@buf="5593ed17de89cd788e9da5ea05da00b266e71b60f88a6e1fe717d3b7fec459f1b691b246afc14d818c236af9214eadcc21ac7e389ef7f1198f2959c400e1cec173756838b38b98c7610e77ea239bfe675341bcee7f1f758e486080671758a3d2d4e8631d1cf9dde533d2d538aabcf47dbf4a3544f981cfce43", 0x2}, 0x20) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) (rerun: 32) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="d9323337ee634138fc2f7186910142e35ec52f6c6d5dd36c7bf5527cb723c65b52f6f31e42d737add7d59fcd713b18b0e7c9", 0x32}, {&(0x7f0000000380)="9fc7726d9381e7bf9cf5429bf43d205d4d3b53e86257c7f7d2a841ef05b6d6335b635521d9c60da04d4a9538aa725569cdf3680c4455a2d0be8b39c77b82f230d25e4909bc6bb403712cfb197321aa7106e5d815c6078a542c8ad19a77cdfa1cb10baa6d144a2be2d0035a1d54464fccfa13dcb98c2a0cd24f66cb7ddf47838b40293b55e5a7151ca20de00ae17a2ab28593288fea7f810f1e90f40983457dacfd115affda20ca33738c74b14d1a1d25c23b7b996823ce0a740a1f02bddb48d1b0da29c5b3abcafc2aedde59f838f110e08e8e15c33ac865cd71a5d78d52a735e3334995dbd1ab0ac8f5fb1abcbf8b", 0xef}, {&(0x7f00000001c0)="80953e7ad1aeca3cf6bc4df423efb5cd7be9bd7525168e9eb30da845668207732cf420ca3518c0948e18060fd86ed93746386731d5259b2858cd10b3303645c049ac3aa50e5f5355f425377a26db7f1ecfef9b9259aec41715ac8c63093220a9677b6b5d633c9711596a4ad44f5deb28a5eb4eb25dabb6385bd42e704a4622", 0x7f}, {&(0x7f0000000480)="53ff0fc944f491475e4c110dad1e1fe636fd9a72bf236086194efb21671038d23d9cc6b3591c89dd4a722af43924c03aa0efda33aba35e157e95f7ce88b8094a88738984783d9af0a1b15f634ebc744ddbd966dfc3f3ff7dbc431d02ba15aa3a4639e97f3074e71246677d8395825b2b5f611c4b65cb596e0d866a0be8113e58d55decbd1b3b62cae949788f948d15f9ef5d3e3e35337218c48ba7f9c2e0d624f778cc9f8475d5b91c231c5ab996d651", 0xb0}], 0x4, &(0x7f0000000540)=[@op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x60, 0x40010}, 0x20000811) 681.283387ms ago: executing program 1 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040000001400018006000600800a000008001c00040003"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0xcc, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7848, 0x700, 0x10, 0x2}}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', r8, 0x7, 0x8000, 0x4, 0x80, {{0x13, 0x4, 0x1, 0x2a, 0x4c, 0x66, 0x0, 0xb3, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@generic={0x94, 0x6, '/wa@'}, @rr={0x7, 0x1b, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @private=0xa010101, @empty]}, @rr={0x7, 0x17, 0x4a, [@broadcast, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@bridge_delvlan={0x70, 0x71, 0x2, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x49}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xc9}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x157}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x70}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) 552.357687ms ago: executing program 2 (id=922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 461.035306ms ago: executing program 2 (id=923): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000060000000000000400000008000a0000000000"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="240000002d0001000000", @ANYRES32, @ANYBLOB="0b000080976b640868"], 0x24}], 0x1}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000000), 0x10, 0x0}, 0x0) socket$inet6(0xa, 0x800, 0x6) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x488}, {r0, 0x4084}, {r2, 0xe408}, {r2, 0x1080}, {r3, 0x3000}, {r3, 0x2000}], 0x6, &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000100)={[0xffffffffffffffff]}, 0x8) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) 1.441365ms ago: executing program 1 (id=924): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) (async) r1 = socket(0x1f, 0x81b43432ba983fec, 0x4) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0xfffffba7, @mcast2, 0x8000}}}, 0x32) r2 = socket$inet_sctp(0x2, 0x8201ad65c48ccfb3, 0x84) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x20) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8=r7, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB="001d0000000000000000000000000000000000000000000000000000fd46bfa947f752b1822ed9a81db6d27e56ef1bae58517166608d268b4d42de9ff24b67cd2e7b8b80ef186042220aec641cb73b"], 0x50) ioctl$FIONCLEX(r10, 0x5450) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x41) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000940)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r9, @ANYBLOB="2c2adfd5637e6bc38873930825fac847e54ae0fc163a26cd73ef3a9db6a420e8d21fb2080d2304eb651f0e886aaa23a2b1cf0c21e4e90eda2a2e55f6f57437506a255e5b32d0b4d8002f7547916315b1eb46074dd3820d406b2791d55dad00cccc6b9016f7f8e6aad98de9824ae7cdebe70dd57be4fa636f3a4039452fa93c21af66bd3b18e39a841c3346d69ce1629588e10d7170416498b505405792751ba29c64cbeafdec9b1b636b386922b7af219f13f01c34a53a4973e4f9648875790843303c1b37235a66c6c864ea10ea43f2ef34e707e43a862ae42d828e87b9f0cbb73b844d3fb0a3a327ada13c0c8ca2772433c0a92a59c519bb", @ANYRES8=r6, @ANYRES32=r4, @ANYRES8=r8, @ANYRES32=r0, @ANYRES64=r11, @ANYRESHEX, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x1, 0x803, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113100000000008510000002000000b7000000000000009500c2e0ffffffff9400001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 0s ago: executing program 3 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000190001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000a637cf52bbdda8fd3a1ed34aa2ad85ef5cccc9442edd371b6fc2302805f0ee830c1495d54c7ab28ffa038b2e0edb9e23ab31e8a74c97d6695b97b3d954", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000200100000000000000000000000000020000000000000000000000000000000000000000e0000002000000000000000000000000000000003300"/308], 0x17c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x298, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x11, 0x3, "5d5cafaa9adcfca17e40e1f38a"}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x76db}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4716a77effa24b6edbbc95349e7eeae3a4b6e28eb64dad62bbb0087538"}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f78e3d6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5af28162}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x404c005}, 0x400c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.634256][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.642450][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.650273][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.657908][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.051505][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.105978][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.148572][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.231688][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.299363][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.378554][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.387317][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.398233][ T5839] bridge_slave_0: entered allmulticast mode [ 70.405416][ T5839] bridge_slave_0: entered promiscuous mode [ 70.433533][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.440775][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.447946][ T5829] bridge_slave_0: entered allmulticast mode [ 70.455396][ T5829] bridge_slave_0: entered promiscuous mode [ 70.462747][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.473191][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.480734][ T5834] bridge_slave_0: entered allmulticast mode [ 70.487480][ T5834] bridge_slave_0: entered promiscuous mode [ 70.496219][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.503710][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.511282][ T5834] bridge_slave_1: entered allmulticast mode [ 70.518221][ T5834] bridge_slave_1: entered promiscuous mode [ 70.526114][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.533415][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.540685][ T5839] bridge_slave_1: entered allmulticast mode [ 70.547508][ T5839] bridge_slave_1: entered promiscuous mode [ 70.569283][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.576615][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.584091][ T5829] bridge_slave_1: entered allmulticast mode [ 70.591055][ T5829] bridge_slave_1: entered promiscuous mode [ 70.657813][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.686733][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.698844][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.712384][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.724039][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.743897][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.754259][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.761865][ T5838] bridge_slave_0: entered allmulticast mode [ 70.768618][ T5838] bridge_slave_0: entered promiscuous mode [ 70.781293][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.815395][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.822909][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.830290][ T5838] bridge_slave_1: entered allmulticast mode [ 70.837777][ T5838] bridge_slave_1: entered promiscuous mode [ 70.872226][ T5839] team0: Port device team_slave_0 added [ 70.878487][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.886058][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.893518][ T5844] bridge_slave_0: entered allmulticast mode [ 70.900898][ T5844] bridge_slave_0: entered promiscuous mode [ 70.930648][ T5834] team0: Port device team_slave_0 added [ 70.938184][ T5839] team0: Port device team_slave_1 added [ 70.947859][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.955428][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.963249][ T5844] bridge_slave_1: entered allmulticast mode [ 70.970204][ T5844] bridge_slave_1: entered promiscuous mode [ 70.987669][ T5829] team0: Port device team_slave_0 added [ 70.996503][ T5829] team0: Port device team_slave_1 added [ 71.005282][ T5834] team0: Port device team_slave_1 added [ 71.042965][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.055103][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.095858][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.102974][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.130446][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.145438][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.184018][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.191766][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.219533][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.238795][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.266952][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.274379][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.300904][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.315354][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.323978][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.350400][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.362941][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.370036][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.396215][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.426959][ T5838] team0: Port device team_slave_0 added [ 71.433820][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.441596][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.468423][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.501030][ T5844] team0: Port device team_slave_0 added [ 71.509446][ T5838] team0: Port device team_slave_1 added [ 71.539621][ T5839] hsr_slave_0: entered promiscuous mode [ 71.546901][ T5839] hsr_slave_1: entered promiscuous mode [ 71.557643][ T5844] team0: Port device team_slave_1 added [ 71.618528][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.626053][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.631383][ T5845] Bluetooth: hci0: command tx timeout [ 71.654589][ T5833] Bluetooth: hci2: command tx timeout [ 71.665350][ T54] Bluetooth: hci1: command tx timeout [ 71.666121][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.687914][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.695023][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.711069][ T5845] Bluetooth: hci3: command tx timeout [ 71.721494][ T54] Bluetooth: hci4: command tx timeout [ 71.733547][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.748691][ T5829] hsr_slave_0: entered promiscuous mode [ 71.755286][ T5829] hsr_slave_1: entered promiscuous mode [ 71.761595][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.769650][ T5829] Cannot create hsr debugfs directory [ 71.783039][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.792699][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.818821][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.831851][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.838915][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.866595][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.883299][ T5834] hsr_slave_0: entered promiscuous mode [ 71.890316][ T5834] hsr_slave_1: entered promiscuous mode [ 71.896676][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.904435][ T5834] Cannot create hsr debugfs directory [ 71.997268][ T5838] hsr_slave_0: entered promiscuous mode [ 72.003664][ T5838] hsr_slave_1: entered promiscuous mode [ 72.010394][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.018040][ T5838] Cannot create hsr debugfs directory [ 72.057854][ T5844] hsr_slave_0: entered promiscuous mode [ 72.064306][ T5844] hsr_slave_1: entered promiscuous mode [ 72.070867][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.078474][ T5844] Cannot create hsr debugfs directory [ 72.275344][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.284784][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.426125][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.446883][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.466714][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.483434][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.542701][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.557961][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.582484][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.597693][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.635713][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.646839][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.656937][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.684734][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.752559][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.794471][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.826611][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.833732][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.850295][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.916669][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.943001][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.951097][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.972265][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.980168][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.991178][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.006526][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.026871][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.034141][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.097104][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.169401][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.185863][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.204985][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.221627][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.232527][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.239862][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.283995][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.300300][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.307809][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.325284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.332482][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.347012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.354341][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.391760][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.398918][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.434740][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.441958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.539031][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.611555][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.650978][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.691979][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.699145][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.712490][ T54] Bluetooth: hci2: command tx timeout [ 73.713227][ T5845] Bluetooth: hci0: command tx timeout [ 73.717973][ T54] Bluetooth: hci1: command tx timeout [ 73.744186][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.767285][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.774893][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.793724][ T5833] Bluetooth: hci4: command tx timeout [ 73.799258][ T5833] Bluetooth: hci3: command tx timeout [ 73.898590][ T5839] veth0_vlan: entered promiscuous mode [ 73.957087][ T5839] veth1_vlan: entered promiscuous mode [ 74.007060][ T5838] veth0_vlan: entered promiscuous mode [ 74.052372][ T5838] veth1_vlan: entered promiscuous mode [ 74.068208][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.113380][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.168523][ T5839] veth0_macvtap: entered promiscuous mode [ 74.206121][ T5839] veth1_macvtap: entered promiscuous mode [ 74.272955][ T5838] veth0_macvtap: entered promiscuous mode [ 74.315303][ T5838] veth1_macvtap: entered promiscuous mode [ 74.330948][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.377454][ T5829] veth0_vlan: entered promiscuous mode [ 74.387094][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.404167][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.412330][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.423491][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.436005][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.449458][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.459403][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.468615][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477751][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.514288][ T5829] veth1_vlan: entered promiscuous mode [ 74.526580][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.537554][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551308][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.572670][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.583049][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593595][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.602722][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681871][ T5844] veth0_vlan: entered promiscuous mode [ 74.716353][ T5829] veth0_macvtap: entered promiscuous mode [ 74.734300][ T5844] veth1_vlan: entered promiscuous mode [ 74.757270][ T5829] veth1_macvtap: entered promiscuous mode [ 74.775490][ T5834] veth0_vlan: entered promiscuous mode [ 74.815760][ T5834] veth1_vlan: entered promiscuous mode [ 74.837446][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.851377][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.866482][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879632][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.891307][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.901896][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.913354][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.938023][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.948885][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.960017][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.971463][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.991698][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.002812][ T5834] veth0_macvtap: entered promiscuous mode [ 75.012177][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.021566][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.031206][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.040495][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.074407][ T5844] veth0_macvtap: entered promiscuous mode [ 75.087356][ T5844] veth1_macvtap: entered promiscuous mode [ 75.100901][ T5834] veth1_macvtap: entered promiscuous mode [ 75.101371][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.117487][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.189931][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.190290][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.200553][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.217422][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.228549][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.240294][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.254024][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.264828][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.276073][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.287550][ T601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.292365][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.306192][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.320036][ T601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.329570][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.341249][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.355843][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.366702][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.377005][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.387822][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.400439][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.414669][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.438401][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.448385][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.459527][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.469572][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.480664][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.493120][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.508087][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.523719][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.534308][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544207][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578963][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.588037][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.606253][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.616579][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.627348][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.637537][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.648199][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.658543][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.669139][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681220][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.707755][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.728800][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.777074][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.790090][ T5833] Bluetooth: hci1: command tx timeout [ 75.796036][ T5833] Bluetooth: hci0: command tx timeout [ 75.801912][ T54] Bluetooth: hci2: command tx timeout [ 75.811953][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821427][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.832752][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.873154][ T54] Bluetooth: hci4: command tx timeout [ 75.878670][ T5833] Bluetooth: hci3: command tx timeout [ 75.920669][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.942262][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.105604][ T5924] netlink: 808 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.150067][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.187005][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.195268][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.214633][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.302962][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.314438][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338442][ T5930] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 76.395074][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.407950][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 76.419390][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.627419][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 76.921311][ T5956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.454366][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.866246][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 77.875500][ T5833] Bluetooth: hci1: command tx timeout [ 77.881291][ T5833] Bluetooth: hci0: command tx timeout [ 77.881336][ T5833] Bluetooth: hci2: command tx timeout [ 77.884553][ T6004] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 77.950330][ T54] Bluetooth: hci3: command tx timeout [ 77.955810][ T54] Bluetooth: hci4: command tx timeout [ 78.076751][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 78.116028][ T6004] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 78.121344][ T6012] erspan0: entered promiscuous mode [ 78.139961][ T6012] erspan0: entered allmulticast mode [ 78.351367][ T6026] pim6reg: entered allmulticast mode [ 78.357676][ T6030] pim6reg: left allmulticast mode [ 78.641532][ T6049] batadv_slave_1: entered promiscuous mode [ 78.662160][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 78.680695][ T6052] openvswitch: netlink: IPv6 tunnel dst address is zero [ 78.793090][ T6057] netlink: zone id is out of range [ 78.803424][ T6053] batadv_slave_1: left promiscuous mode [ 78.820154][ T6057] netlink: zone id is out of range [ 78.826580][ T6057] netlink: zone id is out of range [ 78.834327][ T6057] netlink: zone id is out of range [ 78.845207][ T6057] netlink: zone id is out of range [ 78.877792][ T6057] netlink: zone id is out of range [ 78.912076][ T6057] netlink: zone id is out of range [ 78.957723][ T6057] netlink: zone id is out of range [ 78.990622][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 78.998948][ T6057] netlink: zone id is out of range [ 79.257022][ T6036] syz.0.36 (6036) used greatest stack depth: 19424 bytes left [ 79.331130][ T6080] netlink: 'syz.2.49': attribute type 5 has an invalid length. [ 79.391969][ T6080] : entered promiscuous mode [ 79.404870][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.484291][ T6076] netlink: 92 bytes leftover after parsing attributes in process `syz.4.47'. [ 79.506435][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 79.626438][ T6089] ip6gre1: entered allmulticast mode [ 79.919612][ T6110] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 79.984088][ T25] IPVS: starting estimator thread 0... [ 80.100275][ T6112] IPVS: using max 21 ests per chain, 50400 per kthread [ 80.119967][ T6114] delete_channel: no stack [ 80.384545][ T6132] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 80.497423][ T6136] bridge_slave_1: left allmulticast mode [ 80.504334][ T6136] bridge_slave_1: left promiscuous mode [ 80.516222][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.528641][ T6136] bridge_slave_0: left allmulticast mode [ 80.544422][ T6136] bridge_slave_0: left promiscuous mode [ 80.555063][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.769442][ T6145] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.306809][ T6169] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 81.349156][ T6171] __nla_validate_parse: 7 callbacks suppressed [ 81.349176][ T6171] netlink: 216 bytes leftover after parsing attributes in process `syz.3.78'. [ 81.400790][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 81.425489][ T6179] geneve2: entered promiscuous mode [ 81.966162][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.980111][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.994319][ T6188] bond0 (unregistering): Released all slaves [ 82.144667][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 82.255308][ T6210] Cannot find add_set index 0 as target [ 82.268500][ T6211] netlink: 696 bytes leftover after parsing attributes in process `syz.0.91'. [ 82.312792][ T6210] batman_adv: batadv0: Adding interface: dummy0 [ 82.339909][ T6210] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.370699][ T6210] batman_adv: batadv0: Interface activated: dummy0 [ 82.462394][ T6217] Zero length message leads to an empty skb [ 82.560474][ T6222] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 82.607449][ T6222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.95'. [ 82.807156][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 82.833069][ T6235] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 82.870635][ T6235] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 82.938056][ T6238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'. [ 83.000466][ T6239] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20002 [ 83.380725][ T6255] netlink: 52 bytes leftover after parsing attributes in process `syz.4.107'. [ 83.750524][ T6277] atomic_op ffff88805a00d998 conn xmit_atomic 0000000000000000 [ 83.875576][ T6280] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 83.887490][ T6278] netlink: 'syz.1.114': attribute type 7 has an invalid length. [ 83.911644][ T6278] netlink: 15 bytes leftover after parsing attributes in process `syz.1.114'. [ 83.944254][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 83.955287][ T6288] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 83.963501][ T6288] syzkaller1: Linktype set failed because interface is up [ 83.974340][ T25] syzkaller1: tun_net_xmit 90 [ 83.980129][ T6278] netlink: 'syz.1.114': attribute type 7 has an invalid length. [ 84.276242][ T6291] warning: `syz.0.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.708524][ T6311] geneve2: entered promiscuous mode [ 84.713951][ T6311] geneve2: entered allmulticast mode [ 84.945249][ T6333] x_tables: duplicate underflow at hook 1 [ 85.145883][ T6344] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 85.165900][ T6344] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 85.207684][ T6344] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 85.240787][ T6347] Bluetooth: MGMT ver 1.23 [ 85.259411][ T6344] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 85.283472][ T6344] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 85.303460][ T6346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.321086][ T6344] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 86.041544][ T6390] geneve2: entered promiscuous mode [ 86.053655][ T6390] geneve2: entered allmulticast mode [ 86.340867][ T6410] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.471739][ T6412] __nla_validate_parse: 4 callbacks suppressed [ 86.471756][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 86.528358][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 86.571986][ T6419] net_ratelimit: 35 callbacks suppressed [ 86.572014][ T6419] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.986641][ T6447] openvswitch: netlink: IP tunnel dst address not specified [ 87.037967][ T6449] trusted_key: syz.4.165 sent an empty control message without MSG_MORE. [ 87.083251][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 87.104425][ T6451] sock: sock_set_timeout: `syz.3.167' (pid 6451) tries to set negative timeout [ 87.224277][ T6461] x_tables: unsorted underflow at hook 2 [ 87.260766][ T6461] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.643822][ T46] cfg80211: failed to load regulatory.db [ 87.832479][ T6490] syzkaller0: entered allmulticast mode [ 87.887587][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 87.931969][ T6502] netlink: zone id is out of range [ 87.955161][ T6502] netlink: zone id is out of range [ 87.968211][ T6502] netlink: zone id is out of range [ 88.102409][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 88.111671][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 88.548877][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.638875][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.858405][ T6547] validate_nla: 4 callbacks suppressed [ 88.858430][ T6547] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 88.879350][ T6547] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 89.068194][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 89.139419][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 89.219277][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.293837][ T6561] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.303031][ T6561] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.312140][ T6561] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.321043][ T6561] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.357636][ T6564] veth0: entered promiscuous mode [ 89.458029][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.490093][ T6563] veth0: left promiscuous mode [ 89.532473][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.565485][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.729639][ T6579] openvswitch: netlink: Flow key attr not present in new flow. [ 89.744956][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.782865][ T6569] netlink: 'syz.3.207': attribute type 5 has an invalid length. [ 89.975860][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.073431][ T6588] bond1: entered promiscuous mode [ 90.078951][ T6588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.100667][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.115793][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.124818][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.143124][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.159127][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.167075][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.300399][ T6601] IPv4: Oversized IP packet from 172.20.20.24 [ 90.309548][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 90.316837][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 90.482958][ T6598] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 90.497240][ T6603] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 90.821329][ T11] bridge_slave_1: left allmulticast mode [ 90.837409][ T6622] x_tables: duplicate underflow at hook 2 [ 90.840352][ T11] bridge_slave_1: left promiscuous mode [ 90.850882][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.914195][ T11] bridge_slave_0: left allmulticast mode [ 90.921346][ T11] bridge_slave_0: left promiscuous mode [ 90.937033][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.494571][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.507662][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.517938][ T11] bond0 (unregistering): Released all slaves [ 91.529623][ T11] bond1 (unregistering): Released all slaves [ 91.546076][ T6629] __nla_validate_parse: 6 callbacks suppressed [ 91.546092][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 91.573084][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 91.794865][ T6662] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 91.886282][ T6677] net_ratelimit: 192 callbacks suppressed [ 91.886301][ T6677] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 91.902723][ T6668] geneve0: mtu less than device minimum [ 91.915838][ T6679] netlink: 220 bytes leftover after parsing attributes in process `syz.4.229'. [ 91.972106][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 92.206196][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 92.279955][ T5833] Bluetooth: hci3: command tx timeout [ 92.317631][ T11] hsr_slave_0: left promiscuous mode [ 92.343805][ T6698] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 32 [ 92.355584][ T11] hsr_slave_1: left promiscuous mode [ 92.370379][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.403026][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 92.415416][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.432905][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.450859][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.496945][ T11] veth1_macvtap: left promiscuous mode [ 92.506090][ T11] veth0_macvtap: left promiscuous mode [ 92.517763][ T11] veth1_vlan: left promiscuous mode [ 92.526319][ T11] veth0_vlan: left promiscuous mode [ 92.583972][ T6713] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 93.427920][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.496923][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.898228][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 93.903454][ T6709] geneve3: entered promiscuous mode [ 93.913013][ T6709] geneve3: entered allmulticast mode [ 94.259522][ T6767] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 94.331051][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.338212][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.349828][ T5833] Bluetooth: hci3: command tx timeout [ 94.363264][ T6592] bridge_slave_0: entered allmulticast mode [ 94.380937][ T6592] bridge_slave_0: entered promiscuous mode [ 94.423199][ T6767] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 94.506030][ T6783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.250'. [ 94.617070][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.645753][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.683507][ T6592] bridge_slave_1: entered allmulticast mode [ 94.693421][ T6592] bridge_slave_1: entered promiscuous mode [ 94.739604][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.250'. [ 94.749244][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 94.759927][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.250'. [ 94.974886][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.057602][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.091839][ T6808] xt_policy: too many policy elements [ 95.352976][ T6592] team0: Port device team_slave_0 added [ 95.413326][ T6592] team0: Port device team_slave_1 added [ 95.602246][ T6843] netlink: 'syz.2.263': attribute type 9 has an invalid length. [ 95.664705][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.678264][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.715102][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.744384][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.753609][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.788687][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.803864][ T6848] ax25_connect(): syz.4.265 uses autobind, please contact jreuter@yaina.de [ 95.985847][ T6862] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 96.009563][ T6592] hsr_slave_0: entered promiscuous mode [ 96.034608][ T6592] hsr_slave_1: entered promiscuous mode [ 96.047113][ T6592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.111934][ T6592] Cannot create hsr debugfs directory [ 96.172806][ T6862] macvlan0: entered promiscuous mode [ 96.179996][ T6862] macvlan0: entered allmulticast mode [ 96.214343][ T6862] veth1_vlan: entered allmulticast mode [ 96.258642][ T6862] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 96.430040][ T5833] Bluetooth: hci3: command tx timeout [ 96.682294][ T6887] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.802428][ T6899] __nla_validate_parse: 2 callbacks suppressed [ 96.802451][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 96.873731][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 96.886324][ T976] IPVS: starting estimator thread 0... [ 96.984876][ T6903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.000225][ T6906] IPVS: using max 24 ests per chain, 57600 per kthread [ 97.175557][ T6923] veth0_to_bond: entered promiscuous mode [ 97.190824][ T6923] veth0_to_bond: entered allmulticast mode [ 97.450819][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 97.476341][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.284'. [ 97.540532][ T6937] nft_compat: unsupported protocol 5 [ 97.723483][ T6941] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 97.731704][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 98.317068][ T6971] sctp: [Deprecated]: syz.1.293 (pid 6971) Use of int in maxseg socket option. [ 98.317068][ T6971] Use struct sctp_assoc_value instead [ 98.419826][ T6967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.293'. [ 98.451354][ T6971] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 98.505896][ T6984] xt_hashlimit: size too large, truncated to 1048576 [ 98.521479][ T5833] Bluetooth: hci3: command tx timeout [ 98.598286][ T6592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.928608][ T6592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.959317][ T6592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.020492][ T6592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.167126][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.300'. [ 99.217819][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.300'. [ 99.244708][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.300'. [ 99.317196][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.300'. [ 99.360318][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.399195][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.441589][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.448807][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.548921][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.556372][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.679009][ T6592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.763830][ T7037] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 99.877082][ T7041] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 100.264888][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.479399][ T6592] veth0_vlan: entered promiscuous mode [ 100.506396][ T6592] veth1_vlan: entered promiscuous mode [ 100.593202][ T7067] netlink: 'syz.4.312': attribute type 39 has an invalid length. [ 100.854887][ T7076] netlink: 'syz.1.314': attribute type 39 has an invalid length. [ 100.970601][ T6592] veth0_macvtap: entered promiscuous mode [ 100.994807][ T7076] veth0_macvtap: left promiscuous mode [ 101.069333][ T6592] veth1_macvtap: entered promiscuous mode [ 101.236132][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.253848][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.277618][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.289256][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.298473][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.308421][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.311531][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.319107][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.362253][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.374648][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.391078][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.398643][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.400902][ T7088] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.437518][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.493720][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.521385][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.579031][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.632353][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.721589][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.759015][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.787874][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.822959][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.845487][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.866428][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.888478][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.888763][ T7119] ipt_REJECT: ECHOREPLY no longer supported. [ 101.939430][ T7117] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.968942][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.016652][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.065527][ T7119] netlink: 'syz.1.320': attribute type 12 has an invalid length. [ 102.081926][ T7119] __nla_validate_parse: 64 callbacks suppressed [ 102.081946][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.320'. [ 102.097567][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.322'. [ 102.130707][ T6592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.143323][ T6592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.156453][ T6592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.171165][ T6592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.338335][ T7136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.696629][ T7148] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 102.793237][ T7136] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 102.809640][ T6758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.825710][ T7136] netlink: 'syz.1.325': attribute type 3 has an invalid length. [ 102.826991][ T6758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.856862][ T7136] netlink: 216 bytes leftover after parsing attributes in process `syz.1.325'. [ 102.863068][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'. [ 102.889098][ T7169] netlink: 'syz.2.330': attribute type 9 has an invalid length. [ 102.889523][ T7136] NCSI netlink: No device for ifindex 813332851 [ 103.099829][ T6758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.139834][ T6758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.208358][ T7176] wireguard: wg1: Could not create IPv4 socket [ 103.253103][ T7176] wireguard: wg1: Could not create IPv4 socket [ 103.456518][ T7196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.503247][ T7196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.723347][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 103.868761][ T7221] Cannot find add_set index 4 as target [ 104.082630][ T3438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.234728][ T3438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.387361][ T3438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.438538][ T7251] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 104.464930][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 104.540838][ T3438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.990146][ T3438] bridge_slave_1: left allmulticast mode [ 104.995956][ T3438] bridge_slave_1: left promiscuous mode [ 105.053914][ T7279] IPv4: Oversized IP packet from 172.20.20.24 [ 105.060881][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 105.067271][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 105.077210][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.140619][ T3438] bridge_slave_0: left allmulticast mode [ 105.165697][ T3438] bridge_slave_0: left promiscuous mode [ 105.187163][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.198299][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.216436][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.227248][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.235954][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.244823][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.253359][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.855021][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.867155][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.878745][ T3438] bond0 (unregistering): Released all slaves [ 106.031004][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 106.080130][ T7326] netlink: 220 bytes leftover after parsing attributes in process `syz.2.358'. [ 106.203636][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 106.313103][ T7326] tipc: Started in network mode [ 106.318846][ T7326] tipc: Node identity ac14140f, cluster identity 4711 [ 106.359221][ T7326] tipc: New replicast peer: 255.255.255.255 [ 106.377774][ T7326] tipc: Enabled bearer , priority 10 [ 106.400335][ T7334] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 106.417935][ T7334] netlink: 220 bytes leftover after parsing attributes in process `syz.3.361'. [ 106.726622][ T7367] IPVS: ip_vs_add_dest(): server weight less than zero [ 106.890020][ T3438] hsr_slave_0: left promiscuous mode [ 106.924081][ T3438] hsr_slave_1: left promiscuous mode [ 106.941281][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.969096][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.000692][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.021763][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.104559][ T3438] veth1_macvtap: left promiscuous mode [ 107.110426][ T3438] veth0_macvtap: left promiscuous mode [ 107.116211][ T3438] veth1_vlan: left promiscuous mode [ 107.122349][ T3438] veth0_vlan: left promiscuous mode [ 107.310953][ T5833] Bluetooth: hci3: command tx timeout [ 107.514416][ T5881] tipc: Node number set to 2886997007 [ 107.739206][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 107.781964][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 108.146853][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 108.168320][ T7394] netlink: 71 bytes leftover after parsing attributes in process `syz.4.370'. [ 108.338127][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 108.446102][ T7423] netlink: 'syz.3.373': attribute type 9 has an invalid length. [ 108.459978][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 108.587046][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.606089][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.616470][ T7295] bridge_slave_0: entered allmulticast mode [ 108.634187][ T7295] bridge_slave_0: entered promiscuous mode [ 108.654262][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.702098][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.709524][ T7295] bridge_slave_1: entered allmulticast mode [ 108.745947][ T7295] bridge_slave_1: entered promiscuous mode [ 108.897585][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 108.952436][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.982860][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.077681][ T7295] team0: Port device team_slave_0 added [ 109.114068][ T7295] team0: Port device team_slave_1 added [ 109.126523][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.382'. [ 109.138522][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.382'. [ 109.265686][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.285646][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.378108][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 109.385768][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.398148][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 109.416424][ T5833] Bluetooth: hci3: command tx timeout [ 109.490700][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 109.502257][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 109.554112][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.562756][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.590730][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.739458][ T7295] hsr_slave_0: entered promiscuous mode [ 109.771066][ T7295] hsr_slave_1: entered promiscuous mode [ 109.791886][ T7295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.826532][ T7295] Cannot create hsr debugfs directory [ 109.856706][ T7493] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 110.037449][ T7497] netlink: 'syz.1.392': attribute type 12 has an invalid length. [ 110.087982][ T7495] netlink: 'syz.4.391': attribute type 75 has an invalid length. [ 110.178682][ T7504] sctp: [Deprecated]: syz.3.393 (pid 7504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.178682][ T7504] Use struct sctp_sack_info instead [ 110.270903][ T7497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.043254][ T7295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.092127][ T7295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.156216][ T7295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.235295][ T7546] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 111.285010][ T7295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.368694][ T7555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.469916][ T5833] Bluetooth: hci3: command tx timeout [ 111.709450][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.873554][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.011079][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.018437][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.069805][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.077024][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.171047][ T7581] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 112.208570][ T7598] netlink: 'syz.1.415': attribute type 12 has an invalid length. [ 112.238110][ T7598] netlink: 'syz.1.415': attribute type 11 has an invalid length. [ 112.271400][ T7295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.517117][ T7607] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 112.553041][ T7607] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 112.675680][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.820777][ T7295] veth0_vlan: entered promiscuous mode [ 112.873703][ T7295] veth1_vlan: entered promiscuous mode [ 113.049236][ T7295] veth0_macvtap: entered promiscuous mode [ 113.095654][ T7295] veth1_macvtap: entered promiscuous mode [ 113.151033][ T5833] Bluetooth: hci0: command tx timeout [ 113.171518][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.203397][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.218307][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.236178][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.259324][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.286556][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.306311][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.327060][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.351118][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.427127][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.462303][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.494437][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.525621][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.549915][ T5833] Bluetooth: hci3: command tx timeout [ 113.566320][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.587510][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.604893][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.615887][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.637202][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.698556][ T7295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.739832][ T7295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.777573][ T7295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.817240][ T7295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.056371][ T6755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.068804][ T6755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.209795][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.228360][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.264917][ T7682] __nla_validate_parse: 10 callbacks suppressed [ 114.264936][ T7682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.435'. [ 114.655784][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 114.675945][ T7702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.437'. [ 114.745248][ T7708] sock: sock_timestamping_bind_phc: sock not bind to device [ 115.107232][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 115.250361][ T7728] netlink: 'syz.3.444': attribute type 8 has an invalid length. [ 115.323853][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.479113][ T7732] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 115.521148][ T7732] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 115.594468][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.722049][ T7732] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 115.831903][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.890451][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 116.023959][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.071595][ T7760] netlink: 64787 bytes leftover after parsing attributes in process `syz.2.455'. [ 116.214418][ T5833] Bluetooth: hci4: link tx timeout [ 116.220106][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.255820][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.269812][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.285952][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.307505][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.317736][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.324088][ T11] bridge_slave_1: left allmulticast mode [ 116.333990][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.347013][ T11] bridge_slave_1: left promiscuous mode [ 116.370503][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.391596][ T11] bridge_slave_0: left allmulticast mode [ 116.397326][ T11] bridge_slave_0: left promiscuous mode [ 116.410104][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.765914][ T5833] Bluetooth: hci4: command tx timeout [ 116.854909][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.866660][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.879632][ T11] bond0 (unregistering): Released all slaves [ 117.078315][ T7794] nbd: must specify an index to disconnect [ 117.322977][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 117.332884][ T7814] ieee802154 phy1 wpan1: encryption failed: -22 [ 117.367313][ T7816] ieee802154 phy1 wpan1: encryption failed: -22 [ 117.565106][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 117.595513][ T11] hsr_slave_0: left promiscuous mode [ 117.619467][ T11] hsr_slave_1: left promiscuous mode [ 117.636885][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.655475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.681319][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.688937][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.726868][ T11] veth1_macvtap: left promiscuous mode [ 117.748184][ T11] veth0_macvtap: left promiscuous mode [ 117.765595][ T11] veth1_vlan: left promiscuous mode [ 117.771855][ T11] veth0_vlan: left promiscuous mode [ 118.203142][ T7848] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 118.254531][ T7849] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 118.401727][ T11] team0 (unregistering): Port device team_slave_1 removed [ 118.430033][ T54] Bluetooth: hci3: command tx timeout [ 118.456705][ T11] team0 (unregistering): Port device team_slave_0 removed [ 118.834866][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 119.024653][ T7856] xt_socket: unknown flags 0x50 [ 119.268819][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.320621][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.328106][ T7770] bridge_slave_0: entered allmulticast mode [ 119.403768][ T7770] bridge_slave_0: entered promiscuous mode [ 119.429380][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.468497][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.490086][ T7770] bridge_slave_1: entered allmulticast mode [ 119.497507][ T7770] bridge_slave_1: entered promiscuous mode [ 119.694727][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.727536][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.882262][ T7770] team0: Port device team_slave_0 added [ 119.907556][ T7770] team0: Port device team_slave_1 added [ 119.991751][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.019808][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.053013][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.086631][ T7913] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 120.093832][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.129127][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.164093][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.200038][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 120.286489][ T7770] hsr_slave_0: entered promiscuous mode [ 120.310004][ T7770] hsr_slave_1: entered promiscuous mode [ 120.316276][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.324445][ T7770] Cannot create hsr debugfs directory [ 120.332012][ T7929] veth0: entered promiscuous mode [ 120.374570][ T7929] veth0: left promiscuous mode [ 120.509864][ T54] Bluetooth: hci3: command tx timeout [ 120.612082][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 120.719818][ T7946] netlink: 'syz.4.501': attribute type 19 has an invalid length. [ 120.767192][ T7947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.500'. [ 120.811225][ T7947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.500'. [ 120.859387][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 120.967664][ T7951] tipc: Started in network mode [ 120.977044][ T7951] tipc: Node identity 6282d1fdfd2e, cluster identity 4711 [ 121.005335][ T7951] tipc: Enabled bearer , priority 0 [ 121.035429][ T7950] tipc: Resetting bearer [ 122.059984][ T5885] tipc: Node number set to 2678903293 [ 122.600080][ T54] Bluetooth: hci3: command tx timeout [ 122.918155][ T7950] tipc: Disabling bearer [ 122.980199][ T7976] syz.2.510 (7976) used greatest stack depth: 18328 bytes left [ 123.038547][ T7770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.081192][ T7770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.108962][ T7770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.128166][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 123.137600][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 123.175741][ T7770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.375415][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.412705][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.475536][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.482961][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.581279][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.588425][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.697780][ T8014] x_tables: duplicate underflow at hook 2 [ 123.787459][ T8021] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 124.025767][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.096053][ T8039] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 124.131079][ T8039] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 124.188127][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.531'. [ 124.204692][ T7770] veth0_vlan: entered promiscuous mode [ 124.215749][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.531'. [ 124.227299][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.531'. [ 124.238748][ T8049] netlink: 'syz.4.531': attribute type 39 has an invalid length. [ 124.296269][ T7770] veth1_vlan: entered promiscuous mode [ 124.362916][ T7770] veth0_macvtap: entered promiscuous mode [ 124.384866][ T7770] veth1_macvtap: entered promiscuous mode [ 124.438619][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.463248][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.481090][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.495364][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.507319][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.518653][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.528773][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.558206][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.590536][ T8069] IPv4: Oversized IP packet from 172.20.20.24 [ 124.599411][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 124.605840][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 124.617591][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.668341][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.680641][ T54] Bluetooth: hci3: command tx timeout [ 124.691757][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.732097][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.765045][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.785540][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.804012][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.818520][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.833332][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.860779][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.900842][ T7770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.922945][ T7770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.936443][ T7770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.950840][ T7770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.123760][ T6745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.144037][ T6745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.198364][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.208338][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.653154][ T8126] netlink: 'syz.1.551': attribute type 6 has an invalid length. [ 125.666605][ T8126] __nla_validate_parse: 2 callbacks suppressed [ 125.666623][ T8126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.551'. [ 125.812782][ T8134] netlink: 144 bytes leftover after parsing attributes in process `syz.3.553'. [ 125.965853][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'. [ 126.016881][ T8148] sch_fq: defrate 0 ignored. [ 126.058606][ T8148] wg2: entered promiscuous mode [ 126.074522][ T8148] wg2: entered allmulticast mode [ 126.354943][ T8174] ip6tnl2: entered allmulticast mode [ 126.407162][ T8164] tipc: Started in network mode [ 126.416042][ T8164] tipc: Node identity 4, cluster identity 4711 [ 126.440779][ T8164] tipc: Node number set to 4 [ 126.459370][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 126.490455][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 126.621496][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 126.695385][ T6758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.638170][ T6758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.820112][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.838103][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.841396][ T6758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.848360][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.866315][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.877364][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.885688][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.080466][ T6758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.191195][ T8249] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 128.347079][ T6758] bridge_slave_1: left allmulticast mode [ 128.359312][ T6758] bridge_slave_1: left promiscuous mode [ 128.376140][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.407078][ T6758] bridge_slave_0: left allmulticast mode [ 128.423339][ T6758] bridge_slave_0: left promiscuous mode [ 128.437446][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.638836][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 129.158324][ T6758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.172837][ T6758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.183419][ T6758] bond0 (unregistering): Released all slaves [ 129.207824][ T8264] erspan0: entered allmulticast mode [ 129.378363][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 129.865647][ T6758] hsr_slave_0: left promiscuous mode [ 129.872339][ T6758] hsr_slave_1: left promiscuous mode [ 129.878465][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.899313][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.908892][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.928424][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.949898][ T5833] Bluetooth: hci3: command tx timeout [ 130.011403][ T6758] veth1_macvtap: left promiscuous mode [ 130.038715][ T6758] veth0_macvtap: left promiscuous mode [ 130.050150][ T6758] veth1_vlan: left promiscuous mode [ 130.060387][ T6758] veth0_vlan: left promiscuous mode [ 130.486217][ T6758] team0 (unregistering): Port device team_slave_1 removed [ 130.558904][ T6758] team0 (unregistering): Port device team_slave_0 removed [ 130.602569][ T8322] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 131.025686][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.033335][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.041073][ T8233] bridge_slave_0: entered allmulticast mode [ 131.047943][ T8233] bridge_slave_0: entered promiscuous mode [ 131.057396][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.065615][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.073673][ T8233] bridge_slave_1: entered allmulticast mode [ 131.082792][ T8233] bridge_slave_1: entered promiscuous mode [ 131.092511][ T8315] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 131.111688][ T8322] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.296439][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 131.335787][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.380623][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.381453][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.598'. [ 131.551176][ T8233] team0: Port device team_slave_0 added [ 131.571918][ T8233] team0: Port device team_slave_1 added [ 131.602077][ T8349] x_tables: duplicate underflow at hook 1 [ 131.695922][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.724312][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.762064][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.773840][ T8352] ip6t_srh: unknown srh invflags A757 [ 131.778036][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.804724][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.806006][ T8352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.603'. [ 131.844853][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.029939][ T5833] Bluetooth: hci3: command tx timeout [ 132.031022][ T8365] Cannot find del_set index 17 as target [ 132.113191][ T8233] hsr_slave_0: entered promiscuous mode [ 132.119609][ T8233] hsr_slave_1: entered promiscuous mode [ 132.170312][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.199838][ T8233] Cannot create hsr debugfs directory [ 132.217806][ T8371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.377955][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 132.406873][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.611'. [ 132.674873][ T8401] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 132.683008][ T8401] netlink: 180 bytes leftover after parsing attributes in process `syz.2.617'. [ 132.692196][ T8401] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 132.700629][ T8401] netlink: 'syz.2.617': attribute type 2 has an invalid length. [ 132.795390][ T8404] netlink: 96 bytes leftover after parsing attributes in process `syz.1.619'. [ 132.816105][ T8404] 8021q: VLANs not supported on sit0 [ 132.824835][ T8408] netlink: 100 bytes leftover after parsing attributes in process `syz.4.618'. [ 132.871642][ T29] audit: type=1107 audit(1741290787.690:2): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UA٠0ltݕ/ 6򊨊 ' [ 133.046196][ T8412] netlink: 108 bytes leftover after parsing attributes in process `syz.2.620'. [ 133.155218][ T8233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.195034][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 133.287218][ T8233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.300921][ T8428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.320496][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.395810][ T8421] bridge_slave_0 (unregistering): left allmulticast mode [ 133.410073][ T8421] bridge_slave_0 (unregistering): left promiscuous mode [ 133.432511][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.492471][ T8233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.517639][ T8233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.721381][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877244][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.931117][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.955329][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.962536][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.984710][ T8457] x_tables: duplicate underflow at hook 1 [ 134.021111][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.028371][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.111139][ T5833] Bluetooth: hci3: command tx timeout [ 134.172022][ T8466] netlink: 'syz.4.637': attribute type 3 has an invalid length. [ 134.397654][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.532006][ T8233] veth0_vlan: entered promiscuous mode [ 134.562353][ T8233] veth1_vlan: entered promiscuous mode [ 134.575222][ T8495] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 134.626695][ T8233] veth0_macvtap: entered promiscuous mode [ 134.664416][ T8233] veth1_macvtap: entered promiscuous mode [ 134.699328][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.740905][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.762768][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.780379][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.819945][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.844866][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.876905][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.913113][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.941854][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.953808][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.964429][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.974648][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.985468][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.997053][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.027146][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.042057][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.065806][ T8516] erspan0: left promiscuous mode [ 135.075109][ T8516] batman_adv: batadv0: Adding interface: erspan0 [ 135.094193][ T8516] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.135612][ T8516] batman_adv: batadv0: Not using interface erspan0 (retrying later): interface not active [ 135.149329][ T8233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.171640][ T8233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.189766][ T8233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.206184][ T8233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.248370][ T8530] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 135.321472][ T8532] ax25_connect(): syz.2.655 uses autobind, please contact jreuter@yaina.de [ 135.417048][ T6758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.452872][ T6758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.468842][ T6759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.490459][ T6759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.508182][ T8544] openvswitch: netlink: Message has 2 unknown bytes. [ 135.522466][ T8544] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.210015][ T5833] Bluetooth: hci3: command tx timeout [ 136.373970][ T8572] netlink: 'syz.2.664': attribute type 2 has an invalid length. [ 136.385168][ T8558] "syz.3.661" (8558) uses obsolete ecb(arc4) skcipher [ 136.456214][ T8575] __nla_validate_parse: 10 callbacks suppressed [ 136.456234][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 136.485037][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 136.805924][ T8577] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.920285][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 137.020420][ T8583] delete_channel: no stack [ 137.068511][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.105529][ T6756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.284957][ T6756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.809799][ T8589] netlink: 196 bytes leftover after parsing attributes in process `syz.1.668'. [ 137.840301][ T8589] netlink: 196 bytes leftover after parsing attributes in process `syz.1.668'. [ 137.841697][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024a58800: rx timeout, send abort [ 137.859514][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024a58c00: rx timeout, send abort [ 137.859721][ T8589] netlink: 19 bytes leftover after parsing attributes in process `syz.1.668'. [ 137.868834][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888024a58800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 137.892843][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888024a58c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.040703][ T6756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.078979][ T8596] netlink: 'syz.4.672': attribute type 4 has an invalid length. [ 138.098974][ T8596] netem: unknown loss type 0 [ 138.105907][ T8596] netem: change failed [ 138.252119][ T6756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.287347][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 138.352458][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.363372][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.374294][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.384029][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.396209][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.403996][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.479206][ T6756] bridge_slave_1: left allmulticast mode [ 138.485233][ T6756] bridge_slave_1: left promiscuous mode [ 138.491319][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.503552][ T6756] bridge_slave_0: left allmulticast mode [ 138.509419][ T6756] bridge_slave_0: left promiscuous mode [ 138.517897][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.590673][ T8623] xt_CT: No such helper "pptp" [ 138.772493][ T8632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.682'. [ 138.985739][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.996974][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.007300][ T6756] bond0 (unregistering): Released all slaves [ 139.402337][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 139.449209][ T8644] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.507751][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 140.435454][ T5833] Bluetooth: hci3: command tx timeout [ 141.232166][ T8663] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 141.361136][ T6756] hsr_slave_0: left promiscuous mode [ 141.376367][ T6756] hsr_slave_1: left promiscuous mode [ 141.393039][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.413127][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.451216][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.469399][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.496409][ T8681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 141.540326][ T6756] veth1_macvtap: left promiscuous mode [ 141.546119][ T6756] veth0_macvtap: left promiscuous mode [ 141.570730][ T6756] veth1_vlan: left promiscuous mode [ 141.578914][ T6756] veth0_vlan: left promiscuous mode [ 142.222234][ T6756] team0 (unregistering): Port device team_slave_1 removed [ 142.267711][ T6756] team0 (unregistering): Port device team_slave_0 removed [ 142.510520][ T5833] Bluetooth: hci3: command tx timeout [ 142.712784][ T8676] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.693'. [ 142.766012][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 142.987981][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.006936][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.028999][ T8613] bridge_slave_0: entered allmulticast mode [ 143.056552][ T8726] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 143.057672][ T8613] bridge_slave_0: entered promiscuous mode [ 143.083469][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.091023][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.101143][ T8613] bridge_slave_1: entered allmulticast mode [ 143.108194][ T8613] bridge_slave_1: entered promiscuous mode [ 143.115650][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 143.233199][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.262719][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.347692][ T8613] team0: Port device team_slave_0 added [ 143.357951][ T8613] team0: Port device team_slave_1 added [ 143.436088][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.450136][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.480783][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.507360][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.521266][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.559906][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.631642][ T8613] hsr_slave_0: entered promiscuous mode [ 143.637838][ T8613] hsr_slave_1: entered promiscuous mode [ 143.645072][ T8613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.653489][ T8613] Cannot create hsr debugfs directory [ 143.894993][ T8758] Cannot find set identified by id 0 to match [ 144.042773][ T8734] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.201530][ T8772] netlink: 'syz.1.722': attribute type 11 has an invalid length. [ 144.573853][ T8613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.593024][ T8613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.600685][ T54] Bluetooth: hci3: command tx timeout [ 144.697941][ T8613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.741187][ T8613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.781965][ T8799] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 145.024521][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.056395][ T8813] tipc: Can't bind to reserved service type 1 [ 145.117600][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.165098][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.172292][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.197034][ T8819] netlink: 'syz.4.734': attribute type 12 has an invalid length. [ 145.212934][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.220146][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.409582][ T8613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.446904][ T8613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.729620][ T8838] team0 (unregistering): Port device team_slave_0 removed [ 145.754987][ T8838] team0 (unregistering): Port device team_slave_1 removed [ 145.980193][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.043293][ T8862] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 146.083140][ T8613] veth0_vlan: entered promiscuous mode [ 146.121586][ T8613] veth1_vlan: entered promiscuous mode [ 146.242362][ T8613] veth0_macvtap: entered promiscuous mode [ 146.267846][ T8613] veth1_macvtap: entered promiscuous mode [ 146.303077][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 146.341918][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.370561][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.395728][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.417039][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.430531][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.441210][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.452912][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.466006][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.504156][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.751'. [ 146.527536][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.558017][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.589094][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.614237][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.638419][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.669149][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.669825][ T54] Bluetooth: hci3: command 0x0419 tx timeout [ 146.692593][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.721889][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.779203][ T8613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.802012][ T8613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.817920][ T8613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.838674][ T8613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.988006][ T6755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.008150][ T6755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.027729][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 147.043318][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 147.048929][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.056346][ T8910] netlink: 'syz.3.757': attribute type 20 has an invalid length. [ 147.062122][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.080474][ T8913] netlink: 84 bytes leftover after parsing attributes in process `syz.1.759'. [ 147.335761][ T8924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.384643][ T8927] sctp: [Deprecated]: syz.4.763 (pid 8927) Use of int in max_burst socket option. [ 147.384643][ T8927] Use struct sctp_assoc_value instead [ 147.403593][ T8927] netlink: 'syz.4.763': attribute type 3 has an invalid length. [ 147.520094][ T8929] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 147.537630][ T8929] netlink: 'syz.2.764': attribute type 11 has an invalid length. [ 147.561073][ T8929] netlink: 224 bytes leftover after parsing attributes in process `syz.2.764'. [ 147.679374][ T8941] xt_hashlimit: size too large, truncated to 1048576 [ 148.153857][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 148.170250][ T8963] IPv6: Can't replace route, no match found [ 148.176284][ T8959] batman_adv: batadv0: Interface deactivated: dummy0 [ 148.189213][ T8959] batman_adv: batadv0: Removing interface: dummy0 [ 148.198358][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.212405][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.242254][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.776'. [ 148.276595][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.302833][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.506378][ T8975] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 148.742397][ T6755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.063149][ T6755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.162263][ T6755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.291799][ T6755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.425698][ T6755] bridge_slave_1: left allmulticast mode [ 149.431681][ T6755] bridge_slave_1: left promiscuous mode [ 149.437518][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.447185][ T6755] bridge_slave_0: left allmulticast mode [ 149.453609][ T6755] bridge_slave_0: left promiscuous mode [ 149.459520][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.616601][ T8993] netlink: 'syz.2.784': attribute type 3 has an invalid length. [ 150.148713][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.164515][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.175626][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.199293][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.227476][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.243569][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.360396][ T6755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.388483][ T6755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.404485][ T6755] bond0 (unregistering): Released all slaves [ 150.521695][ T8943] Set syz1 is full, maxelem 65536 reached [ 150.966837][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.795'. [ 152.360509][ T5833] Bluetooth: hci3: command tx timeout [ 152.474533][ T9044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 152.625695][ T9051] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 152.726902][ T9055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.764963][ T9055] sctp: [Deprecated]: syz.4.798 (pid 9055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.764963][ T9055] Use struct sctp_sack_info instead [ 152.874282][ T9061] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 152.884452][ T6755] hsr_slave_0: left promiscuous mode [ 152.940570][ T6755] hsr_slave_1: left promiscuous mode [ 152.959381][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.981394][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.995719][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.004637][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.049300][ T6755] veth1_macvtap: left promiscuous mode [ 153.062757][ T6755] veth0_macvtap: left promiscuous mode [ 153.075299][ T6755] veth1_vlan: left promiscuous mode [ 153.083439][ T6755] veth0_vlan: left promiscuous mode [ 153.710180][ T6755] team0 (unregistering): Port device team_slave_1 removed [ 153.767880][ T6755] team0 (unregistering): Port device team_slave_0 removed [ 154.423645][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 154.442090][ T5833] Bluetooth: hci3: command tx timeout [ 154.466101][ T9099] netlink: 80 bytes leftover after parsing attributes in process `syz.4.810'. [ 154.518263][ T9099] netlink: 80 bytes leftover after parsing attributes in process `syz.4.810'. [ 154.777336][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 154.800687][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.809843][ T9120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 154.827410][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.853526][ T9001] bridge_slave_0: entered allmulticast mode [ 154.881924][ T9001] bridge_slave_0: entered promiscuous mode [ 154.901929][ T9120] erspan0: entered promiscuous mode [ 154.907970][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.937537][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.950484][ T9001] bridge_slave_1: entered allmulticast mode [ 154.957970][ T9001] bridge_slave_1: entered promiscuous mode [ 155.033613][ T9129] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 155.050049][ T9129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.087818][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.104341][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.134440][ T9134] wg1 speed is unknown, defaulting to 1000 [ 155.199410][ T9135] sock: sock_timestamping_bind_phc: sock not bind to device [ 155.226357][ T9134] wg1 speed is unknown, defaulting to 1000 [ 155.283342][ T9001] team0: Port device team_slave_0 added [ 155.296564][ T9134] wg1 speed is unknown, defaulting to 1000 [ 155.298253][ T9001] team0: Port device team_slave_1 added [ 155.383894][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.399733][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.453381][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.478810][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.494858][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.538887][ T9134] infiniband syz0: set active [ 155.547907][ T9134] infiniband syz0: added wg1 [ 155.555606][ T9134] syz0: rxe_create_cq: returned err = -12 [ 155.562409][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.574284][ T46] wg1 speed is unknown, defaulting to 1000 [ 155.583955][ T9134] infiniband syz0: Couldn't create ib_mad CQ [ 155.623405][ T9134] infiniband syz0: Couldn't open port 1 [ 155.662684][ T9134] RDS/IB: syz0: added [ 155.667165][ T9134] smc: adding ib device syz0 with port count 1 [ 155.681987][ T9134] smc: ib device syz0 port 1 has pnetid [ 155.713171][ T9001] hsr_slave_0: entered promiscuous mode [ 155.728995][ T9001] hsr_slave_1: entered promiscuous mode [ 155.737359][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.755800][ T9001] Cannot create hsr debugfs directory [ 155.768352][ T46] wg1 speed is unknown, defaulting to 1000 [ 155.785998][ T9134] wg1 speed is unknown, defaulting to 1000 [ 156.053369][ T9169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.830'. [ 156.091212][ T9134] wg1 speed is unknown, defaulting to 1000 [ 156.285764][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 156.376227][ T9134] wg1 speed is unknown, defaulting to 1000 [ 156.530194][ T5833] Bluetooth: hci3: command tx timeout [ 156.613741][ T9001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.649284][ T9001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.673667][ T9192] x_tables: unsorted underflow at hook 2 [ 156.700839][ T9001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.727061][ T9001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.732072][ T9194] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 156.790559][ T9134] wg1 speed is unknown, defaulting to 1000 [ 156.895758][ T9201] veth1_macvtap: left promiscuous mode [ 156.908531][ T9201] macsec0: entered allmulticast mode [ 156.937514][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.969265][ T9201] veth1_macvtap: entered promiscuous mode [ 156.982025][ T9201] veth1_macvtap: entered allmulticast mode [ 156.991747][ T9201] macsec0: left allmulticast mode [ 157.002671][ T9201] veth1_macvtap: left allmulticast mode [ 157.058508][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.084740][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.092311][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.221155][ T9134] wg1 speed is unknown, defaulting to 1000 [ 157.224367][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.234471][ T6759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.329051][ T9001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.377965][ T9001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.593303][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.603476][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 157.629417][ T9242] ax25_connect(): syz.4.853 uses autobind, please contact jreuter@yaina.de [ 157.645910][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.662213][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 157.693401][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 157.731007][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.773839][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.793938][ T9237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.818701][ T9237] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -1 [ 157.882519][ T9001] veth0_vlan: entered promiscuous mode [ 157.899303][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.914878][ T9001] veth1_vlan: entered promiscuous mode [ 157.927888][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.951389][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.985478][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 157.993636][ T9001] veth0_macvtap: entered promiscuous mode [ 158.015735][ T9237] xfrm0 speed is unknown, defaulting to 1000 [ 158.024556][ T9001] veth1_macvtap: entered promiscuous mode [ 158.118527][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.150669][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.168847][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.210567][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.232180][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.262546][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.291078][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.302652][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.313464][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.324186][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.335111][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.346663][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.367589][ T9001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.380298][ T9001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.390698][ T9001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.401555][ T9001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.481605][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.493122][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.601302][ T5833] Bluetooth: hci3: command tx timeout [ 158.611951][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.633673][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.742137][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.770674][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.846379][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.890677][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.961965][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.986426][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.040750][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 159.139142][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.158327][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.216001][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.236075][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.245291][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.257093][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.267011][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.274720][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.327949][ T9304] Unknown options in mask 1f4 [ 159.342314][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 159.375480][ T11] bridge_slave_1: left allmulticast mode [ 159.383465][ T11] bridge_slave_1: left promiscuous mode [ 159.389337][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.840537][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 160.072112][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.084511][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.094927][ T11] bond0 (unregistering): Released all slaves [ 160.120399][ T9307] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 160.250981][ T46] xfrm0 speed is unknown, defaulting to 1000 [ 160.257225][ T46] infiniband syz1: ib_query_port failed (-19) [ 160.322503][ T9299] wg1 speed is unknown, defaulting to 1000 [ 160.429991][ T11] tipc: Left network mode [ 160.462774][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 160.479862][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 160.544630][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.878'. [ 160.878595][ T11] hsr_slave_0: left promiscuous mode [ 160.885036][ T11] hsr_slave_1: left promiscuous mode [ 160.907790][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.917783][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.925375][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.938813][ T11] veth1_macvtap: left promiscuous mode [ 160.944693][ T11] veth1_vlan: left promiscuous mode [ 160.950016][ T11] veth0_vlan: left promiscuous mode [ 161.312668][ T5833] Bluetooth: hci1: command tx timeout [ 161.709547][ T9299] chnl_net:caif_netlink_parms(): no params data found [ 161.723156][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 161.839420][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.856155][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.866595][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.887780][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.899541][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.910359][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.913505][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.938582][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.966550][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.001138][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.226119][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.237733][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.247134][ T9299] bridge_slave_0: entered allmulticast mode [ 162.259312][ T9299] bridge_slave_0: entered promiscuous mode [ 162.267425][ T9374] veth0: entered promiscuous mode [ 162.273522][ T9349] wg1 speed is unknown, defaulting to 1000 [ 162.279630][ T9376] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ܻ}rءÑV§jPb [ 162.307921][ T9299] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.324094][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.334965][ T9299] bridge_slave_1: entered allmulticast mode [ 162.346257][ T9299] bridge_slave_1: entered promiscuous mode [ 162.367623][ T9373] veth0: left promiscuous mode [ 162.474910][ T9299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.499579][ T9380] netlink: 'syz.3.891': attribute type 13 has an invalid length. [ 162.521422][ T9299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.664698][ T9299] team0: Port device team_slave_0 added [ 162.713251][ T9299] team0: Port device team_slave_1 added [ 162.747561][ T9388] __nla_validate_parse: 4 callbacks suppressed [ 162.747580][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 162.824708][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.849773][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.890772][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.958057][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.976413][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.979461][ T9401] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 163.006866][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.038728][ T9401] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 163.125030][ T9408] netlink: 'syz.2.899': attribute type 13 has an invalid length. [ 163.304452][ T9408] veth1_vlan: left allmulticast mode [ 163.328078][ T9408] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.338002][ T9408] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.347840][ T9408] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.356979][ T9408] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.390150][ T5833] Bluetooth: hci1: command tx timeout [ 163.465485][ T9299] hsr_slave_0: entered promiscuous mode [ 163.491419][ T9299] hsr_slave_1: entered promiscuous mode [ 163.500507][ T9299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.529838][ T9299] Cannot create hsr debugfs directory [ 163.578536][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.636866][ T5883] IPVS: starting estimator thread 0... [ 163.740116][ T9432] IPVS: using max 22 ests per chain, 52800 per kthread [ 163.769639][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.817196][ T9349] chnl_net:caif_netlink_parms(): no params data found [ 163.876232][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.952803][ T5833] Bluetooth: hci3: command tx timeout [ 164.006866][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.060686][ T9453] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 164.255156][ T9463] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001 [ 164.342034][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.362663][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.370555][ T9349] bridge_slave_0: entered allmulticast mode [ 164.377666][ T9349] bridge_slave_0: entered promiscuous mode [ 164.386890][ T9467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.403094][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.412467][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.421426][ T9467] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 164.431153][ T9349] bridge_slave_1: entered allmulticast mode [ 164.439222][ T9349] bridge_slave_1: entered promiscuous mode [ 164.517102][ T11] bridge_slave_1: left allmulticast mode [ 164.524404][ T11] bridge_slave_1: left promiscuous mode [ 164.532038][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.569568][ T11] bridge_slave_0: left allmulticast mode [ 164.587995][ T11] bridge_slave_0: left promiscuous mode [ 164.594608][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.706907][ T9482] netlink: 'syz.1.921': attribute type 10 has an invalid length. [ 164.759019][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 165.060338][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.071901][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.081932][ T11] bond0 (unregistering): Released all slaves [ 165.103418][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.116819][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.263539][ T9497] ================================================================== [ 165.265517][ T9349] team0: Port device team_slave_0 added [ 165.271641][ T9497] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 165.271687][ T9497] Read of size 4 at addr ffff8880257525b8 by task syz.1.924/9497 [ 165.271701][ T9497] [ 165.271721][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.1.924 Not tainted 6.14.0-rc4-syzkaller-00210-gccc2f5a436fb #0 [ 165.271739][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.271752][ T9497] Call Trace: [ 165.271762][ T9497] [ 165.271768][ T9497] dump_stack_lvl+0x241/0x360 [ 165.271791][ T9497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.271806][ T9497] ? __pfx__printk+0x10/0x10 [ 165.271821][ T9497] ? _printk+0xd5/0x120 [ 165.271834][ T9497] ? __virt_addr_valid+0x183/0x530 [ 165.271847][ T9497] ? __virt_addr_valid+0x183/0x530 [ 165.271860][ T9497] print_report+0x16e/0x5b0 [ 165.271878][ T9497] ? __virt_addr_valid+0x183/0x530 [ 165.271890][ T9497] ? __virt_addr_valid+0x183/0x530 [ 165.271902][ T9497] ? __virt_addr_valid+0x45f/0x530 [ 165.271915][ T9497] ? __phys_addr+0xba/0x170 [ 165.271935][ T9497] ? hci_sock_get_cookie+0x49/0x50 [ 165.271952][ T9497] kasan_report+0x143/0x180 [ 165.271970][ T9497] ? hci_sock_get_cookie+0x49/0x50 [ 165.271991][ T9497] hci_sock_get_cookie+0x49/0x50 [ 165.272010][ T9497] mgmt_cmd_status+0x1be/0x4d0 [ 165.272033][ T9497] cmd_complete_rsp+0x114/0x180 [ 165.272056][ T9497] mgmt_pending_foreach+0xd1/0x130 [ 165.272075][ T9497] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 165.272096][ T9497] __mgmt_power_off+0x189/0x440 [ 165.272118][ T9497] ? __pfx___mgmt_power_off+0x10/0x10 [ 165.272141][ T9497] ? __mutex_trylock_common+0x183/0x2e0 [ 165.272159][ T9497] ? __pfx___might_resched+0x10/0x10 [ 165.272185][ T9497] ? __pfx___mutex_trylock_common+0x10/0x10 [ 165.272203][ T9497] ? rcu_is_watching+0x15/0xb0 [ 165.272221][ T9497] ? trace_contention_end+0x3c/0x120 [ 165.272237][ T9497] ? __mutex_lock+0x397/0x1010 [ 165.272260][ T9497] ? __mutex_unlock_slowpath+0x227/0x800 [ 165.272279][ T9497] ? hci_dev_close_sync+0x60d/0x1260 [ 165.272298][ T9497] ? _raw_spin_lock_irq+0xdf/0x120 [ 165.272315][ T9497] ? __pfx___mutex_lock+0x10/0x10 [ 165.272334][ T9497] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.272355][ T9497] ? _raw_spin_unlock_irq+0x2e/0x50 [ 165.272371][ T9497] ? drain_workqueue+0x2d3/0x3a0 [ 165.272394][ T9497] ? hci_discovery_set_state+0x57/0x180 [ 165.272414][ T9497] hci_dev_close_sync+0x6ff/0x1260 [ 165.272432][ T9497] ? __pfx_enable_work+0x10/0x10 [ 165.272453][ T9497] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 165.272474][ T9497] hci_dev_close+0x112/0x210 [ 165.272494][ T9497] sock_do_ioctl+0x158/0x460 [ 165.272514][ T9497] ? __pfx_sock_do_ioctl+0x10/0x10 [ 165.272538][ T9497] sock_ioctl+0x626/0x8e0 [ 165.272554][ T9497] ? __pfx_sock_ioctl+0x10/0x10 [ 165.272570][ T9497] ? __fget_files+0x2a/0x410 [ 165.272592][ T9497] ? __fget_files+0x2a/0x410 [ 165.272613][ T9497] ? __pfx_sock_ioctl+0x10/0x10 [ 165.272629][ T9497] __se_sys_ioctl+0xf5/0x170 [ 165.272647][ T9497] do_syscall_64+0xf3/0x230 [ 165.272666][ T9497] ? clear_bhb_loop+0x35/0x90 [ 165.272689][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.272709][ T9497] RIP: 0033:0x7fdf5778d169 [ 165.272728][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.272741][ T9497] RSP: 002b:00007fdf5866d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.272759][ T9497] RAX: ffffffffffffffda RBX: 00007fdf579a5fa0 RCX: 00007fdf5778d169 [ 165.272771][ T9497] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 165.272781][ T9497] RBP: 00007fdf5780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.272792][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.272801][ T9497] R13: 0000000000000000 R14: 00007fdf579a5fa0 R15: 00007fffbca20b48 [ 165.272819][ T9497] [ 165.272824][ T9497] [ 165.286185][ T9349] team0: Port device team_slave_1 added [ 165.293088][ T9497] Allocated by task 7537: [ 165.293102][ T9497] kasan_save_track+0x3f/0x80 [ 165.293121][ T9497] __kasan_kmalloc+0x98/0xb0 [ 165.293135][ T9497] __kmalloc_noprof+0x285/0x4c0 [ 165.293154][ T9497] sk_prot_alloc+0xe0/0x210 [ 165.293172][ T9497] sk_alloc+0x3e/0x370 [ 165.293195][ T9497] bt_sock_alloc+0x3c/0x340 [ 165.470199][ T5833] Bluetooth: hci1: command tx timeout [ 165.473498][ T9497] hci_sock_create+0xa1/0x190 [ 165.473529][ T9497] bt_sock_create+0x161/0x230 [ 165.473546][ T9497] __sock_create+0x4c0/0xa30 [ 165.473565][ T9497] __sys_socket+0x150/0x3c0 [ 165.712791][ T9497] __x64_sys_socket+0x7a/0x90 [ 165.717482][ T9497] do_syscall_64+0xf3/0x230 [ 165.721987][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.727992][ T9497] [ 165.730321][ T9497] Freed by task 9498: [ 165.734417][ T9497] kasan_save_track+0x3f/0x80 [ 165.739157][ T9497] kasan_save_free_info+0x40/0x50 [ 165.744300][ T9497] __kasan_slab_free+0x59/0x70 [ 165.749073][ T9497] kfree+0x196/0x430 [ 165.752973][ T9497] __sk_destruct+0x50c/0x690 [ 165.757673][ T9497] mgmt_pending_remove+0x13e/0x1a0 [ 165.762884][ T9497] mgmt_pending_foreach+0xd1/0x130 [ 165.768200][ T9497] mgmt_index_removed+0x133/0x390 [ 165.773246][ T9497] hci_sock_bind+0xd70/0x12d0 [ 165.777957][ T9497] __sys_bind+0x1e4/0x290 [ 165.782307][ T9497] __x64_sys_bind+0x7a/0x90 [ 165.786799][ T9497] do_syscall_64+0xf3/0x230 [ 165.791299][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.797479][ T9497] [ 165.799881][ T9497] The buggy address belongs to the object at ffff888025752000 [ 165.799881][ T9497] which belongs to the cache kmalloc-2k of size 2048 [ 165.813922][ T9497] The buggy address is located 1464 bytes inside of [ 165.813922][ T9497] freed 2048-byte region [ffff888025752000, ffff888025752800) [ 165.827995][ T9497] [ 165.830339][ T9497] The buggy address belongs to the physical page: [ 165.836736][ T9497] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25750 [ 165.846129][ T9497] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 165.855232][ T9497] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 165.862799][ T9497] page_type: f5(slab) [ 165.866779][ T9497] raw: 00fff00000000040 ffff88801b042000 ffffea0000d64600 dead000000000002 [ 165.875378][ T9497] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 165.883966][ T9497] head: 00fff00000000040 ffff88801b042000 ffffea0000d64600 dead000000000002 [ 165.892654][ T9497] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 165.901511][ T9497] head: 00fff00000000003 ffffea000095d401 ffffffffffffffff 0000000000000000 [ 165.910184][ T9497] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 165.918841][ T9497] page dumped because: kasan: bad access detected [ 165.925256][ T9497] page_owner tracks the page as allocated [ 165.931046][ T9497] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 74191879041, free_ts 74161001233 [ 165.952667][ T9497] post_alloc_hook+0x1f4/0x240 [ 165.957516][ T9497] get_page_from_freelist+0x365c/0x37a0 [ 165.963139][ T9497] __alloc_frozen_pages_noprof+0x292/0x710 [ 165.968937][ T9497] alloc_pages_mpol+0x311/0x660 [ 165.973788][ T9497] allocate_slab+0x8f/0x3a0 [ 165.978304][ T9497] ___slab_alloc+0xc27/0x14a0 [ 165.983006][ T9497] __slab_alloc+0x58/0xa0 [ 165.987337][ T9497] __kmalloc_node_noprof+0x2ee/0x4d0 [ 165.992704][ T9497] qdisc_alloc+0x9a/0xa80 [ 165.997050][ T9497] qdisc_create_dflt+0x62/0x4b0 [ 166.001908][ T9497] dev_activate+0x3c0/0x1240 [ 166.006495][ T9497] __dev_open+0x38e/0x4a0 [ 166.010822][ T9497] __dev_change_flags+0x1e2/0x6f0 [ 166.015869][ T9497] dev_change_flags+0x8b/0x1a0 [ 166.020649][ T9497] do_setlink+0xcca/0x4300 [ 166.025067][ T9497] rtnl_newlink+0x1704/0x1d30 [ 166.029738][ T9497] page last free pid 5838 tgid 5838 stack trace: [ 166.036101][ T9497] free_frozen_pages+0xe0d/0x10e0 [ 166.041125][ T9497] __put_partials+0x160/0x1c0 [ 166.045795][ T9497] put_cpu_partial+0x17c/0x250 [ 166.050548][ T9497] __slab_free+0x290/0x380 [ 166.054950][ T9497] qlist_free_all+0x9a/0x140 [ 166.059551][ T9497] kasan_quarantine_reduce+0x14f/0x170 [ 166.065061][ T9497] __kasan_slab_alloc+0x23/0x80 [ 166.069932][ T9497] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 166.075843][ T9497] __alloc_skb+0x1c3/0x440 [ 166.080474][ T9497] netlink_sendmsg+0x634/0xcb0 [ 166.085316][ T9497] __sock_sendmsg+0x221/0x270 [ 166.089983][ T9497] __sys_sendto+0x363/0x4c0 [ 166.094477][ T9497] __x64_sys_sendto+0xde/0x100 [ 166.099231][ T9497] do_syscall_64+0xf3/0x230 [ 166.103740][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.109712][ T9497] [ 166.112088][ T9497] Memory state around the buggy address: [ 166.117789][ T9497] ffff888025752480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.125840][ T9497] ffff888025752500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.133893][ T9497] >ffff888025752580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.141942][ T9497] ^ [ 166.147840][ T9497] ffff888025752600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.155907][ T9497] ffff888025752680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.163993][ T9497] ================================================================== [ 166.173190][ T5833] Bluetooth: hci3: command tx timeout [ 166.212215][ T9497] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.219465][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.1.924 Not tainted 6.14.0-rc4-syzkaller-00210-gccc2f5a436fb #0 [ 166.230078][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.240148][ T9497] Call Trace: [ 166.243425][ T9497] [ 166.246532][ T9497] dump_stack_lvl+0x241/0x360 [ 166.251284][ T9497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.256513][ T9497] ? __pfx__printk+0x10/0x10 [ 166.261108][ T9497] ? preempt_schedule+0xe1/0xf0 [ 166.265988][ T9497] ? vscnprintf+0x5d/0x90 [ 166.270328][ T9497] panic+0x349/0x880 [ 166.274237][ T9497] ? check_panic_on_warn+0x21/0xb0 [ 166.279364][ T9497] ? __pfx_panic+0x10/0x10 [ 166.283809][ T9497] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 166.290249][ T9497] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.296589][ T9497] ? print_report+0x519/0x5b0 [ 166.301270][ T9497] check_panic_on_warn+0x86/0xb0 [ 166.306405][ T9497] ? hci_sock_get_cookie+0x49/0x50 [ 166.311529][ T9497] end_report+0x77/0x160 [ 166.315870][ T9497] kasan_report+0x154/0x180 [ 166.320461][ T9497] ? hci_sock_get_cookie+0x49/0x50 [ 166.325572][ T9497] hci_sock_get_cookie+0x49/0x50 [ 166.330605][ T9497] mgmt_cmd_status+0x1be/0x4d0 [ 166.335752][ T9497] cmd_complete_rsp+0x114/0x180 [ 166.340712][ T9497] mgmt_pending_foreach+0xd1/0x130 [ 166.345974][ T9497] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 166.351458][ T9497] __mgmt_power_off+0x189/0x440 [ 166.356429][ T9497] ? __pfx___mgmt_power_off+0x10/0x10 [ 166.361836][ T9497] ? __mutex_trylock_common+0x183/0x2e0 [ 166.367594][ T9497] ? __pfx___might_resched+0x10/0x10 [ 166.372888][ T9497] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.379023][ T9497] ? rcu_is_watching+0x15/0xb0 [ 166.383928][ T9497] ? trace_contention_end+0x3c/0x120 [ 166.389424][ T9497] ? __mutex_lock+0x397/0x1010 [ 166.394210][ T9497] ? __mutex_unlock_slowpath+0x227/0x800 [ 166.399858][ T9497] ? hci_dev_close_sync+0x60d/0x1260 [ 166.405146][ T9497] ? _raw_spin_lock_irq+0xdf/0x120 [ 166.410343][ T9497] ? __pfx___mutex_lock+0x10/0x10 [ 166.416000][ T9497] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.422281][ T9497] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.427485][ T9497] ? drain_workqueue+0x2d3/0x3a0 [ 166.432434][ T9497] ? hci_discovery_set_state+0x57/0x180 [ 166.438016][ T9497] hci_dev_close_sync+0x6ff/0x1260 [ 166.443159][ T9497] ? __pfx_enable_work+0x10/0x10 [ 166.448119][ T9497] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 166.453757][ T9497] hci_dev_close+0x112/0x210 [ 166.458371][ T9497] sock_do_ioctl+0x158/0x460 [ 166.463135][ T9497] ? __pfx_sock_do_ioctl+0x10/0x10 [ 166.468241][ T9497] sock_ioctl+0x626/0x8e0 [ 166.472565][ T9497] ? __pfx_sock_ioctl+0x10/0x10 [ 166.477581][ T9497] ? __fget_files+0x2a/0x410 [ 166.482194][ T9497] ? __fget_files+0x2a/0x410 [ 166.486786][ T9497] ? __pfx_sock_ioctl+0x10/0x10 [ 166.491644][ T9497] __se_sys_ioctl+0xf5/0x170 [ 166.496241][ T9497] do_syscall_64+0xf3/0x230 [ 166.500833][ T9497] ? clear_bhb_loop+0x35/0x90 [ 166.505518][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.511426][ T9497] RIP: 0033:0x7fdf5778d169 [ 166.515903][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.535603][ T9497] RSP: 002b:00007fdf5866d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.544012][ T9497] RAX: ffffffffffffffda RBX: 00007fdf579a5fa0 RCX: 00007fdf5778d169 [ 166.552042][ T9497] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 166.560020][ T9497] RBP: 00007fdf5780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.568090][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.576065][ T9497] R13: 0000000000000000 R14: 00007fdf579a5fa0 R15: 00007fffbca20b48 [ 166.584056][ T9497] [ 166.587389][ T9497] Kernel Offset: disabled [ 166.591745][ T9497] Rebooting in 86400 seconds..