last executing test programs: 1m17.096311028s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 1m15.823356248s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 1m3.680840515s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 1m2.328945895s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 50.508635043s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 49.927763436s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 36.995908919s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 36.933420654s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 23.870610468s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 22.424898818s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 9.780195862s ago: executing program 3 (id=22): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 8.125957727s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 2.866827815s ago: executing program 1 (id=1692): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x17, 0x0, &(0x7f00000004c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd7000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x78, r6}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.598740621s ago: executing program 1 (id=1695): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.229899326s ago: executing program 2 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280"], 0x98}}, 0x4048010) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.205833982s ago: executing program 4 (id=1709): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) 1.09769757s ago: executing program 1 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff030000080009000100"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.046002365s ago: executing program 4 (id=1711): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}]}, 0x1c}], 0x1}, 0x20008000) 1.031115524s ago: executing program 2 (id=1712): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 886.368864ms ago: executing program 1 (id=1713): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff03, 0xfffffffffffffffe) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route_sched(r0, 0x0, 0x4044) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044836}, 0x20004004) 864.829965ms ago: executing program 2 (id=1714): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fe"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000"], 0xb8}}, 0x4000) 830.046685ms ago: executing program 4 (id=1715): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x0, {0x1, 0xff}, {0x0, 0x1, 0x2}, 0x1}, {0x1, 0x1, {0x2, 0x0, 0x4}, {0x2, 0xf0}, 0xff, 0x2}], 0x40) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="3912c1d03d9f66103940872256", 0xd}, {0x0}], 0x2}}], 0x1, 0xc051) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 829.368746ms ago: executing program 1 (id=1716): syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x1) 719.295434ms ago: executing program 2 (id=1717): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x10f, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) unshare(0x26020480) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004200)}], 0x1}}], 0x2, 0xc0) socket$can_j1939(0x1d, 0x2, 0x7) 708.550096ms ago: executing program 1 (id=1718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000001002"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 566.749644ms ago: executing program 2 (id=1719): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x64010102, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) 335.910993ms ago: executing program 2 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280"], 0x98}}, 0x4048010) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 155.858056ms ago: executing program 4 (id=1721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) 109.808347ms ago: executing program 4 (id=1722): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0xffffff00, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x400, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 0s ago: executing program 4 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ctory 'hsr0' with parent 'hsr' already present! [ 240.844214][ T8796] Cannot create hsr debugfs directory [ 241.203964][ T8986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.939'. [ 241.240201][ T8983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.939'. [ 241.346097][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 241.424260][ T7404] IPVS: starting estimator thread 0... [ 241.525732][ T8998] IPVS: using max 27 ests per chain, 64800 per kthread [ 241.741315][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 241.771488][ T8777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.789807][ T8777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.849321][ T8777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.879090][ T8777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.049008][ T9024] team0: Cannot enslave team device to itself [ 242.269505][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.283328][ T9033] raw_sendmsg: syz.1.957 forgot to set AF_INET. Fix it! [ 242.390090][ T8796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.411660][ T8796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.464975][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.486383][ T8796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.528775][ T8796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.573920][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.581181][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.594554][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.601838][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.823787][ T9059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.966'. [ 242.877050][ T5168] Bluetooth: hci3: command tx timeout [ 242.928856][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.980315][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.021413][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.969'. [ 243.042486][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.049748][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.083885][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.091179][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.353214][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.579705][ T8777] veth0_vlan: entered promiscuous mode [ 243.612373][ T8777] veth1_vlan: entered promiscuous mode [ 243.683772][ T8777] veth0_macvtap: entered promiscuous mode [ 243.704435][ T8777] veth1_macvtap: entered promiscuous mode [ 243.742512][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.793343][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.822879][ T8777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.834258][ T8777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.846155][ T8777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.854916][ T8777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.913713][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.019031][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.047431][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.171171][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.186126][ T8796] veth0_vlan: entered promiscuous mode [ 244.195067][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.213636][ T8796] veth1_vlan: entered promiscuous mode [ 244.331317][ T8796] veth0_macvtap: entered promiscuous mode [ 244.371320][ T8796] veth1_macvtap: entered promiscuous mode [ 244.393180][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.408987][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.430353][ T8796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.450421][ T8796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.459491][ T8796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.474292][ T8796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.759863][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.784843][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.833744][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 244.872488][ T9122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.873957][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.892834][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.114094][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.433659][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.571349][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.642573][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.938129][ T13] bridge_slave_1: left allmulticast mode [ 245.943869][ T13] bridge_slave_1: left promiscuous mode [ 245.950157][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.961258][ T13] bridge_slave_0: left allmulticast mode [ 245.970643][ T13] bridge_slave_0: left promiscuous mode [ 245.979891][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.307098][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.320400][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.331404][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.340818][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.356593][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.448844][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.459965][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.470386][ T13] bond0 (unregistering): Released all slaves [ 246.510878][ T9132] lo speed is unknown, defaulting to 1000 [ 246.739032][ T9132] hsr0 speed is unknown, defaulting to 1000 [ 247.074095][ T13] hsr_slave_0: left promiscuous mode [ 247.086197][ T13] hsr_slave_1: left promiscuous mode [ 247.109325][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.121205][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.143388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.161471][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.242298][ T13] veth1_macvtap: left promiscuous mode [ 247.255852][ T13] veth0_macvtap: left promiscuous mode [ 247.269753][ T13] veth1_vlan: left promiscuous mode [ 247.280393][ T13] veth0_vlan: left promiscuous mode [ 247.392599][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 247.548624][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.558776][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.570781][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.581362][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.594544][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.909445][ T13] team0 (unregistering): Port device team_slave_1 removed [ 247.952572][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.420895][ T9153] lo speed is unknown, defaulting to 1000 [ 248.444067][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 248.487159][ T5168] Bluetooth: hci0: command tx timeout [ 248.886829][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.905723][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.913052][ T9132] bridge_slave_0: entered allmulticast mode [ 248.921447][ T9132] bridge_slave_0: entered promiscuous mode [ 248.929638][ T9153] hsr0 speed is unknown, defaulting to 1000 [ 248.930439][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.944873][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.952472][ T9132] bridge_slave_1: entered allmulticast mode [ 248.970358][ T9132] bridge_slave_1: entered promiscuous mode [ 249.099248][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.153008][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.251192][ T9132] team0: Port device team_slave_0 added [ 249.284084][ T9132] team0: Port device team_slave_1 added [ 249.391852][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.414714][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.467765][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.547121][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.576254][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.583263][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.617706][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.675756][ T5168] Bluetooth: hci3: command tx timeout [ 249.737444][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.948504][ T9132] hsr_slave_0: entered promiscuous mode [ 249.956248][ T9132] hsr_slave_1: entered promiscuous mode [ 249.963179][ T9132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.974329][ T9132] Cannot create hsr debugfs directory [ 250.027393][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.198173][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.324127][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 250.576100][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 250.897206][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.906749][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.918631][ T9153] bridge_slave_0: entered allmulticast mode [ 250.928409][ T9153] bridge_slave_0: entered promiscuous mode [ 250.941710][ T13] bridge_slave_1: left allmulticast mode [ 250.947732][ T13] bridge_slave_1: left promiscuous mode [ 250.953523][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.988338][ T13] bridge_slave_0: left allmulticast mode [ 251.002617][ T13] bridge_slave_0: left promiscuous mode [ 251.009240][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.068496][ T9225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.472858][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 251.562758][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.574502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.584994][ T13] bond0 (unregistering): Released all slaves [ 251.614051][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.622192][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.629611][ T9153] bridge_slave_1: entered allmulticast mode [ 251.638575][ T9153] bridge_slave_1: entered promiscuous mode [ 251.755907][ T5168] Bluetooth: hci3: command tx timeout [ 251.850711][ T9273] xt_hashlimit: size too large, truncated to 1048576 [ 252.113923][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.153127][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.320155][ T9153] team0: Port device team_slave_0 added [ 252.369877][ T9153] team0: Port device team_slave_1 added [ 252.457866][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 252.550123][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 252.617604][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.624847][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.659997][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.786765][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.805406][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.878864][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.932934][ T13] hsr_slave_0: left promiscuous mode [ 252.946359][ T13] hsr_slave_1: left promiscuous mode [ 252.952392][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.968617][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.978881][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 252.989949][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.997497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.021559][ T13] veth1_macvtap: left promiscuous mode [ 253.027371][ T13] veth0_macvtap: left promiscuous mode [ 253.033073][ T13] veth1_vlan: left promiscuous mode [ 253.038657][ T13] veth0_vlan: left promiscuous mode [ 253.469447][ T13] team0 (unregistering): Port device team_slave_1 removed [ 253.508982][ T13] team0 (unregistering): Port device team_slave_0 removed [ 253.839709][ T5168] Bluetooth: hci3: command tx timeout [ 254.119284][ T9132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.177527][ T9313] xt_hashlimit: size too large, truncated to 1048576 [ 254.241419][ T9132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.314916][ T9153] hsr_slave_0: entered promiscuous mode [ 254.360319][ T9153] hsr_slave_1: entered promiscuous mode [ 254.381833][ T9153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.394040][ T9153] Cannot create hsr debugfs directory [ 254.434918][ T9132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.470698][ T9315] tap0: tun_chr_ioctl cmd 1074025676 [ 254.476580][ T9315] tap0: owner set to 0 [ 254.567158][ T9132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.698025][ T9337] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 254.937932][ T9339] xt_CT: No such helper "snmp" [ 255.036798][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.172314][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.260603][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.267833][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.279727][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.286996][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.521718][ T9153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.568379][ T9153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.594762][ T9153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.650326][ T9153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.815831][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.916853][ T5168] Bluetooth: hci3: command tx timeout [ 256.052984][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.081363][ T9132] veth0_vlan: entered promiscuous mode [ 256.112876][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.124171][ T9132] veth1_vlan: entered promiscuous mode [ 256.159830][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.167069][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.216434][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.223708][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.483397][ T9132] veth0_macvtap: entered promiscuous mode [ 256.526858][ T9132] veth1_macvtap: entered promiscuous mode [ 256.578066][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.630985][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.702859][ T9132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.796968][ T9132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.825740][ T9132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.834511][ T9132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.909137][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 257.183896][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.232889][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.339707][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.351988][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.377885][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.497528][ T9153] veth0_vlan: entered promiscuous mode [ 257.677786][ T9153] veth1_vlan: entered promiscuous mode [ 257.760679][ T9153] veth0_macvtap: entered promiscuous mode [ 257.807391][ T9153] veth1_macvtap: entered promiscuous mode [ 257.865983][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.896065][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.914528][ T9153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.935144][ T9153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.944028][ T9153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.953136][ T9153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.115697][ T153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.203354][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.234945][ T153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.268328][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.295709][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.334984][ T153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.391205][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.421817][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.453927][ T153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.677532][ T153] bridge_slave_1: left allmulticast mode [ 258.683240][ T153] bridge_slave_1: left promiscuous mode [ 258.690057][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.700797][ T153] bridge_slave_0: left allmulticast mode [ 258.707009][ T153] bridge_slave_0: left promiscuous mode [ 258.712759][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.102915][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.115069][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.131589][ T153] bond0 (unregistering): Released all slaves [ 259.418118][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.429286][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.451244][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.477102][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.489955][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.582798][ T9455] lo speed is unknown, defaulting to 1000 [ 259.649293][ T153] hsr_slave_0: left promiscuous mode [ 259.660537][ T153] hsr_slave_1: left promiscuous mode [ 259.669404][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.682205][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.692198][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.703980][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.735563][ T153] veth1_macvtap: left promiscuous mode [ 259.741173][ T153] veth0_macvtap: left promiscuous mode [ 259.751279][ T153] veth1_vlan: left promiscuous mode [ 259.756875][ T153] veth0_vlan: left promiscuous mode [ 260.191174][ T153] team0 (unregistering): Port device team_slave_1 removed [ 260.231732][ T153] team0 (unregistering): Port device team_slave_0 removed [ 260.901637][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.910839][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.940383][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.969475][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.987015][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.075850][ T9455] hsr0 speed is unknown, defaulting to 1000 [ 261.201363][ T9478] lo speed is unknown, defaulting to 1000 [ 261.493814][ T9489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 261.505069][ T9489] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1101'. [ 261.597021][ T5856] Bluetooth: hci0: command tx timeout [ 261.714922][ T9455] chnl_net:caif_netlink_parms(): no params data found [ 261.765108][ T9478] hsr0 speed is unknown, defaulting to 1000 [ 262.062755][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.215906][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.238312][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.250205][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.262537][ T9455] bridge_slave_0: entered allmulticast mode [ 262.270951][ T9455] bridge_slave_0: entered promiscuous mode [ 262.354017][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.384684][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.403374][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.425116][ T9455] bridge_slave_1: entered allmulticast mode [ 262.434054][ T9455] bridge_slave_1: entered promiscuous mode [ 262.550670][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.619879][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.659049][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.978832][ T9544] team0: Refused to change device type [ 263.035589][ T5168] Bluetooth: hci3: command tx timeout [ 263.044184][ T9455] team0: Port device team_slave_0 added [ 263.053172][ T9455] team0: Port device team_slave_1 added [ 263.059817][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 263.232917][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.243227][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.271032][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.382860][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.391312][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.419904][ T9559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1128'. [ 263.430789][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.463656][ T9561] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 263.472069][ T153] bridge_slave_1: left allmulticast mode [ 263.479011][ T153] bridge_slave_1: left promiscuous mode [ 263.485189][ T9558] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 263.485768][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.501761][ T153] bridge_slave_0: left allmulticast mode [ 263.508075][ T153] bridge_slave_0: left promiscuous mode [ 263.513882][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.676090][ T5168] Bluetooth: hci0: command tx timeout [ 263.887613][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.900797][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.911404][ T153] bond0 (unregistering): Released all slaves [ 264.033857][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.059821][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.067494][ T9478] bridge_slave_0: entered allmulticast mode [ 264.075510][ T9478] bridge_slave_0: entered promiscuous mode [ 264.084187][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.098718][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.124263][ T9478] bridge_slave_1: entered allmulticast mode [ 264.142979][ T9478] bridge_slave_1: entered promiscuous mode [ 264.303391][ T9578] xt_hashlimit: size too large, truncated to 1048576 [ 264.436537][ T9455] hsr_slave_0: entered promiscuous mode [ 264.443269][ T9455] hsr_slave_1: entered promiscuous mode [ 264.474328][ T9455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.507511][ T9455] Cannot create hsr debugfs directory [ 264.569997][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.699793][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.008069][ T9478] team0: Port device team_slave_0 added [ 265.115543][ T5168] Bluetooth: hci3: command tx timeout [ 265.308588][ T9478] team0: Port device team_slave_1 added [ 265.426074][ T153] hsr_slave_0: left promiscuous mode [ 265.442475][ T153] hsr_slave_1: left promiscuous mode [ 265.456146][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.463667][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.485201][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.501421][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.512440][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 265.535547][ T153] veth1_macvtap: left promiscuous mode [ 265.541157][ T153] veth0_macvtap: left promiscuous mode [ 265.549121][ T153] veth1_vlan: left promiscuous mode [ 265.554447][ T153] veth0_vlan: left promiscuous mode [ 265.631228][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 265.755619][ T5168] Bluetooth: hci0: command tx timeout [ 266.009724][ T153] team0 (unregistering): Port device team_slave_1 removed [ 266.054108][ T153] team0 (unregistering): Port device team_slave_0 removed [ 266.505727][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.518617][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.545011][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.606534][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.613558][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.675712][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.927932][ T9478] hsr_slave_0: entered promiscuous mode [ 266.935029][ T9478] hsr_slave_1: entered promiscuous mode [ 266.943532][ T9478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.952359][ T9478] Cannot create hsr debugfs directory [ 266.960778][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 267.109518][ T9637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1153'. [ 267.156968][ T9637] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 267.195630][ T5168] Bluetooth: hci3: command tx timeout [ 267.626624][ T9455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.688892][ T9455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.719651][ T9455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.737855][ T9455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.835648][ T5168] Bluetooth: hci0: command tx timeout [ 268.018540][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.095173][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.145088][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.152369][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.231544][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.238795][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.323238][ T9478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.361968][ T9478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.403687][ T9478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.459209][ T9478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.479397][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 268.529948][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 268.789837][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 268.854791][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.920834][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.951402][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.958640][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.042369][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.049645][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.223759][ T9455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.242357][ T9722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.275672][ T5168] Bluetooth: hci3: command tx timeout [ 269.362926][ T9455] veth0_vlan: entered promiscuous mode [ 269.402152][ T9455] veth1_vlan: entered promiscuous mode [ 269.478840][ T9455] veth0_macvtap: entered promiscuous mode [ 269.499537][ T9455] veth1_macvtap: entered promiscuous mode [ 269.549749][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.559493][ T9729] xt_hashlimit: size too large, truncated to 1048576 [ 269.612835][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.659680][ T9455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.685528][ T9455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.725526][ T9455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.734303][ T9455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.951951][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.034023][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.074304][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.127232][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.151425][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.191447][ T9478] veth0_vlan: entered promiscuous mode [ 270.220450][ T9478] veth1_vlan: entered promiscuous mode [ 270.315751][ T9749] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 270.323566][ T9749] netlink: 'syz.2.1184': attribute type 2 has an invalid length. [ 270.357403][ T9749] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 270.376386][ T9749] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.1184'. [ 270.398471][ T9747] team0: Mode "" not found [ 270.548133][ T9478] veth0_macvtap: entered promiscuous mode [ 270.571046][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'. [ 270.590756][ T9478] veth1_macvtap: entered promiscuous mode [ 270.628532][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.663879][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.681557][ T9478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.698512][ T9478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.713828][ T9478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.729506][ T9478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.922713][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.957001][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.080916][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 271.132895][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.347029][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.373454][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.489275][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.622382][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.781682][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.026096][ T1148] bridge_slave_1: left allmulticast mode [ 272.031825][ T1148] bridge_slave_1: left promiscuous mode [ 272.041299][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.051418][ T1148] bridge_slave_0: left allmulticast mode [ 272.059245][ T1148] bridge_slave_0: left promiscuous mode [ 272.065116][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.520145][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.531890][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.532097][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.543928][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.557372][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.568547][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.578486][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.596871][ T1148] bond0 (unregistering): Released all slaves [ 272.639445][ T9784] lo speed is unknown, defaulting to 1000 [ 272.844759][ T9784] hsr0 speed is unknown, defaulting to 1000 [ 273.112936][ T1148] hsr_slave_0: left promiscuous mode [ 273.119911][ T1148] hsr_slave_1: left promiscuous mode [ 273.126054][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.133460][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.142175][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.149747][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.171394][ T1148] veth1_macvtap: left promiscuous mode [ 273.177220][ T1148] veth0_macvtap: left promiscuous mode [ 273.182849][ T1148] veth1_vlan: left promiscuous mode [ 273.188940][ T1148] veth0_vlan: left promiscuous mode [ 273.934068][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.945843][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.945985][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 273.965946][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.978831][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.999816][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.033509][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 274.551957][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 274.648386][ T5856] Bluetooth: hci0: command tx timeout [ 274.657040][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1202'. [ 274.696529][ T9804] lo speed is unknown, defaulting to 1000 [ 275.086198][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.093523][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.115669][ T9784] bridge_slave_0: entered allmulticast mode [ 275.131882][ T9784] bridge_slave_0: entered promiscuous mode [ 275.168644][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.185654][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.200766][ T9784] bridge_slave_1: entered allmulticast mode [ 275.216736][ T9784] bridge_slave_1: entered promiscuous mode [ 275.292803][ T9804] hsr0 speed is unknown, defaulting to 1000 [ 275.303858][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.338878][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.475652][ T9784] team0: Port device team_slave_0 added [ 275.537852][ T9784] team0: Port device team_slave_1 added [ 275.668606][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 275.756773][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.772546][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.800943][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.815063][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.822630][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.850117][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.075906][ T5856] Bluetooth: hci3: command tx timeout [ 276.249836][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.311012][ T9784] hsr_slave_0: entered promiscuous mode [ 276.337357][ T9784] hsr_slave_1: entered promiscuous mode [ 276.354016][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.369139][ T9784] Cannot create hsr debugfs directory [ 276.404382][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.430550][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 276.512956][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.554102][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1227'. [ 276.612003][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.716036][ T5856] Bluetooth: hci0: command tx timeout [ 277.009899][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.021759][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.029723][ T9804] bridge_slave_0: entered allmulticast mode [ 277.044523][ T9804] bridge_slave_0: entered promiscuous mode [ 277.095091][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.123122][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.141819][ T9804] bridge_slave_1: entered allmulticast mode [ 277.157861][ T9804] bridge_slave_1: entered promiscuous mode [ 277.335080][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.397489][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'. [ 277.403679][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.575125][ T1148] bridge_slave_1: left allmulticast mode [ 277.584537][ T1148] bridge_slave_1: left promiscuous mode [ 277.602989][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.633010][ T1148] bridge_slave_0: left allmulticast mode [ 277.645590][ T1148] bridge_slave_0: left promiscuous mode [ 277.651471][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.795132][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 278.032062][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.044105][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.055154][ T1148] bond0 (unregistering): Released all slaves [ 278.074609][ T9804] team0: Port device team_slave_0 added [ 278.083725][ T9804] team0: Port device team_slave_1 added [ 278.156087][ T5856] Bluetooth: hci3: command tx timeout [ 278.454380][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.482607][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.536197][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.575013][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.604268][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.639619][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.795945][ T5856] Bluetooth: hci0: command tx timeout [ 279.164192][ T9804] hsr_slave_0: entered promiscuous mode [ 279.186704][ T9804] hsr_slave_1: entered promiscuous mode [ 279.194677][ T9804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.221808][ T9804] Cannot create hsr debugfs directory [ 279.393694][ T9966] xt_hashlimit: size too large, truncated to 1048576 [ 279.425092][ T1148] hsr_slave_0: left promiscuous mode [ 279.448699][ T1148] hsr_slave_1: left promiscuous mode [ 279.465022][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.492386][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.507688][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.515183][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.580006][ T1148] veth1_macvtap: left promiscuous mode [ 279.585908][ T1148] veth0_macvtap: left promiscuous mode [ 279.591787][ T1148] veth1_vlan: left promiscuous mode [ 279.604418][ T1148] veth0_vlan: left promiscuous mode [ 280.162877][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 280.200649][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 280.235628][ T5856] Bluetooth: hci3: command tx timeout [ 280.612709][ T9969] : renamed from bridge_slave_0 [ 280.620533][ T9973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.638902][ T9973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.649533][ T9973] hsr0: entered promiscuous mode [ 280.654530][ T9973] hsr0: entered allmulticast mode [ 280.660051][ T9973] hsr_slave_0: entered allmulticast mode [ 280.821992][ T9784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.870053][ T9784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.876468][ T5856] Bluetooth: hci0: command tx timeout [ 280.924615][ T9784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.964169][ T9784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.397621][T10014] netlink: 'syz.2.1274': attribute type 17 has an invalid length. [ 281.422855][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.429758][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 281.442629][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1274'. [ 281.504087][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.531122][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.538348][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.574360][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.581631][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.644890][T10021] xt_hashlimit: size too large, truncated to 1048576 [ 281.869546][ T9804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.932183][ T9804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.002357][ T9804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.070148][ T9804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.317791][ T5856] Bluetooth: hci3: command tx timeout [ 282.442877][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.509749][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.540572][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.559552][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.566776][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.631363][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.638588][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.829292][ T9784] veth0_vlan: entered promiscuous mode [ 282.862797][ T9784] veth1_vlan: entered promiscuous mode [ 283.022152][ T9784] veth0_macvtap: entered promiscuous mode [ 283.041643][ T9784] veth1_macvtap: entered promiscuous mode [ 283.073930][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.118853][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.156096][ T9784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.185232][ T9784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.194296][ T9784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.235414][ T9784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.369832][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.419376][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.449501][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.502741][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.526144][ T9804] veth0_vlan: entered promiscuous mode [ 283.532342][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.564584][ T9804] veth1_vlan: entered promiscuous mode [ 283.621124][ T9804] veth0_macvtap: entered promiscuous mode [ 283.640411][ T9804] veth1_macvtap: entered promiscuous mode [ 283.707385][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 283.863339][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.890690][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.912405][ T9804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.923146][ T9804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.943252][ T9804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.959908][ T9804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.191942][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.209984][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.303818][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.350070][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.396520][ T5856] Bluetooth: hci3: command tx timeout [ 284.450339][ T3565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.678545][ T3565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.830768][ T3565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.891603][ T3565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.019070][ T3565] bridge_slave_1: left allmulticast mode [ 285.024853][ T3565] bridge_slave_1: left promiscuous mode [ 285.030885][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.041118][ T3565] bridge_slave_0: left allmulticast mode [ 285.048318][ T3565] bridge_slave_0: left promiscuous mode [ 285.054058][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.336606][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.348024][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.359497][ T3565] bond0 (unregistering): Released all slaves [ 285.852145][ T3565] hsr_slave_0: left promiscuous mode [ 285.868972][ T3565] hsr_slave_1: left promiscuous mode [ 285.875097][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.891118][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.899625][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.909047][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.934333][ T3565] veth1_macvtap: left promiscuous mode [ 285.940081][ T3565] veth0_macvtap: left promiscuous mode [ 285.947262][ T3565] veth1_vlan: left promiscuous mode [ 285.952660][ T3565] veth0_vlan: left promiscuous mode [ 286.059637][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.074639][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.084665][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.098042][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.109777][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.446008][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 286.484683][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 286.873345][T10118] lo speed is unknown, defaulting to 1000 [ 287.226760][T10118] hsr0 speed is unknown, defaulting to 1000 [ 287.477013][ T3565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.643735][ T3565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.717390][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.728060][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.760033][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.770736][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.778870][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.853911][ T3565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.017816][ T3565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.158788][ T5856] Bluetooth: hci0: command tx timeout [ 288.167460][T10140] lo speed is unknown, defaulting to 1000 [ 288.174563][T10118] chnl_net:caif_netlink_parms(): no params data found [ 288.431002][T10169] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 288.503265][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.521076][T10169] team0: Port device bond0 added [ 288.580786][ T3565] bridge_slave_1: left allmulticast mode [ 288.589841][ T3565] bridge_slave_1: left promiscuous mode [ 288.598054][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.676571][ T3565] bridge_slave_0: left allmulticast mode [ 288.682318][ T3565] bridge_slave_0: left promiscuous mode [ 288.688894][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.250899][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.267811][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.282622][ T3565] bond0 (unregistering): Released all slaves [ 289.332382][T10140] hsr0 speed is unknown, defaulting to 1000 [ 289.485163][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.513148][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.521805][T10118] bridge_slave_0: entered allmulticast mode [ 289.530313][T10118] bridge_slave_0: entered promiscuous mode [ 289.570122][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.591071][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.601563][T10118] bridge_slave_1: entered allmulticast mode [ 289.617360][T10118] bridge_slave_1: entered promiscuous mode [ 289.753733][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.811302][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.835809][ T5856] Bluetooth: hci3: command tx timeout [ 290.028436][T10118] team0: Port device team_slave_0 added [ 290.042413][ T3565] hsr_slave_0: left promiscuous mode [ 290.049320][ T3565] hsr_slave_1: left promiscuous mode [ 290.056615][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.064092][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.072269][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.080766][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.102403][ T3565] veth1_macvtap: left promiscuous mode [ 290.108460][ T3565] veth0_macvtap: left promiscuous mode [ 290.114154][ T3565] veth1_vlan: left promiscuous mode [ 290.120150][ T3565] veth0_vlan: left promiscuous mode [ 290.637004][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 290.740509][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 290.906509][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 291.339626][T10118] team0: Port device team_slave_1 added [ 291.362151][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 291.590784][T10140] chnl_net:caif_netlink_parms(): no params data found [ 291.626098][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.646040][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.687158][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 291.735445][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.753840][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.775289][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.855519][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.915423][ T5856] Bluetooth: hci3: command tx timeout [ 292.206003][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1346'. [ 292.228174][T10118] hsr_slave_0: entered promiscuous mode [ 292.234590][T10118] hsr_slave_1: entered promiscuous mode [ 292.242492][T10118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.265510][T10118] Cannot create hsr debugfs directory [ 292.285624][T10266] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1348'. [ 292.336586][T10263] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1348'. [ 292.362972][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.383990][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.392999][T10140] bridge_slave_0: entered allmulticast mode [ 292.404259][T10140] bridge_slave_0: entered promiscuous mode [ 292.418999][T10266] gretap0: entered promiscuous mode [ 292.427615][T10263] 0XD: renamed from gretap0 [ 292.434987][T10263] 0XD: left promiscuous mode [ 292.443415][T10263] 0XD: entered allmulticast mode [ 292.450658][T10263] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 292.488223][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.496632][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.504021][T10140] bridge_slave_1: entered allmulticast mode [ 292.512205][T10140] bridge_slave_1: entered promiscuous mode [ 292.729633][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.758531][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.896503][T10140] team0: Port device team_slave_0 added [ 292.930644][T10140] team0: Port device team_slave_1 added [ 293.073425][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.083750][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.113017][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.188363][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.201795][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.268926][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.345337][T10297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.465744][T10140] hsr_slave_0: entered promiscuous mode [ 293.472341][T10140] hsr_slave_1: entered promiscuous mode [ 293.514452][T10140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.530979][T10140] Cannot create hsr debugfs directory [ 293.617066][T10311] Bluetooth: MGMT ver 1.23 [ 293.774332][T10118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.832951][T10118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.869019][T10118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.940938][T10118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.995482][ T5856] Bluetooth: hci3: command tx timeout [ 294.050467][T10328] xt_hashlimit: size too large, truncated to 1048576 [ 294.394556][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.431679][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.480256][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.487536][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.543119][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.550412][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.786581][T10140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.810264][T10140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.880572][T10140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.901157][T10140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.026492][T10365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1379'. [ 295.037379][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 295.179231][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.283547][T10140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.350469][T10140] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.433153][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.440390][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.480039][T10118] veth0_vlan: entered promiscuous mode [ 295.493201][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.500532][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.580606][T10118] veth1_vlan: entered promiscuous mode [ 295.716778][T10118] veth0_macvtap: entered promiscuous mode [ 295.750826][T10118] veth1_macvtap: entered promiscuous mode [ 295.848640][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.872724][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.928850][T10118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.946756][T10118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.959212][T10118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.989748][T10118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.075423][ T5856] Bluetooth: hci3: command tx timeout [ 296.233714][T10398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1391'. [ 296.275880][T10140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.300958][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.317034][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.422810][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.442610][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.472378][T10408] vxcan1: tx address claim with different name [ 296.491407][T10140] veth0_vlan: entered promiscuous mode [ 296.541147][T10140] veth1_vlan: entered promiscuous mode [ 296.688541][T10140] veth0_macvtap: entered promiscuous mode [ 296.705130][T10140] veth1_macvtap: entered promiscuous mode [ 296.873634][T10140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.909725][T10140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.979336][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 296.983704][T10140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.024192][T10140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.049305][T10140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.061366][T10140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.227371][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.243131][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.393137][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.410182][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.712514][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.091861][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.145060][T10448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1408'. [ 298.172210][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.268993][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.516159][ T1148] bridge_slave_1: left allmulticast mode [ 298.521889][ T1148] bridge_slave_1: left promiscuous mode [ 298.530617][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.541933][ T1148] bridge_slave_0: left allmulticast mode [ 298.551463][ T1148] bridge_slave_0: left promiscuous mode [ 298.559149][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.605115][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.615160][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.624063][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.632965][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.642640][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.924466][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.936574][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.947494][ T1148] bond0 (unregistering): Released all slaves [ 298.984841][T10454] lo speed is unknown, defaulting to 1000 [ 299.186948][T10454] hsr0 speed is unknown, defaulting to 1000 [ 299.420061][ T1148] hsr_slave_0: left promiscuous mode [ 299.428540][ T1148] hsr_slave_1: left promiscuous mode [ 299.434469][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.442593][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.453058][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.460608][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.482025][ T1148] veth1_macvtap: left promiscuous mode [ 299.487765][ T1148] veth0_macvtap: left promiscuous mode [ 299.493354][ T1148] veth1_vlan: left promiscuous mode [ 299.498817][ T1148] veth0_vlan: left promiscuous mode [ 299.597218][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1409'. [ 299.700820][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 300.050931][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.068196][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.077223][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.092400][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.100514][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.261926][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 300.304340][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 300.581849][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 300.718018][ T5168] Bluetooth: hci0: command tx timeout [ 300.924155][T10473] lo speed is unknown, defaulting to 1000 [ 300.924477][T10454] chnl_net:caif_netlink_parms(): no params data found [ 301.115148][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 301.287405][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.294832][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.365770][T10454] bridge_slave_0: entered allmulticast mode [ 301.396876][T10454] bridge_slave_0: entered promiscuous mode [ 301.428160][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.450382][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.496528][T10454] bridge_slave_1: entered allmulticast mode [ 301.504420][T10454] bridge_slave_1: entered promiscuous mode [ 301.548144][T10473] hsr0 speed is unknown, defaulting to 1000 [ 301.700243][T10454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.713942][T10454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.922709][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.990052][T10454] team0: Port device team_slave_0 added [ 301.996976][T10525] xt_hashlimit: size too large, truncated to 1048576 [ 302.028174][T10454] team0: Port device team_slave_1 added [ 302.057701][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.161518][ T5168] Bluetooth: hci3: command tx timeout [ 302.231072][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.290289][T10454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.297953][T10454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.324584][T10454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.364747][T10454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.372846][T10454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.403225][T10454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.712224][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.795414][ T5168] Bluetooth: hci0: command tx timeout [ 302.940569][T10454] hsr_slave_0: entered promiscuous mode [ 302.947707][T10454] hsr_slave_1: entered promiscuous mode [ 302.954062][T10454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.963046][T10454] Cannot create hsr debugfs directory [ 303.058022][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 303.191470][T10473] chnl_net:caif_netlink_parms(): no params data found [ 303.420499][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 303.481742][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1441'. [ 303.521061][T10563] pim6reg1: entered promiscuous mode [ 303.535217][T10563] pim6reg1: entered allmulticast mode [ 303.542846][ T1148] bridge_slave_1: left allmulticast mode [ 303.553548][ T1148] bridge_slave_1: left promiscuous mode [ 303.560639][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.582826][ T1148] bridge_slave_0: left allmulticast mode [ 303.589244][ T1148] bridge_slave_0: left promiscuous mode [ 303.595084][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.981269][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.992511][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.003672][ T1148] bond0 (unregistering): Released all slaves [ 304.033219][T10572] syzkaller1: entered promiscuous mode [ 304.041692][T10572] syzkaller1: entered allmulticast mode [ 304.100468][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.108161][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.116240][T10473] bridge_slave_0: entered allmulticast mode [ 304.123567][T10473] bridge_slave_0: entered promiscuous mode [ 304.132507][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.140315][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.148271][T10473] bridge_slave_1: entered allmulticast mode [ 304.158760][T10473] bridge_slave_1: entered promiscuous mode [ 304.235454][ T5168] Bluetooth: hci3: command tx timeout [ 304.504496][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.572351][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.744513][T10473] team0: Port device team_slave_0 added [ 304.754240][T10473] team0: Port device team_slave_1 added [ 304.875501][ T5168] Bluetooth: hci0: command tx timeout [ 304.901104][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 304.966052][T10605] netlink: 'syz.2.1453': attribute type 29 has an invalid length. [ 305.037031][T10606] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1453'. [ 305.076358][T10606] unsupported nla_type 58 [ 305.087825][T10605] netlink: 'syz.2.1453': attribute type 29 has an invalid length. [ 305.142120][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.165345][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.229652][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.273606][ T1148] hsr_slave_0: left promiscuous mode [ 305.285062][ T1148] hsr_slave_1: left promiscuous mode [ 305.302997][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.320670][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.356440][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.371111][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.445625][ T1148] veth1_macvtap: left promiscuous mode [ 305.455707][ T1148] veth0_macvtap: left promiscuous mode [ 305.461563][ T1148] veth1_vlan: left promiscuous mode [ 305.469880][ T1148] veth0_vlan: left promiscuous mode [ 306.043352][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 306.083869][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 306.318826][ T5168] Bluetooth: hci3: command tx timeout [ 306.469185][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.477133][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.503881][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.797778][T10473] hsr_slave_0: entered promiscuous mode [ 306.804841][T10473] hsr_slave_1: entered promiscuous mode [ 306.816331][T10473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.824042][T10473] Cannot create hsr debugfs directory [ 306.955412][ T5168] Bluetooth: hci0: command tx timeout [ 307.089822][T10454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.201828][T10454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.218423][T10454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.259426][T10454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.380696][T10663] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 307.400014][T10663] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1470'. [ 307.413898][T10662] trusted_key: syz.2.1471 sent an empty control message without MSG_MORE. [ 307.647153][T10454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.695345][T10454] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.774534][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.781707][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.844841][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.852110][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.938064][T10473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.970534][T10473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.006575][T10473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.028530][T10473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.273147][T10473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.398390][ T5168] Bluetooth: hci3: command tx timeout [ 308.450080][T10473] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.477168][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.484385][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.547031][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.554190][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.663187][T10709] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 308.759005][T10713] bond4: (slave bridge0): making interface the new active one [ 308.769324][T10713] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 308.830234][T10454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.003810][T10454] veth0_vlan: entered promiscuous mode [ 309.040885][T10454] veth1_vlan: entered promiscuous mode [ 309.145928][T10454] veth0_macvtap: entered promiscuous mode [ 309.161954][T10725] syzkaller1: entered promiscuous mode [ 309.167791][T10725] syzkaller1: entered allmulticast mode [ 309.180700][T10454] veth1_macvtap: entered promiscuous mode [ 309.361002][T10454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.402868][T10454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.422658][T10454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.432874][T10454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.456624][T10454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.466809][T10454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.491949][T10740] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 309.571865][T10739] policy can only be matched on NF_INET_PRE_ROUTING [ 309.571887][T10739] unable to load match [ 309.627826][T10473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.791389][T10747] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1499'. [ 309.827623][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.844202][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.907589][T10473] veth0_vlan: entered promiscuous mode [ 309.928359][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.958647][T10473] veth1_vlan: entered promiscuous mode [ 309.965926][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.071430][T10473] veth0_macvtap: entered promiscuous mode [ 310.115869][T10473] veth1_macvtap: entered promiscuous mode [ 310.181595][T10473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.202295][T10473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.215759][T10473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.224736][T10473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.233990][T10473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.250413][T10473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.379728][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.401126][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.439702][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.448626][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.582388][T10768] ip6gre1: entered promiscuous mode [ 310.847564][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 311.018299][T10784] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1512'. [ 311.154260][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.467152][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.562024][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.649039][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.773246][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.784584][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.794227][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.804465][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.816639][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.857341][ T1148] bridge_slave_1: left allmulticast mode [ 311.863059][ T1148] bridge_slave_1: left promiscuous mode [ 311.869767][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.879809][ T1148] bridge_slave_0: left allmulticast mode [ 311.886102][ T1148] bridge_slave_0: left promiscuous mode [ 311.891833][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.204602][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.219339][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.230020][ T1148] bond0 (unregistering): Released all slaves [ 312.271788][T10791] lo speed is unknown, defaulting to 1000 [ 312.486350][T10791] hsr0 speed is unknown, defaulting to 1000 [ 312.760301][ T1148] hsr_slave_0: left promiscuous mode [ 312.766941][ T1148] hsr_slave_1: left promiscuous mode [ 312.772822][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.783848][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.792150][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.800387][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.822144][ T1148] veth1_macvtap: left promiscuous mode [ 312.827833][ T1148] veth0_macvtap: left promiscuous mode [ 312.833454][ T1148] veth1_vlan: left promiscuous mode [ 312.838877][ T1148] veth0_vlan: left promiscuous mode [ 313.403120][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.419662][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.428091][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.451912][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.460616][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.461123][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 313.526456][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 313.922985][ T5856] Bluetooth: hci0: command tx timeout [ 314.023952][T10791] chnl_net:caif_netlink_parms(): no params data found [ 314.325504][T10805] lo speed is unknown, defaulting to 1000 [ 314.364181][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.376133][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.383435][T10791] bridge_slave_0: entered allmulticast mode [ 314.392127][T10791] bridge_slave_0: entered promiscuous mode [ 314.404237][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.431490][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.449136][T10791] bridge_slave_1: entered allmulticast mode [ 314.457466][T10791] bridge_slave_1: entered promiscuous mode [ 314.709749][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.742312][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.855723][T10805] hsr0 speed is unknown, defaulting to 1000 [ 314.860989][T10835] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 314.886961][T10791] team0: Port device team_slave_0 added [ 314.897769][T10791] team0: Port device team_slave_1 added [ 314.994514][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.020812][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.028156][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.055173][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.114770][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.123583][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.151702][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.375001][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.447345][T10791] hsr_slave_0: entered promiscuous mode [ 315.454264][T10791] hsr_slave_1: entered promiscuous mode [ 315.467817][T10791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.478559][T10791] Cannot create hsr debugfs directory [ 315.520996][ T5856] Bluetooth: hci3: command tx timeout [ 315.530653][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.703697][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.794599][T10866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.922910][T10869] xt_hashlimit: size too large, truncated to 1048576 [ 316.005564][ T5856] Bluetooth: hci0: command tx timeout [ 316.130043][T10805] chnl_net:caif_netlink_parms(): no params data found [ 316.572075][ T1148] bridge_slave_1: left allmulticast mode [ 316.579420][ T1148] bridge_slave_1: left promiscuous mode [ 316.585316][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.603962][ T1148] bridge_slave_0: left allmulticast mode [ 316.609872][ T1148] bridge_slave_0: left promiscuous mode [ 316.616142][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.797685][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'. [ 317.050851][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.063268][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.073822][ T1148] bond0 (unregistering): Released all slaves [ 317.369859][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.386588][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.398759][T10805] bridge_slave_0: entered allmulticast mode [ 317.422809][T10805] bridge_slave_0: entered promiscuous mode [ 317.566264][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.579353][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.587203][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1551'. [ 317.596891][T10805] bridge_slave_1: entered allmulticast mode [ 317.605409][ T5856] Bluetooth: hci3: command tx timeout [ 317.612566][T10805] bridge_slave_1: entered promiscuous mode [ 317.718506][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.751767][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.096360][T10805] team0: Port device team_slave_0 added [ 318.129987][T10805] team0: Port device team_slave_1 added [ 318.183856][ T1148] hsr_slave_0: left promiscuous mode [ 318.186126][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 318.198942][ T1148] hsr_slave_1: left promiscuous mode [ 318.240884][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.249476][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.255787][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 318.279438][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.299518][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.308426][T10927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.371423][ T1148] veth1_macvtap: left promiscuous mode [ 318.405854][ T1148] veth0_macvtap: left promiscuous mode [ 318.423086][ T1148] veth1_vlan: left promiscuous mode [ 318.429616][ T1148] veth0_vlan: left promiscuous mode [ 318.702621][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 318.772213][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 318.985457][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 319.029820][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 319.409975][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.418280][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.449457][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.462751][T10791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.546165][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.553388][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.605781][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.642316][T10791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.664920][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 319.676934][ T5856] Bluetooth: hci3: command tx timeout [ 319.695648][T10791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.714741][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 319.751891][T10791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.811096][T10805] hsr_slave_0: entered promiscuous mode [ 319.843324][T10805] hsr_slave_1: entered promiscuous mode [ 319.852115][T10805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.871125][T10805] Cannot create hsr debugfs directory [ 320.821549][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.936791][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.019467][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.026708][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.045648][T10973] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1566'. [ 321.099857][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.107098][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.253791][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1569'. [ 321.385181][T10805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.403718][T10805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.407264][T10987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.434883][T10805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.456999][T10805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.751248][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.758254][ T5856] Bluetooth: hci3: command tx timeout [ 321.852713][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.881312][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.920411][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.927615][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.982112][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.989378][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.066078][T11010] 0XD: left allmulticast mode [ 322.100459][T11010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.113486][T11007] xt_CT: No such helper "syz0" [ 322.126041][T11009] lo speed is unknown, defaulting to 1000 [ 322.287119][T10791] veth0_vlan: entered promiscuous mode [ 322.332472][T11018] __nla_validate_parse: 5 callbacks suppressed [ 322.332491][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 322.354875][T10791] veth1_vlan: entered promiscuous mode [ 322.384609][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 322.437536][T10791] veth0_macvtap: entered promiscuous mode [ 322.458722][T10791] veth1_macvtap: entered promiscuous mode [ 322.509678][T11009] hsr0 speed is unknown, defaulting to 1000 [ 322.691891][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1582'. [ 322.696516][T11029] tipc: Resetting bearer [ 322.724390][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.862660][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.892112][T11034] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 322.913984][T11034] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 322.998469][T10791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.009802][T10791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.022431][T10791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.032045][T10791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.053574][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1587'. [ 323.110576][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1587'. [ 323.219543][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.464162][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.481092][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.651228][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.672074][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.673306][T10805] veth0_vlan: entered promiscuous mode [ 323.723253][T10805] veth1_vlan: entered promiscuous mode [ 323.835217][T10805] veth0_macvtap: entered promiscuous mode [ 323.882111][T10805] veth1_macvtap: entered promiscuous mode [ 324.022048][T11063] lo speed is unknown, defaulting to 1000 [ 324.274391][ T1334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.313757][T11063] hsr0 speed is unknown, defaulting to 1000 [ 324.322394][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.468838][ T1334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.545336][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.569158][T10805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.585905][T10805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.594682][T10805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.607764][T10805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.644769][ T1334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.737555][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.751996][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.780866][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.790223][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.827368][ T1334] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.166191][ T1334] bridge_slave_1: left allmulticast mode [ 325.171898][ T1334] bridge_slave_1: left promiscuous mode [ 325.179389][ T1334] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.190227][ T1334] bridge_slave_0: left allmulticast mode [ 325.198441][ T1334] bridge_slave_0: left promiscuous mode [ 325.204211][ T1334] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.543915][ T1334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.559820][ T1334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.572791][ T1334] bond0 (unregistering): Released all slaves [ 325.951071][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.965609][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.974903][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.985176][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.993591][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.048407][ T1334] hsr_slave_0: left promiscuous mode [ 326.054592][ T1334] hsr_slave_1: left promiscuous mode [ 326.064588][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.073126][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.082680][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.090318][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.110732][ T1334] veth1_macvtap: left promiscuous mode [ 326.117012][ T1334] veth0_macvtap: left promiscuous mode [ 326.122636][ T1334] veth1_vlan: left promiscuous mode [ 326.128084][ T1334] veth0_vlan: left promiscuous mode [ 326.533487][ T1334] team0 (unregistering): Port device team_slave_1 removed [ 326.574519][ T1334] team0 (unregistering): Port device team_slave_0 removed [ 326.939432][T11076] lo speed is unknown, defaulting to 1000 [ 327.113574][T11076] hsr0 speed is unknown, defaulting to 1000 [ 327.376868][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 327.428425][T11076] chnl_net:caif_netlink_parms(): no params data found [ 327.527676][ T1334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.542634][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 327.754221][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.755960][ T1334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.772943][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.784884][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.802928][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.818746][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.863054][ T1334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.880581][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 327.983232][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.990626][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.998101][T11076] bridge_slave_0: entered allmulticast mode [ 328.005771][T11076] bridge_slave_0: entered promiscuous mode [ 328.059590][ T1334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.076152][ T5168] Bluetooth: hci0: command tx timeout [ 328.084536][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.091945][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.100506][T11076] bridge_slave_1: entered allmulticast mode [ 328.108327][T11076] bridge_slave_1: entered promiscuous mode [ 328.210572][T11098] lo speed is unknown, defaulting to 1000 [ 328.274912][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.314241][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.406761][T11113] netlink: 'syz.1.1609': attribute type 13 has an invalid length. [ 328.419263][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 328.447172][T11076] team0: Port device team_slave_0 added [ 328.496502][T11076] team0: Port device team_slave_1 added [ 328.508463][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 328.688210][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.695226][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.745350][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.774793][T11098] hsr0 speed is unknown, defaulting to 1000 [ 328.780061][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 328.804074][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.814231][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.843385][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.926051][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 328.970456][ T1334] bridge_slave_1: left allmulticast mode [ 328.977413][ T1334] bridge_slave_1: left promiscuous mode [ 328.983394][ T1334] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.988634][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 329.002376][ T1334] bridge_slave_0: left allmulticast mode [ 329.008600][ T1334] bridge_slave_0: left promiscuous mode [ 329.015457][ T1334] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.341026][ T1334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.352069][ T1334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.362603][ T1334] bond0 (unregistering): Released all slaves [ 329.498128][T11134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.552130][T11138] macvlan0: entered promiscuous mode [ 329.557863][T11138] macvlan0: entered allmulticast mode [ 329.564449][T11138] bond5: entered promiscuous mode [ 329.570459][T11138] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 329.582374][T11138] bond5: left promiscuous mode [ 329.629422][T11076] hsr_slave_0: entered promiscuous mode [ 329.636802][T11076] hsr_slave_1: entered promiscuous mode [ 329.643230][T11076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.651243][T11076] Cannot create hsr debugfs directory [ 329.915697][ T5168] Bluetooth: hci3: command tx timeout [ 330.161076][ T5168] Bluetooth: hci0: command tx timeout [ 330.780249][ T1334] hsr_slave_0: left promiscuous mode [ 330.790226][ T1334] hsr_slave_1: left promiscuous mode [ 330.798794][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.802827][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 330.806932][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.823542][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.831247][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.852157][ T1334] veth1_macvtap: left promiscuous mode [ 330.858369][ T1334] veth0_macvtap: left promiscuous mode [ 330.864062][ T1334] veth1_vlan: left promiscuous mode [ 330.870551][ T1334] veth0_vlan: left promiscuous mode [ 331.312018][ T1334] team0 (unregistering): Port device team_slave_1 removed [ 331.355276][ T1334] team0 (unregistering): Port device team_slave_0 removed [ 331.988082][T11098] chnl_net:caif_netlink_parms(): no params data found [ 331.995664][ T5168] Bluetooth: hci3: command tx timeout [ 332.192248][T11180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1629'. [ 332.235544][ T5168] Bluetooth: hci0: command tx timeout [ 332.364703][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.387516][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.414481][T11098] bridge_slave_0: entered allmulticast mode [ 332.432432][T11098] bridge_slave_0: entered promiscuous mode [ 332.463956][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.483411][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.501623][T11098] bridge_slave_1: entered allmulticast mode [ 332.517212][T11098] bridge_slave_1: entered promiscuous mode [ 332.535961][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1633'. [ 332.722300][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.809441][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.025962][T11205] xt_CT: No such helper "syz0" [ 333.048488][T11098] team0: Port device team_slave_0 added [ 333.077981][T11098] team0: Port device team_slave_1 added [ 333.165294][T11076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.352395][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.370051][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.452975][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.469650][T11076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.490801][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.498756][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.530905][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.549696][T11076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.609470][T11076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.078110][ T5168] Bluetooth: hci3: command tx timeout [ 334.318250][ T5168] Bluetooth: hci0: command tx timeout [ 334.925158][T11216] netlink: 'syz.2.1639': attribute type 29 has an invalid length. [ 334.939934][T11098] hsr_slave_0: entered promiscuous mode [ 334.946506][T11098] hsr_slave_1: entered promiscuous mode [ 334.952654][T11098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.960474][T11098] Cannot create hsr debugfs directory [ 335.262231][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 335.416916][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.482980][T11245] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 335.512547][T11237] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 335.586126][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 335.641221][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.831299][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.838548][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.920774][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.928031][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.162603][ T5168] Bluetooth: hci3: command tx timeout [ 336.212643][T11098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.229590][T11098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.242624][T11098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.260398][T11098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.545060][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.617207][T11098] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.677112][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.684326][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.719524][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.737097][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.744307][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.804685][T11098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.816759][T11098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.929791][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 336.948666][T11076] veth0_vlan: entered promiscuous mode [ 337.052865][T11076] veth1_vlan: entered promiscuous mode [ 337.157070][T11076] veth0_macvtap: entered promiscuous mode [ 337.178740][T11076] veth1_macvtap: entered promiscuous mode [ 337.194892][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1661'. [ 337.251625][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.284289][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.322140][T11076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.334532][T11076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.344987][T11076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.355002][T11076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.364666][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'. [ 337.379967][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.477819][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 337.595946][T11310] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 337.621448][T11098] veth0_vlan: entered promiscuous mode [ 337.663339][T11098] veth1_vlan: entered promiscuous mode [ 337.689332][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.711941][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.810960][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.820419][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.853679][T11098] veth0_macvtap: entered promiscuous mode [ 337.899467][T11098] veth1_macvtap: entered promiscuous mode [ 338.049606][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.120211][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.138123][T11098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.156302][T11098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.168709][T11098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.179591][T11098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.429366][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.491356][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.521816][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.575120][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.689250][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.743421][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.763692][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.799544][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.184120][ T1148] bridge_slave_1: left allmulticast mode [ 339.190988][ T1148] bridge_slave_1: left promiscuous mode [ 339.197713][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.210571][ T1148] bridge_slave_0: left allmulticast mode [ 339.216516][ T1148] bridge_slave_0: left promiscuous mode [ 339.222260][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.539466][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.551281][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.562614][ T1148] bond0 (unregistering): Released all slaves [ 340.071891][ T1148] hsr_slave_0: left promiscuous mode [ 340.081154][ T1148] hsr_slave_1: left promiscuous mode [ 340.088033][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.108252][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.119412][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.127249][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.153503][ T1148] veth1_macvtap: left promiscuous mode [ 340.160441][ T1148] veth0_macvtap: left promiscuous mode [ 340.166698][ T1148] veth1_vlan: left promiscuous mode [ 340.172087][ T1148] veth0_vlan: left promiscuous mode [ 340.270916][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.280799][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.289279][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.314388][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.329984][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.660756][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 340.701124][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 341.093325][T11332] lo speed is unknown, defaulting to 1000 [ 341.273123][T11332] hsr0 speed is unknown, defaulting to 1000 [ 341.437633][T11332] chnl_net:caif_netlink_parms(): no params data found [ 341.489863][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.577469][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.592773][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.600835][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.608833][T11332] bridge_slave_0: entered allmulticast mode [ 341.616692][T11332] bridge_slave_0: entered promiscuous mode [ 341.694647][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 341.698238][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.769370][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.785525][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.798867][T11332] bridge_slave_1: entered allmulticast mode [ 341.817526][T11332] bridge_slave_1: entered promiscuous mode [ 341.893210][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 341.957716][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.043601][T11332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.094688][T11332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.181164][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 342.193626][T11332] team0: Port device team_slave_0 added [ 342.218436][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.236463][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.244922][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.256250][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.264043][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.282853][T11332] team0: Port device team_slave_1 added [ 342.320954][T11332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.329054][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.355724][T11332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.390743][T11332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.399518][ T5168] Bluetooth: hci0: command tx timeout [ 342.423579][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.451169][T11332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.538525][ T1148] bridge_slave_1: left allmulticast mode [ 342.544231][ T1148] bridge_slave_1: left promiscuous mode [ 342.553454][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.564999][ T1148] bridge_slave_0: left allmulticast mode [ 342.575433][ T1148] bridge_slave_0: left promiscuous mode [ 342.581330][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.962786][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.973891][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.984452][ T1148] bond0 (unregistering): Released all slaves [ 343.048748][T11332] hsr_slave_0: entered promiscuous mode [ 343.065859][T11332] hsr_slave_1: entered promiscuous mode [ 343.072166][T11332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.093475][T11332] Cannot create hsr debugfs directory [ 343.108210][T11358] lo speed is unknown, defaulting to 1000 [ 343.343985][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059c52400: rx timeout, send abort [ 343.458434][T11358] hsr0 speed is unknown, defaulting to 1000 [ 343.613137][T11374] tipc: Enabled bearer , priority 0 [ 343.704235][T11374] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 343.712042][T11374] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 343.735385][T11374] tipc: Resetting bearer [ 343.753143][ T1148] hsr_slave_0: left promiscuous mode [ 343.759955][ T1148] hsr_slave_1: left promiscuous mode [ 343.766197][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.773804][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.781970][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.789593][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.814488][ T1148] veth1_macvtap: left promiscuous mode [ 343.820315][ T1148] veth0_macvtap: left promiscuous mode [ 343.826109][ T1148] veth1_vlan: left promiscuous mode [ 343.831519][ T1148] veth0_vlan: left promiscuous mode [ 343.853579][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059c52400: abort rx timeout. Force session deactivation [ 344.322611][ T5168] Bluetooth: hci3: command tx timeout [ 344.359527][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 344.401996][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 344.479493][ T5168] Bluetooth: hci0: command tx timeout [ 344.821427][T11375] tipc: Resetting bearer [ 344.978439][T11384] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 345.162396][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 345.281098][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1692'. [ 345.303774][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1693'. [ 345.319251][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 345.410685][T11358] chnl_net:caif_netlink_parms(): no params data found [ 345.568190][T11409] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 345.576772][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1695'. [ 345.610391][T11404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.667095][T11409] team0: Device geneve0 is of different type [ 345.679754][T11409] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 345.752959][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 345.779138][T11332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.812459][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 345.824528][T11404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.841129][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.849658][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.851854][T11417] rdma_rxe: rxe_newlink: failed to add lo [ 345.861715][T11358] bridge_slave_0: entered allmulticast mode [ 345.868889][T11417] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 345.879859][T11358] bridge_slave_0: entered promiscuous mode [ 345.888339][T11332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.917427][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.924831][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.932337][T11358] bridge_slave_1: entered allmulticast mode [ 345.940798][T11358] bridge_slave_1: entered promiscuous mode [ 345.949405][T11332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.994932][T11404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.041711][T11332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.131581][T11404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.171640][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.200170][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.299624][T11358] team0: Port device team_slave_0 added [ 346.313377][T11431] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 346.317292][T11358] team0: Port device team_slave_1 added [ 346.398492][ T5168] Bluetooth: hci3: command tx timeout [ 346.418171][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.425690][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.452288][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.500755][T11404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.521257][T11404] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.533309][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.555583][ T5168] Bluetooth: hci0: command tx timeout [ 346.556007][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.608703][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.659913][T11404] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.777186][T11358] hsr_slave_0: entered promiscuous mode [ 346.784054][T11358] hsr_slave_1: entered promiscuous mode [ 346.804002][T11358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.812733][T11358] Cannot create hsr debugfs directory [ 346.850127][T11404] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.878062][T11444] __nla_validate_parse: 2 callbacks suppressed [ 346.878087][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1708'. [ 346.924457][T11446] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 347.024095][T11448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 347.049055][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 347.061646][T11332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.090829][T11448] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 347.254615][T11332] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.389155][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.396441][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.405778][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 347.511331][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.518673][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.744676][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1720'. [ 347.968363][T11479] xt_TCPMSS: Only works on TCP SYN packets [ 348.099387][T11482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.479870][ T5168] Bluetooth: hci3: command tx timeout [ 348.637299][ T5168] Bluetooth: hci0: command tx timeout [ 349.104496][T11482] ------------[ cut here ]------------ [ 349.110302][T11482] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 349.127354][T11482] WARNING: CPU: 1 PID: 11482 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.140347][T11482] Modules linked in: [ 349.144566][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.4.1723 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 349.157037][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.167060][T11332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.169834][T11482] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.184458][T11482] Code: 71 17 00 00 48 c7 c7 c0 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 ff 8f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 5d 56 cc fa 90 0f 0b 90 e9 fe fe ff [ 349.195824][T11332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.204811][T11482] RSP: 0018:ffffc900034e6fd0 EFLAGS: 00010282 [ 349.220708][T11482] RAX: e3f6b47ddf1b1100 RBX: 0000000000000014 RCX: 0000000000080000 [ 349.228777][T11482] RDX: ffffc9000d94f000 RSI: 0000000000004f67 RDI: 0000000000004f68 [ 349.236861][T11482] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 349.244884][T11482] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000 [ 349.252983][T11482] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 349.261170][T11482] FS: 00007f54ec2b36c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 349.270557][T11482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.277441][T11482] CR2: 0000001b3170fff8 CR3: 0000000078986000 CR4: 00000000003526f0 [ 349.285617][T11482] Call Trace: [ 349.288949][T11482] [ 349.291928][T11482] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 349.298052][T11482] mac80211_hwsim_sta_add+0xa3/0x310 [ 349.303418][T11482] drv_sta_state+0x8be/0x1840 [ 349.308319][T11482] sta_info_insert_rcu+0xd32/0x1940 [ 349.313607][T11482] ? sta_info_insert_rcu+0x2ce/0x1940 [ 349.319130][T11482] sta_info_insert+0x16/0xc0 [ 349.323866][T11482] rdev_add_station+0x108/0x290 [ 349.328823][T11482] nl80211_new_station+0x1723/0x1b40 [ 349.334177][T11482] ? __pfx_nl80211_new_station+0x10/0x10 [ 349.339909][T11482] ? netdev_run_todo+0xe1d/0xea0 [ 349.345042][T11482] ? nl80211_pre_doit+0x4f1/0x930 [ 349.350194][T11482] genl_family_rcv_msg_doit+0x215/0x300 [ 349.355896][T11482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.362054][T11482] ? bpf_lsm_capable+0x9/0x20 [ 349.366828][T11482] ? security_capable+0x7e/0x2e0 [ 349.371831][T11482] genl_rcv_msg+0x60e/0x790 [ 349.376540][T11482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.381627][T11482] ? ref_tracker_free+0x63a/0x7d0 [ 349.386747][T11482] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 349.392190][T11482] ? __pfx_nl80211_new_station+0x10/0x10 [ 349.398036][T11482] ? __pfx_nl80211_post_doit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.403556][T11482] ? __pfx_ref_tracker_free+0x10/0x10 [ 349.409062][T11482] netlink_rcv_skb+0x205/0x470 [ 349.413891][T11482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.419584][T11482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.424952][T11482] ? down_read+0x1ad/0x2e0 [ 349.429500][T11482] genl_rcv+0x28/0x40 [ 349.433926][T11482] netlink_unicast+0x758/0x8d0 [ 349.438881][T11482] netlink_sendmsg+0x805/0xb30 [ 349.443714][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.449149][T11482] ? aa_sock_msg_perm+0x94/0x160 [ 349.454165][T11482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.459576][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.464923][T11482] __sock_sendmsg+0x219/0x270 [ 349.469718][T11482] ____sys_sendmsg+0x505/0x830 [ 349.474545][T11482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.479957][T11482] ? import_iovec+0x74/0xa0 [ 349.484528][T11482] ___sys_sendmsg+0x21f/0x2a0 [ 349.489326][T11482] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.494644][T11482] ? __fget_files+0x2a/0x420 [ 349.499386][T11482] ? __fget_files+0x3a0/0x420 [ 349.504175][T11482] __x64_sys_sendmsg+0x19b/0x260 [ 349.509220][T11482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.514774][T11482] ? rcu_is_watching+0x15/0xb0 [ 349.519759][T11482] ? do_syscall_64+0xbe/0x3b0 [ 349.524596][T11482] do_syscall_64+0xfa/0x3b0 [ 349.529208][T11482] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.534473][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.540674][T11482] ? clear_bhb_loop+0x60/0xb0 [ 349.546790][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.552750][T11482] RIP: 0033:0x7f54eb38e929 [ 349.557282][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.577025][T11482] RSP: 002b:00007f54ec2b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.585541][T11482] RAX: ffffffffffffffda RBX: 00007f54eb5b6080 RCX: 00007f54eb38e929 [ 349.593548][T11482] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 349.601977][T11482] RBP: 00007f54eb410b39 R08: 0000000000000000 R09: 0000000000000000 [ 349.610063][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.618118][T11482] R13: 0000000000000000 R14: 00007f54eb5b6080 R15: 00007ffe4bf2f7a8 [ 349.626322][T11482] [ 349.629572][T11482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 349.636891][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.4.1723 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 349.649002][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.659107][T11482] Call Trace: [ 349.662424][T11482] [ 349.665384][T11482] dump_stack_lvl+0x99/0x250 [ 349.670026][T11482] ? __asan_memcpy+0x40/0x70 [ 349.674647][T11482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.679890][T11482] ? __pfx__printk+0x10/0x10 [ 349.684534][T11482] panic+0x2db/0x790 [ 349.688473][T11482] ? __pfx_panic+0x10/0x10 [ 349.692956][T11482] __warn+0x31b/0x4b0 [ 349.697038][T11482] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.703131][T11482] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.709224][T11482] report_bug+0x2be/0x4f0 [ 349.713578][T11482] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.719671][T11482] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.725765][T11482] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 349.731846][T11482] handle_bug+0x84/0x160 [ 349.736197][T11482] exc_invalid_op+0x1a/0x50 [ 349.740735][T11482] asm_exc_invalid_op+0x1a/0x20 [ 349.745598][T11482] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 349.752358][T11482] Code: 71 17 00 00 48 c7 c7 c0 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 ff 8f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 5d 56 cc fa 90 0f 0b 90 e9 fe fe ff [ 349.772000][T11482] RSP: 0018:ffffc900034e6fd0 EFLAGS: 00010282 [ 349.778095][T11482] RAX: e3f6b47ddf1b1100 RBX: 0000000000000014 RCX: 0000000000080000 [ 349.786094][T11482] RDX: ffffc9000d94f000 RSI: 0000000000004f67 RDI: 0000000000004f68 [ 349.794160][T11482] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 349.802185][T11482] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000 [ 349.810190][T11482] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 349.818245][T11482] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 349.824265][T11482] mac80211_hwsim_sta_add+0xa3/0x310 [ 349.829577][T11482] drv_sta_state+0x8be/0x1840 [ 349.834303][T11482] sta_info_insert_rcu+0xd32/0x1940 [ 349.839520][T11482] ? sta_info_insert_rcu+0x2ce/0x1940 [ 349.844918][T11482] sta_info_insert+0x16/0xc0 [ 349.849551][T11482] rdev_add_station+0x108/0x290 [ 349.854447][T11482] nl80211_new_station+0x1723/0x1b40 [ 349.859782][T11482] ? __pfx_nl80211_new_station+0x10/0x10 [ 349.865440][T11482] ? netdev_run_todo+0xe1d/0xea0 [ 349.870436][T11482] ? nl80211_pre_doit+0x4f1/0x930 [ 349.875502][T11482] genl_family_rcv_msg_doit+0x215/0x300 [ 349.881095][T11482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.887193][T11482] ? bpf_lsm_capable+0x9/0x20 [ 349.891888][T11482] ? security_capable+0x7e/0x2e0 [ 349.896870][T11482] genl_rcv_msg+0x60e/0x790 [ 349.901400][T11482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.906450][T11482] ? ref_tracker_free+0x63a/0x7d0 [ 349.911527][T11482] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 349.916920][T11482] ? __pfx_nl80211_new_station+0x10/0x10 [ 349.922566][T11482] ? __pfx_nl80211_post_doit+0x10/0x10 [ 349.928038][T11482] ? __pfx_ref_tracker_free+0x10/0x10 [ 349.933430][T11482] netlink_rcv_skb+0x205/0x470 [ 349.938238][T11482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.943293][T11482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.948697][T11482] ? down_read+0x1ad/0x2e0 [ 349.953132][T11482] genl_rcv+0x28/0x40 [ 349.957134][T11482] netlink_unicast+0x758/0x8d0 [ 349.961917][T11482] netlink_sendmsg+0x805/0xb30 [ 349.966701][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.972015][T11482] ? aa_sock_msg_perm+0x94/0x160 [ 349.976996][T11482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.982331][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.987654][T11482] __sock_sendmsg+0x219/0x270 [ 349.992357][T11482] ____sys_sendmsg+0x505/0x830 [ 349.997149][T11482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.002475][T11482] ? import_iovec+0x74/0xa0 [ 350.006999][T11482] ___sys_sendmsg+0x21f/0x2a0 [ 350.011700][T11482] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.016947][T11482] ? __fget_files+0x2a/0x420 [ 350.021559][T11482] ? __fget_files+0x3a0/0x420 [ 350.026260][T11482] __x64_sys_sendmsg+0x19b/0x260 [ 350.031221][T11482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.036706][T11482] ? rcu_is_watching+0x15/0xb0 [ 350.041510][T11482] ? do_syscall_64+0xbe/0x3b0 [ 350.046238][T11482] do_syscall_64+0xfa/0x3b0 [ 350.050770][T11482] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.056015][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.062111][T11482] ? clear_bhb_loop+0x60/0xb0 [ 350.066815][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.072727][T11482] RIP: 0033:0x7f54eb38e929 [ 350.077162][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.096789][T11482] RSP: 002b:00007f54ec2b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.105230][T11482] RAX: ffffffffffffffda RBX: 00007f54eb5b6080 RCX: 00007f54eb38e929 [ 350.113228][T11482] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 350.121249][T11482] RBP: 00007f54eb410b39 R08: 0000000000000000 R09: 0000000000000000 [ 350.129240][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.137245][T11482] R13: 0000000000000000 R14: 00007f54eb5b6080 R15: 00007ffe4bf2f7a8 [ 350.145275][T11482] [ 350.148602][T11482] Kernel Offset: disabled [ 350.152962][T11482] Rebooting in 86400 seconds..